Alternatives to MCP Observatory
MCP Observatory is a MCP server by KryptosAI: MCP security scanner. If it doesn't fit your setup, these 12 MCP servers cover similar ground. They are ordered by how closely they match MCP Observatory and by our rank, which weighs adoption, freshness and documentation; money never changes the order. HOL Guard leads the list (more GitHub stars (975)). 3 of them are published by the company behind the product. 1 offers a remote endpoint, so there is nothing to install locally. Each entry shows data reasons to switch, and you can open a side-by-side comparison with MCP Observatory.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
MCP Observatory
MCP security scanner.
12 alternatives
Ordered by how closely each matches MCP Observatory (shared product, category or stated alternative) and by rank.
- 1HOL Guard
hashgraph-online
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
- More GitHub stars (975)
★ 975↓ 8.4K/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2Agent Security Scanner MCP
sinewaveai
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
- Open source (MIT)
★ 124Last active Sep 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
BFreshness: B–Security: not graded yet - 3Shellward
jnMetaCode
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 139Last active Sep 28, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 4SkillTotal
skilltotal.aiOfficial
Deterministic security scan of MCP servers, agent skills and npm/PyPI packages.
- Published by the vendor
★ 15↓ 1.7K/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5Reversecore MCP
sjkim1127
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
- Active in the last 30 days
- Open source (MIT)
★ 212↓ 170/wkLast active Oct 17, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 6CrowdStrike Falcon MCP Server
CrowdStrikeOfficial
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
- Published by the vendor
- More GitHub stars (273)
★ 273↓ 13.7K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7CodeInspectus
Synvoya
Local-first MCP security scanner and CLI for AI-generated applications.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 49Last active Oct 4, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8maintenant
kOlapsis
Docker monitoring for AI agents: logs, history, alerts.
- Remote server, no local install
- More GitHub stars (531)
★ 531Last active Oct 25, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2
AFreshness: A–Security: not graded yet - 9Tool Poisoning Scanner
GuardBee
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
- Active in the last 30 days
- Open source (MIT)
★ 1↓ 1.1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 10Prompt Injection Scanner
GuardBee
Scans RAG content/scraped pages for indirect prompt injection
- Active in the last 30 days
- Open source (MIT)
★ 1↓ 1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11Snyk API & Web MCP Server
snykOfficial
MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage
- Published by the vendor
★ 8↓ 62/wkLast active Sep 28, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 12Dvalincode
arthurpanhku
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
- Active in the last 30 days
- Open source (MIT)
★ 118Last active Oct 19, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet