Skip to content
Agentmart
Submit a tool

Best MCP servers for security audits

We found 317 MCP servers for security audits in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. MCP Observatory, SkillTotal and Reversecore MCP lead it. SkillTotal, CrowdStrike Falcon MCP Server and Snyk API & Web MCP Server are published by the company that makes them. maintenant has the most GitHub stars here (531). 14 of the 15 had activity in the last 30 days. Remote servers need no local install; local ones run on your machine and can reach local files. Each entry lists why it made the list and links to its install page.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

Top 15 of 317

  1. 1
    MCP Observatory

    KryptosAI

    MCP security scanner.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 135↓ 515/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  2. 2
    SkillTotal

    skilltotal.aiOfficial

    Deterministic security scan of MCP servers, agent skills and npm/PyPI packages.

    • Published by the vendor
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 15↓ 1.7K/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  3. 3
    Reversecore MCP

    sjkim1127

    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 212↓ 170/wkLast active Oct 17, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  4. 4
    CrowdStrike Falcon MCP Server

    CrowdStrikeOfficial

    Connects AI agents with CrowdStrike Falcon for security analysis and automation.

    • Published by the vendor
    • Most weekly downloads here (13.7K)
    • Active in the last 30 days

    ★ 273↓ 13.7K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  5. 5
    Agent Security Scanner MCP

    sinewaveai

    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

    • Open source (MIT)

    ★ 124Last active Sep 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  6. 6
    Snyk API & Web MCP Server

    snykOfficial

    MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage

    • Published by the vendor
    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8↓ 62/wkLast active Sep 28, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  7. 7
    Dvalincode

    arthurpanhku

    Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 118Last active Oct 19, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  8. 8
    CodeInspectus

    Synvoya

    Local-first MCP security scanner and CLI for AI-generated applications.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 49Last active Oct 4, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  9. 9
    Shodan

    w0h1v

    MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 178↓ 313/wkLast active Oct 12, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  10. 10
    Virustotal

    w0h1v

    MCP server for querying VirusTotal API with comprehensive security analysis tools.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 151↓ 333/wkLast active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  11. 11
    MCP Safety Warden

    gautamvarmadatla

    MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 8↓ 834/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  12. 12
    VulnCheck

    vulncheck-oss

    VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 13Last active Oct 13, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  13. 13
    maintenant

    kOlapsis

    Docker monitoring for AI agents: logs, history, alerts.

    • Most GitHub stars here (531)
    • Runs locally or as a remote server
    • Active in the last 30 days

    ★ 531Last active Oct 25, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2

  14. 14
    hexvero

    maximilianfeix

    Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 8Last active Oct 18, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  15. 15
    Bug Bounty Intelligence

    holistis

    AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

    • Remote server, no local install
    • Active in the last 30 days
    • Open source (MIT)

    ★ 8Last active Oct 24, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf

Related