Best security MCP servers (2026)

100 security MCP servers. Those with live runtime data are ranked first by behavioral trust score (success rate, latency, uptime, per-reporter influence capping — not GitHub stars); servers not yet observed answering requests are shown UNRATED rather than given a fabricated score.

#ServerTrust ScoreGradeInteractions
1ai.byteray/byteray-mcp40.6D2842
2@impart-security/impart-mcp35.5F1
3ai.byteray/byteray-mcp25.5F1
4@tankpkg/mcp-serverUnrated0
5mcp-server-scfUnrated0
6@casys/mcp-serverUnrated0
7loopctl-mcp-serverUnrated0
8@unfragile/mcp-serverUnrated0
9@genzagentsio/mcp-serverUnrated0
10@aranseshita/yamory-mcp-serverUnrated0
11@yawlabs/mcp-complianceUnrated0
12@100xpercent/mcp-server-pop-payUnrated0
13@eztexting/mcp-serverUnrated0
14@rad-security/mcp-serverUnrated0
15@signet-auth/mcp-toolsUnrated0
16@auto-nomos/mcp-serverUnrated0
17@downatthebottomofthemolehole/megalinter-mcp-serverUnrated0
18brightspace-mcpUnrated0
19@chandshantanu/agentbuilder-mcp-serverUnrated0
20@rubric-protocol/mcp-serverUnrated0
21coalesce-transform-mcpUnrated0
22@cyanheads/toolkit-mcp-serverUnrated0
23mcp-server-dnsUnrated0
24@apitier/mcp-serverUnrated0
25blackduck-mcp-serverUnrated0
26@imouiche/mitre-attack-mcp-serverUnrated0
27taibu-mcp-serverUnrated0
28@perfai/mcpUnrated0
29@forestadmin/mcp-serverUnrated0
30@conformeaa/mcp-serverUnrated0
31@marmarlabs/agentbridge-mcp-serverUnrated0
32@mcp-abap-adt/coreUnrated0
33@uarlouski/ssh-mcp-serverUnrated0
34@robotixai/lexius-mcpUnrated0
35@pan-sec/notebooklm-mcpUnrated0
36@vaultfire/mcp-serverUnrated0
37@fidensa/mcp-serverUnrated0
38agentauditUnrated0
39agentfolio-mcp-serverUnrated0
40@vibelogin/mcpUnrated0
41@clampd/mcp-proxyUnrated0
42@yawlabs/npmjs-mcpUnrated0
43security-detections-mcpUnrated0
44@symbioticsec/symbiotic-mcp-serverUnrated0
45@atomicmail/mcpUnrated0
46charityverify-mcpUnrated0
47nvd-cve-mcp-serverUnrated0
48ipgeolocation-io-mcpUnrated0
49defense-mcp-serverUnrated0
50@vpursuit/swipl-mcp-serverUnrated0
51intelthreadlinqs-mcpUnrated0
52@vantasdk/vanta-mcp-serverUnrated0
53@garl-protocol/mcp-serverUnrated0
54@yawlabs/electron-mcpUnrated0
55mcp-authUnrated0
56mcp-remoteUnrated0
57kolide-mcp-serverUnrated0
58mcp-sanitizerUnrated0
59mcp-s-oauthUnrated0
60@grackle-ai/mcp-stdioUnrated0
61@zcode-apps/mcp-sentinelUnrated0
62@oconnector/mcp-gatewayUnrated0
63@gleanwork/connect-mcp-serverUnrated0
64mcp-watchUnrated0
65@keycardai/mcpUnrated0
66@aiondadotcom/mcp-salesforceUnrated0
67@gsep/mcpUnrated0
68@finktech/mcp-verifyUnrated0
69@nithish611/mcp-inspectorUnrated0
70@lightspeedrun/mcpUnrated0
71trustmesh-mcpUnrated0
72@danielsogl/lighthouse-mcpUnrated0
73@executor-js/plugin-mcpUnrated0
74@dj_abstract/mcp-auditUnrated0
75@runhalo/mcpUnrated0
76mcp-remote-alibaba-cloudUnrated0
77@zetesis/mcp-typesenseUnrated0
78@jiffylabs/jiffy-scan-mcpUnrated0
79gc-nuclei-mcpUnrated0
80stellar-cyber-mcp-agentsUnrated0
81@electric-ax/agents-mcpUnrated0
82goplus-mcpUnrated0
83pads-mcpUnrated0
84@ferrierepete/mcpshieldUnrated0
85@cyberranger/mcp-guardianUnrated0
86mcp-server-managerUnrated0
87@namemyapp/mcpUnrated0
88@cyberranger/mcp-threat-labUnrated0
89@lobsterline/mcpUnrated0
90@a2a-compliance/mcpUnrated0
91mcpresso-oauth-serverUnrated0
92@theharithsa/dynatrace-managed-mcp-serverUnrated0
93@cequenceai/mcp-remoteUnrated0
94@mcereal/mcp-checkUnrated0
95@rsabde/blackduck-mcpUnrated0
96mcp-remote-idUnrated0
97mcp-helmetUnrated0
98@mseep/safe-omada-mcpUnrated0
99@sapper-ai/mcpUnrated0
100prompt-guard-mcpUnrated0

Before your agent invokes any of these, run a free pre-flight check: GET /v1/preflight?target={server_url} — it returns a verdict and a signed diligence receipt. Or gate calls automatically with the trust-check SDK (npm/PyPI: dominion-trust-check).

FAQ

What is the best security MCP server in 2026?
Based on independently measured runtime behavior, ai.byteray/byteray-mcp currently ranks #1 in the security category with a trust score of 40.6/100 across 2842 tracked interactions.
How are security MCP servers ranked?
Rankings use Dominion Observatory's behavioral trust score: real agent-reported success rates, latency distributions, and uptime — with per-reporter influence capping so no single source can dominate a score. Servers with no runtime data are UNRATED and excluded, never given a fabricated score.
How many security MCP servers are tracked?
Dominion Observatory tracks 1121 servers in the security category; the 100 with behavioral trust data are ranked here. Check any server before invoking it at /v1/preflight.

Other categories

code (18690) · data (3763) · search (3218) · productivity (2011) · communication (1223) · media (1207) · ai (1199) · finance (1127) · education (815) · compliance (379) · transport (277) · weather (229) · devops (179) · cloud (170) · health (165) · filesystem (130) · database (129) · browser (88) · test (9)

Full server directory →