#MCP serverStars · npm/mo

1. 1OpenWork MCP Gatewaydifferent-ai/openworkYour OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.RemoteAccount needed24k
2. 2Semgrepsemgrep/semgrep/mcpScan code for security vulnerabilities using Semgrep.LocalAccount needed17k
3. 3IDA Promrexodia/ida-pro-mcpIDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.LocalFree13k
4. 4GhidraMCPLaurieWired/GhidraMCPAutonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.LocalFree12k
5. 5NotFairnowork-studio/notfair-pluginOAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.RemoteAccount needed4.1k
6. 6Jadx AIzinja-coder/jadx-ai-mcpJADX decompiler plugin providing live, LLM-assisted reverse engineering.LocalFree3k
7. 7GoModelENTERPILOT/GoModelSelf-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.LocalFree1.3k
8. 8Power BI Authoring MCP Server (Local)microsoft/powerbi-modeling-mcpThe Power BI Authoring MCP server lets an AI agent create and change Power BI semantic models.LocalFree1.3k
9. 9SafeDep Vetsafedep/vetLocally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.LocalAccount needed1.1k
10. 10HOL Guardhashgraph-online/hol-guardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.LocalFree1k
11. 11Skylosduriantaco/skylosDead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assisted remediation.LocalFree858
12. 12AttestixVibeTensor/attestixAI agent identity, signed credentials, delegated authority and governance evidence.LocalFree841
13. 13Apktoolzinja-coder/apktool-mcp-serverAutomate reverse engineering of Android APKs with Apktool.LocalFree699
14. 14Emilia Protocolemiliaprotocol/emilia-protocolRequires a named human's approval before irreversible agent actions such as payments or deploys, then issues an offline-verifiable Ed25519 trust receipt.LocalFree601
15. 15Binary Ninjafosdickio/binary_ninja_mcpBinary Ninja plugin and bridge for automating binary analysis and reverse engineering.LocalFree456
16. 16Wiresharkbx33661/Wireshark-MCPWireshark packet analysis: capture, protocol statistics, field extraction and security analysis.LocalFree361
17. 17Radare2radareorg/radare2-mcpDisassemble and inspect binaries for reverse engineering with the Radare2 disassembler.LocalFree340
18. 18DashClawucsandman/DashClawFail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approval and logs every decision to a causal ledger.LocalAccount needed313
19. 19squirrelscansquirrelscan/squirrelscanWebsite QA for your coding agent: audit SEO, performance, security, accessibility over MCP.RemoteAccount needed301
20. 20Vibe Prospectingexplorium-ai/vibeprospecting-mcpB2B company and contact data for lead lists, enrichment, research, and outreach. OAuth sign-in.RemoteAccount needed287
21. 21CrowdStrike FalconCrowdStrike/falcon-mcpConnects AI agents with CrowdStrike Falcon for security analysis and automation.LocalAccount needed274
22. 22OpenWorkProofdengyier/OpenWorkProofVerifiable execution protocol for agent tool calls: signed policy decisions, causal evidence chains and offline verification from a SQLite ledger.LocalFree262
23. 23EchelonGraph CVE & Exposureechelongraph/echelongraph-mcpKeyless, read-only CVE and internet-exposure intelligence: CVE lookup and search, CISA KEV, EPSS history, CWE, vendor advisories (MSRC, Red Hat, Cisco, GHSA and more), SBOM and manifest checks, and aggregate exposure radars. Use the hosted endpoint (mcp.echelongraph.io) with no install, or run locally with npx.Local + RemoteAccount needed87k
24. 24Wazuhgbrigandi/mcp-server-wazuhAccess real-time security alerts and event data from Wazuh SIEM.LocalFree240
25. 25PyMemoryEditorJeanExtreme002/PyMemoryEditorRead, write and scan the memory of running processes, Cheat Engine style: value scans that narrow down as the value changes, pointer chains, and scan results kept server-side behind a handle.LocalFree226
26. 26Secopssecurityfortech/secops-mcpSecurity testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.LocalFree219
27. 27Reversecoresjkim1127/Reversecore_MCPSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.LocalFree215
28. 28CrowdSentinels AIthomasxm/CrowdSentinels-AI-MCPAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensicsLocalFree204
29. 29Google Workspace (multi-account)bakissation/mcp-google-multiMulti-account Google Workspace MCP server: 942 tools, 29 services, discover-first, BYO OAuth.LocalAccount needed195k
30. 30FirstDataMLT-OSS/FirstDataHosted MCP server for finding authoritative primary data sources and official portals.RemoteAccount needed186
31. 31zanadirMustacheCase/zanadirFind what a repository's CI is missing, and which security checks cannot fail the build.LocalFree180
32. 32Rsigmatimescale/rsigmaAuthor, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.LocalFree178
33. 33Agent Security Scannersinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.LocalFree1231.4k
34. 34Taskadetaskade/mcpTaskade projects, tasks and AI agents. Hosted OAuth server or local stdio package.Local + RemoteAccount needed170
35. 35Virustotalw0h1v/mcp-virustotalMCP server for querying VirusTotal API with comprehensive security analysis tools.LocalAccount needed154
36. 36GhidraMCP13bm/GhidraMCPGhidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.LocalFree150
37. 37ShellwardjnMetaCode/shellwardAgent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.LocalFree1391k
38. 38Dvalincodearthurpanhku/dvalincodeDeterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.LocalFree118550
39. 39Polymationparadoxsyn/rivemcp-releasesAuthor Rive; convert Lottie, After Effects, Animate and Figma into it; animate AI and pixel art.LocalFree23.5k
40. 40DechoNetnode-man/dechonet-mcpDomain security checks: DNS, DNSSEC, TLS grading, HTTP security headers, SPF, DKIM and DMARC, port scans, ASN, RDAP and WHOIS, plus an overall health score.Local + RemoteAccount needed13.3k
41. 41Cve Searchroadwy/cve-search_mcpQuery the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.LocalFree108
42. 42Cycodecycodehq/cycode-cliBoost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.LocalFree99
43. 43OPNSenseMCPvespo92/OPNSenseMCPManage and interact with the OPNsense open source firewall in natural language.LocalFree94
44. 44DocSentinelarthurpanhku/DocSentinelAutomate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps and remediations, using a RAG knowledge base.LocalAccount needed89
45. 45Cybersec Toolkit26zl/cybersec-toolkitInstall a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.LocalFree87
46. 46Pentheradanoszz/pentheraOffline, rule-based security checks for your repo, dependencies, AI agent config and local app.LocalFree782.5k
47. 47OrbitNoveum/orbitTask management for people and AI agents, with scoped OAuth access to issues, projects, and docs.RemoteAccount needed74
48. 48cloud-auditgebalamariusz/cloud-auditAWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and Terraform.LocalFree73