Best MCP Servers for Security (2026)
The best security-focused MCP servers — scanning, auditing, secrets management, and threat analysis with scoped, least-privilege access for AI agents.
#2 Binary Ninja MCP
fosdickioWhy it’s herePopular pick — 1 installs
A Binary Ninja plugin, MCP server, and bridge that seamlessly integrates Binary Ninja with your favorite MCP client. It enables you to automate the process of performing binary analysis and reverse engineering.
Upvotes: 0Installs: 1GitHub stars: 457InstallWhy it’s hereCommunity pick
Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language
Upvotes: 0Installs: 0GitHub stars: 121Install#4 Emilia Protocol
emiliaprotocolWhy it’s hereCommunity pick
Human sign-off + trust receipts for AI agents: requires a named human's approval before an irreversible action (payment release, record change, deploy), then mints an offline-verifiable Ed25519 Trust Receipt. Also exposes trust profiles, receipt verification, disputes, and delegation. Apache-2.0; policy engine formally verified. Install: npx -y @emilia-protocol/mcp-server.
Upvotes: 0Installs: 0GitHub stars: 599Install#5 Mobb Vibe Shield MCP
mobb-devWhy it’s hereCommunity pick
Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.
Upvotes: 0Installs: 0GitHub stars: 68Install#6 MCP Virustotal
BurtTheCoderWhy it’s hereCommunity pick
MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
Upvotes: 0Installs: 0GitHub stars: 152Install#7 MCP Shodan
BurtTheCoderWhy it’s hereCommunity pick
MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
Upvotes: 0Installs: 0GitHub stars: 179Install#8 Ida Pro MCP
mrexodiaWhy it’s hereCommunity pick
MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.
Upvotes: 0Installs: 0GitHub stars: 13kInstall#9 GhidraMCP
LaurieWiredWhy it’s hereCommunity pick
A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.
Upvotes: 0Installs: 0GitHub stars: 11kInstallWhy it’s hereCommunity pick
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
Upvotes: 0Installs: 0GitHub stars: 180Install
Which Security MCP server should you use?
When choosing a Model Context Protocol server for Security, select verified or official listings if you need strict API security guarantees. For rapid local dev testing with Claude or Cursor, community-maintained tools offer zero-setup configuration blocks ready to copy-paste.
Frequently asked questions about Security MCP servers
What are the best MCP servers for security work?
Security MCP servers span vulnerability scanning, secrets detection, and auditing. This page ranks them by usage across the AllMCPs directory.
Is it safe to give an AI agent security tooling over MCP?
Use scoped credentials, prefer read-only/analysis modes, and review each server’s permissions. MCP servers run with the access you grant them, so least privilege matters most here.
Can MCP help with secrets management?
Yes — several servers integrate with vaults and secret stores so agents can reference secrets without exposing raw values in prompts.