Best security MCP servers (2026)

100 security MCP servers. Those with live runtime data are ranked first by behavioral trust score (success rate, latency, uptime, per-reporter influence capping — not GitHub stars); servers not yet observed answering requests are shown UNRATED rather than given a fabricated score.

#ServerTrust ScoreGradeInteractions
1ai.byteray/byteray-mcp34F3229
2@impart-security/impart-mcp33.9F384
3ai.byteray/byteray-mcp25.5F1
4@tankpkg/mcp-server—Unrated0
5mcp-server-scf—Unrated0
6@casys/mcp-server—Unrated0
7loopctl-mcp-server—Unrated0
8@unfragile/mcp-server—Unrated0
9@genzagentsio/mcp-server—Unrated0
10@aranseshita/yamory-mcp-server—Unrated0
11@yawlabs/mcp-compliance—Unrated0
12@100xpercent/mcp-server-pop-pay—Unrated0
13@eztexting/mcp-server—Unrated0
14@rad-security/mcp-server—Unrated0
15@signet-auth/mcp-tools—Unrated0
16@auto-nomos/mcp-server—Unrated0
17@downatthebottomofthemolehole/megalinter-mcp-server—Unrated0
18brightspace-mcp—Unrated0
19@chandshantanu/agentbuilder-mcp-server—Unrated0
20@rubric-protocol/mcp-server—Unrated0
21coalesce-transform-mcp—Unrated0
22@cyanheads/toolkit-mcp-server—Unrated0
23mcp-server-dns—Unrated0
24@apitier/mcp-server—Unrated0
25blackduck-mcp-server—Unrated0
26@imouiche/mitre-attack-mcp-server—Unrated0
27taibu-mcp-server—Unrated0
28@perfai/mcp—Unrated0
29@forestadmin/mcp-server—Unrated0
30@conformeaa/mcp-server—Unrated0
31@marmarlabs/agentbridge-mcp-server—Unrated0
32@mcp-abap-adt/core—Unrated0
33@uarlouski/ssh-mcp-server—Unrated0
34@robotixai/lexius-mcp—Unrated0
35@pan-sec/notebooklm-mcp—Unrated0
36@vaultfire/mcp-server—Unrated0
37@fidensa/mcp-server—Unrated0
38agentaudit—Unrated0
39agentfolio-mcp-server—Unrated0
40@vibelogin/mcp—Unrated0
41@clampd/mcp-proxy—Unrated0
42@yawlabs/npmjs-mcp—Unrated0
43security-detections-mcp—Unrated0
44@symbioticsec/symbiotic-mcp-server—Unrated0
45@atomicmail/mcp—Unrated0
46charityverify-mcp—Unrated0
47nvd-cve-mcp-server—Unrated0
48ipgeolocation-io-mcp—Unrated0
49defense-mcp-server—Unrated0
50@vpursuit/swipl-mcp-server—Unrated0
51intelthreadlinqs-mcp—Unrated0
52@vantasdk/vanta-mcp-server—Unrated0
53@garl-protocol/mcp-server—Unrated0
54@yawlabs/electron-mcp—Unrated0
55mcp-auth—Unrated0
56mcp-remote—Unrated0
57kolide-mcp-server—Unrated0
58mcp-sanitizer—Unrated0
59mcp-s-oauth—Unrated0
60@grackle-ai/mcp-stdio—Unrated0
61@zcode-apps/mcp-sentinel—Unrated0
62@oconnector/mcp-gateway—Unrated0
63@gleanwork/connect-mcp-server—Unrated0
64mcp-watch—Unrated0
65@keycardai/mcp—Unrated0
66@aiondadotcom/mcp-salesforce—Unrated0
67@gsep/mcp—Unrated0
68@finktech/mcp-verify—Unrated0
69@nithish611/mcp-inspector—Unrated0
70@lightspeedrun/mcp—Unrated0
71trustmesh-mcp—Unrated0
72@danielsogl/lighthouse-mcp—Unrated0
73@executor-js/plugin-mcp—Unrated0
74@dj_abstract/mcp-audit—Unrated0
75@runhalo/mcp—Unrated0
76mcp-remote-alibaba-cloud—Unrated0
77@zetesis/mcp-typesense—Unrated0
78@jiffylabs/jiffy-scan-mcp—Unrated0
79gc-nuclei-mcp—Unrated0
80stellar-cyber-mcp-agents—Unrated0
81@electric-ax/agents-mcp—Unrated0
82goplus-mcp—Unrated0
83pads-mcp—Unrated0
84@ferrierepete/mcpshield—Unrated0
85@cyberranger/mcp-guardian—Unrated0
86mcp-server-manager—Unrated0
87@namemyapp/mcp—Unrated0
88@cyberranger/mcp-threat-lab—Unrated0
89@lobsterline/mcp—Unrated0
90@a2a-compliance/mcp—Unrated0
91mcpresso-oauth-server—Unrated0
92@theharithsa/dynatrace-managed-mcp-server—Unrated0
93@cequenceai/mcp-remote—Unrated0
94@mcereal/mcp-check—Unrated0
95@rsabde/blackduck-mcp—Unrated0
96mcp-remote-id—Unrated0
97mcp-helmet—Unrated0
98@mseep/safe-omada-mcp—Unrated0
99@sapper-ai/mcp—Unrated0
100prompt-guard-mcp—Unrated0

Before your agent invokes any of these, run a free pre-flight check: GET /v1/preflight?target={server_url} — it returns a verdict and a signed diligence receipt. Or gate calls automatically with the trust-check SDK (PyPI: dominion-trust-check; hosted JavaScript module).

FAQ

What is the best security MCP server in 2026?
Based on independently measured runtime behavior, ai.byteray/byteray-mcp currently ranks #1 in the security category with a trust score of 34/100 across 3229 tracked interactions.
How are security MCP servers ranked?
Rankings use Dominion Observatory's behavioral trust score: real agent-reported success rates, latency distributions, and uptime — with per-reporter influence capping so no single source can dominate a score. Servers with no runtime data are UNRATED and excluded, never given a fabricated score.
How many security MCP servers are tracked?
Dominion Observatory tracks 1121 servers in the security category; the 100 with behavioral trust data are ranked here. Check any server before invoking it at /v1/preflight.

Other categories

code (18691) · data (3770) · search (3223) · productivity (2017) · communication (1223) · media (1207) · ai (1199) · finance (1136) · education (815) · compliance (381) · transport (282) · weather (257) · devops (179) · cloud (170) · health (165) · filesystem (130) · database (129) · browser (88) · test (10) · utility (3)

Full server directory →