Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 601 | 60.677 | odinmcpmcp · back-end | A distributed MCP server framework enabling scalable task execution across multiple nodes with streamable HTTP transport, integrated authentication… | 9 stars · 1 fork | No one-command install · Source | |
| 602 | 60.262 | labbymcp · back-end | Labby is a Rust-based MCP gateway that connects and aggregates multiple upstream MCP servers, with authentication, Code Mode (JavaScript snippets)… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | aikstockdatamcp · back-end | MCP server for Korean stock market data (KOSPI/KOSDAQ) and DART disclosures, providing tools to get today's market summary, search stocks, retrieve… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | urldna-mcpmcp · back-end | MCP server for automated URL scanning and forensic phishing triage. Captures full DOM snapshots, network requests, and visual screenshots to identify… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | gh-yuunnn-w-rust-toolsmcp · back-end | High-performance MCP server with WebUI, 18 built-in tools, and security controls. | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | x-mcp-2-0mcp · auth | Enables users to interact with X/Twitter via Claude, allowing posting tweets, searching, liking, retweeting, and more using OAuth 2.0 PKCE… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | tb0hdan-wassmcp · authalso listed as wass-mcp | Integrates Nikto and Wapiti vulnerability scanners with persistent execution history for conducting authorized penetration testing and maintaining… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | mcp-reconmcp · back-end | A comprehensive MCP server for web security reconnaissance, providing tools for passive and active information gathering, DNS analysis, network… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | kevin-weitgenant-linkedin-posts-huntermcp · database | Automates LinkedIn job post discovery and tracking through browser automation with persistent authentication, local SQLite storage, and a React… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | adriyansyah-mf-pentestmcp · database | Orchestrates penetration testing workflows through Nmap, Nuclei, Nikto, SQLMap, and Metasploit integration with automated reconnaissance… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | mistersandfr-supabase-selfhostedmcp · database | Integrates with Supabase instances through dual client API and direct PostgreSQL connections to enable database operations, user management, schema… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | mohdhaji87-sqlmapmcp · database | Exposes SQLMap's SQL injection testing capabilities through 12 tools for vulnerability scanning, database enumeration, data extraction, and system… | 7 stars · 2 forks | No one-command install · Source | |
| 602 | 60.262 | gkhays-nvdmcp · database | Provides direct access to the National Vulnerability Database (NVD) for retrieving detailed CVE information including descriptions, severity ratings… | 7 stars · 2 forks | No one-command install · Source | |
| 615 | 60.035 | go-unifi-mcpmcp · other | Manage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall rules. | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | antonio-mello-ai-pfsensemcp · observabilityalso listed as io-github-antonio-mello-ai-mcp-pfsense | Manage pfSense firewalls through AI assistants with rules, DHCP, DNS, and monitoring tools. | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | muhammed-abdelghany-rest-apimcp · back-end | Interact with REST APIs with automatic authentication, token caching, and OpenAPI endpoint discovery. | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | panossalt-mcp-gatewaymcp · auth | Production gateway platform connecting AI assistants to databases with authentication, RBAC, and audit logging. | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | lyuboslavlyubenov-analyze-soliditymcp · observability | Analyzes Solidity smart contracts through AST parsing to trace function execution flows, variable interactions, state changes, and external contract… | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | bernerspace-slackmcp · auth | Integrates with Slack workspaces through OAuth 2.0 authentication and JWT-based client identification to provide messaging, channel management, file… | 6 stars · 3 forks | No one-command install · Source | |
| 615 | 60.035 | mrgnss-claude-desktop-commandermcp · ai-agents | Enables Claude Desktop to execute terminal commands and manage files on the user's computer with security measures like command blacklisting and path… | 6 stars · 3 forks | No one-command install · Source | |
| 623 | 59.854 | mcpfoundrymcp · back-end | A CLI tool that generates production-ready MCP servers from databases or OpenAPI specifications, with optional security shields. | 14 stars | No one-command install · Source | |
| 624 | 59.040 | yashash4-reef-registrymcp · ai-agents | MCP supply chain security registry with signed verification, runtime policy enforcement, and insurance artifacts for AI agent fleets. | 13 stars | No one-command install · Source | |
| 625 | 59.029 | vulncheck-mcp-servermcp · back-end | Connects AI assistants to VulnCheck vulnerability intelligence for querying CVEs, exploits, advisories, and vulnerable packages via natural language. | 8 stars · 1 fork | No one-command install · Source | |
| 625 | 59.029 | gautamvarmadatla-safety-wardenmcp · other | MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | 8 stars · 1 fork | No one-command install · Source | |
| 625 | 59.029 | pipepie-pipepiemcp · auth | Self-hosted webhook relay and tunnel with Noise NK encryption. 13 MCP tools to inspect requests, replay webhooks, trace AI pipelines… | 8 stars · 1 fork | No one-command install · Source | |
| 625 | 59.029 | infrastructure-mcp-servermcp · devops | An MCP server and terminal UI that orchestrates Cloudflare, Namecheap, and Fleet from a single interface, enabling domain onboarding with automatic… | 8 stars · 1 fork | No one-command install · Source | |
| 625 | 59.029 | anand-kamble-instagrammcp · auth | Integrates with Instagram to enable profile viewing, content discovery, timeline browsing, story access, post interactions, commenting, and user… | 8 stars · 1 fork | No one-command install · Source | |
| 625 | 59.029 | simple-python-mcp-servermcp · back-end | A simple MCP server implementation in Python using FastMCP and FastAPI, providing streamable HTTP transport with optional OAuth authorization for… | 8 stars · 1 fork | No one-command install · Source | |
| 631 | 58.969 | kiranreddi-sentinel-dvmcp · observability | Security-first access to SystemVerilog/UVM/cocotb verification intelligence with 14 specialized tools for test analysis, coverage metrics, assertion… | 4 stars · 4 forks | No one-command install · Source | |
| 631 | 58.969 | firesh-sslmonmcp · observability | Monitors SSL certificates and domain registrations with real-time certificate validation and WHOIS lookups to track expiration dates, registrar… | 4 stars · 4 forks | No one-command install · Source | |
| 631 | 58.969 | pouyanafisi-gmailmcp · auth | Integrates with Gmail through OAuth2 authentication | 4 stars · 4 forks | No one-command install · Source | |
| 631 | 58.969 | osdeibi-typebotmcp · auth | Integrates with Typebot's chatbot platform using workspace tokens for authentication to enable management of chatbot workflows and bot instances. | 4 stars · 4 forks | No one-command install · Source | |
| 635 | 58.290 | datadoemcp · back-end | Connects to Amazon Seller Central, Vendor Central, and Amazon Ads APIs with managed authentication and rate limiting. | 12 stars | No one-command install · Source | |
| 635 | 58.290 | cortex-gatewaymcp · back-end | A federated MCP gateway that consolidates multiple plain-HTTP backends into a single, OAuth-protected MCP server, enabling agents to access diverse… | 12 stars | No one-command install · Source | |
| 635 | 58.290 | ctkadvisors-graphqlmcp · back-end | Transforms any GraphQL API into dynamic tools through automatic schema introspection, enabling direct access to structured data with parameter… | 12 stars | No commit datelisted | No one-command install · Source |
| 638 | 58.185 | securitahguy-rapid7mcp · other | Queries vulnerability and threat data across Rapid7 InsightVM, InsightIDR, and Metasploit Pro using natural language. | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | egarcia74-sql-servermcp · database | Integrates with Microsoft SQL Server databases to provide query execution, schema exploration, and data retrieval capabilities with support for both… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | vibeguard-mcp-servermcp · back-end | Enables AI coding tools to scan projects for security vulnerabilities, hardcoded secrets, injection flaws, and privacy violations with 699 rules and… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | doppler-mcp-servermcp · back-end | Enables AI assistants to interact with the Doppler API for secrets management, including listing, retrieving, and updating secrets across projects and… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | gjenkins20-webmin-mcp-servermcp · back-end | MCP server for Webmin with 61 tools for Linux system administration: services, users, storage, security, databases, and more. | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | 0xbuz3r-emba-firmware-analyzermcp · other | EMBA firmware security analysis for embedded device scanning. | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | alfresco-mcp-servermcp · back-end | A minimal MCP server for Alfresco providing tools via the Alfresco REST API, with ticket-based authentication and support for stdio, SSE, and HTTP… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | abhirockzz-cosmosdb-gomcp · database | Enables natural language interaction with Azure Cosmos DB for querying, creating, and managing databases, containers, and items through Go-based tools… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | florentinemcp · database | Natural language interface for MongoDB databases with vector search and multi-tenant security | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | thiagofrag-ldplayer-android-pentestmcp · other | Provides Android penetration testing capabilities through LDPlayer emulator integration with ADB commands, Frida script injection, and 38 security… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | x746b-mac-forensicsmcp · database | Integrates with macOS forensic tools like FSEParser and unifiedlog_iterator to parse system artifacts, correlate timeline events, and detect security… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | pooriayousefi-intellistantmcp · ai-agents | Production C++23 multi-agent development framework with specialized agents for coding, DevOps, documentation, testing, data analysis, and security. | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | gensecai-sonicwallmcp · observability | Integrates with SonicWall firewalls to provide natural language log analysis, threat detection, connection searching, and security statistics with… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | rustsandbox-gmailmcp · auth | Provides a clean interface for accessing Gmail emails through OAuth2 authentication, automatically handling authentication flows and processing HTML… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | elizabethsiegle-scrape-and-analyze-websitemcp · auth | Enables website analysis and content extraction using Cloudflare Workers, providing tools to scrape, summarize, and answer questions about web pages… | 6 stars · 2 forks | No one-command install · Source | |
| 638 | 58.185 | pmarkowsky-santa-binary-authorizationmcp · auth | Enables security professionals to interact with Santa binary authorization system for macOS, providing tools to query status, sync rules, retrieve… | 6 stars · 2 forks | No one-command install · Source | |
| 654 | 57.927 | daedalusmcp · browser | Enables driving a real Chrome instance remotely through MCP, including per-tab control, JavaScript evaluation, screenshots, cookie and network… | 1 star · 5 forks | No one-command install · Source | |
| 655 | 57.754 | shcallaway-gmailmcp · auth | Integrates with Gmail for inbox access, message search, thread management, label operations, draft creation, and email actions like archiving and… | 3 stars · 4 forks | No one-command install · Source | |
| 655 | 57.754 | sanyambassi-thales-cdsp-crdp-mcp-servermcp · back-end | MCP server for Thales CipherTrust Manager RestFul Data Protection service. | 3 stars · 4 forks | No one-command install · Source | |
| 655 | 57.754 | omd01-aws-sesmcp · devops | Enables direct email sending through Amazon SES with support for HTML content, CC/BCC recipients, and reply-to addressing while maintaining AWS… | 3 stars · 4 forks | No one-command install · Source | |
| 655 | 57.754 | bmorphism-slowtimemcp · other | Integrates drand and tlock-js to enable secure, time-locked encryption for managing scheduled events with cryptographic guarantees. | 3 stars · 4 forks | No one-command install · Source | |
| 655 | 57.754 | dkmaker-function-app-testermcp · auth | Enables testing of Azure Function Apps through a command-line interface supporting various HTTP methods, custom headers, and multiple authentication… | 3 stars · 4 forks | No one-command install · Source | |
| 660 | 57.364 | agent-sudo-mcpmcp · auth | Local zero-trust permission gateway for AI agents. Enforces policy-based tool authorization, human approvals, scoped permissions, and… | 5 stars · 3 forks | No one-command install · Source | |
| 660 | 57.364 | cisco-nx-os-cli-mcp-servermcp · back-end | Enables interaction with Cisco NX-OS devices through CLI commands via NX-API. Supports single and multi-device command execution with text or JSON… | 5 stars · 3 forks | No one-command install · Source | |
| 660 | 57.364 | atomic-crm-mcpmcp · authalso listed as marmelab-atomic-crm | MCP server for Atomic CRM that enables agents to read and write CRM data via SQL queries, with OAuth authentication and Row Level Security enforced. | 5 stars · 3 forks | No one-command install · Source | |
| 660 | 57.364 | mcp-nettoolsmcp · back-end | A Model Context Protocol server that provides network diagnostics and scanning tools such as nmap, DNS lookups, whois, traceroute, and security… | 5 stars · 3 forks | No one-command install · Source | |
| 665 | 57.311 | ente0-mcpstrikemcp · ai-agentsalso listed as mcpstrike | Autonomous penetration testing framework combining LLM analysis with 14 security tools for vulnerability discovery, exploitation, and reporting. | 11 stars | No one-command install · Source | |
| 665 | 57.311 | sabbamcp · ai-agents | MCP server for security bug-finding that proves every finding by running exploits, enabling agents to verify changes and find bugs with… | 11 stars | No one-command install · Source | |
| 665 | 57.311 | apk-security-guard-suitemcp · other | Integrates JADX, MobSF, JEB Pro, and APKTOOL to provide Android APK decompilation, security scanning, reverse engineering, and resource extraction for… | 11 stars | No commit datelisted | No one-command install · Source |
| 669 | 57.245 | benahammond-code-auditormcp · other | Analyze code for SOLID principles, DRY violations, and security issues | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | mcpgoatmcp · back-end | A deliberately insecure MCP server for practicing penetration testing, featuring 26 challenges at three difficulty levels with flags to capture… | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | math280h-safe-pkgsmcp · other | Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning. | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | 7majesty-m-terminal-guardianmcp · devops | Provides secure sandboxed terminal access with risk analysis and deny-by-default security controls. | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | vignaesh01-dataverse-devtoolsmcp · observability | Integrates with Microsoft Power Platform Dataverse environments to provide user administration, security role management, entity metadata exploration… | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | social-cli-mcpmcp · comms | MCP server for posting to Twitter/X, Reddit, LinkedIn, Instagram, and email via CLI or AI agents, with Telegram bot control and security… | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | cyberillo-kali-linuxmcp · database | Exposes 21 Kali Linux offensive security tools including Nmap, SQLMap, Metasploit, and password crackers via Docker. | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | aws-security-mcp-servermcp · back-end | Enables management and analysis of AWS security groups, S3 buckets, and VPC connections via MCP. | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | cyberroute-exploitdbmcp · database | Provides direct access to the Exploit-DB database through the searchsploit command-line tool for security research and penetration testing. | 7 stars · 1 fork | No one-command install · Source | |
| 669 | 57.245 | remote-mcp-server-authless-2mcp · devops | Deploy a remote MCP server on Cloudflare Workers without authentication, and connect it to AI Playground or Claude Desktop. | 7 stars · 1 fork | No one-command install · Source | |
| 679 | 56.206 | proofpoint-mcpmcp · back-end | MCP server for Proofpoint Email Protection - email security, threat intelligence, TAP (Targeted Attack Protection), and email filtering API… | 2 stars · 4 forks | No one-command install · Source | |
| 679 | 56.206 | janschmiedgen-muralmcp · auth | Integrates with Mural's collaborative visual workspace platform through OAuth 2.0 authentication to manage workspaces, rooms, murals, sticky notes… | 2 stars · 4 forks | No one-command install · Source | |
| 681 | 56.183 | coreyhines-opnsense-mcpmcp · back-end | OPNsense firewall operations via API. Query ARP, DHCP, firewall rules, logs, interfaces, system status, and packet capture via STDIO or SSE. | 10 stars | No one-command install · Source | |
| 681 | 56.183 | mcp-media-9routermcp · back-end | Enables AI agents to perform web searches and fetch web pages as clean Markdown via the 9router API, with configurable provider fallbacks and local… | 10 stars | No one-command install · Source | |
| 683 | 55.515 | onelogin-mcpmcp · auth | OneLogin API integration for user, app, role, and authentication management. | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | qihoo360-ecs-cloud-storagemcp · search | Provides comprehensive file management and cloud storage operations including upload, download, search, move, rename, delete, directory management… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | commercial-creatormcp · auth | Enables AI agents to produce video commercials from product descriptions via a multi-stage pipeline with human-in-the-loop approval gates and explicit… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | scopeblind-verify-mcpmcp · back-end | Offline verification of signed artifacts -- receipts, manifests, audit bundles. Ed25519 + JCS. No accounts, no API calls. Apache-2.0. | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | knowbe4-mcp-servermcp · back-end | Enables AI assistants to interact with KnowBe4 security awareness training data via the KnowBe4 Reporting REST API. | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | razemcp · back-end | Raze is an MCP server that integrates with AI assistants to analyze, validate, and prove smart contract security issues using deterministic Foundry… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | lisberndt-zapmcp · browser | Integrates with OWASP ZAP to provide comprehensive web application security testing through active vulnerability scanning, passive analysis… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | lgndluke-rei3-ticketsmcp · auth | Integrates with REI3 ticketing system to provide ticket creation, worklog management, information retrieval, and closure operations with configurable… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | wunrry-universal-sqlmcp · database | Provides secure access to multiple SQL database engines (MySQL, PostgreSQL, SQLite, SQL Server) through a unified interface with controlled read/write… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | mcp-vulnerability-scannermcp · back-end | Enables scanning IP addresses for vulnerabilities using Nmap and API-based checks, supporting both single and batch scans with detailed reports. | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | kingbase-mcp-servermcp · database | A Cursor-integrated MCP server for Kingbase (人大金仓) databases, enabling schema queries, document generation, and SQL execution with configurable… | 5 stars · 2 forks | No one-command install · Source | |
| 683 | 55.515 | remote-mcp-authlessmcp · devops | A remote MCP server deployed on Cloudflare Workers without authentication, enabling tools to be used via SSE from clients like Claude Desktop or… | 5 stars · 2 forks | No one-command install · Source | |
| 695 | 55.510 | mcppediamcp · back-end | Search, evaluate, and compare 17,000+ MCP servers from the [MCPpedia](https://mcppedia.org) catalog. Every server is scored on **security… | 3,642 installs | No commit datelisted | No one-command install · Source |
| 696 | 55.213 | opnsense-mcp-servermcp · back-end | Enables natural language management of OPNsense firewalls through AI clients, providing tools for firewall rules, system health, VPN monitoring, and… | 6 forks | No one-command install · Source | |
| 696 | 55.213 | mcp-kql-servermcp · ai-agents | MCP server for executing Kusto Query Language (KQL) queries against Azure Data Explorer clusters, integrating with Claude Desktop and VS Code via… | 6 forks | No one-command install · Source | |
| 698 | 55.168 | randomparity-rusty-imapmcp · ai-agents | Security-first IMAP email MCP server written in Rust with prompt-injection defenses. | 6 stars · 1 fork | No one-command install · Source | |
| 698 | 55.168 | blackbird-mcp-servermcp · back-end | Enables LLMs to access Blackbird AI's services through the Model Context Protocol, using Blackbird API credentials for authentication. | 6 stars · 1 fork | No one-command install · Source | |
| 698 | 55.168 | titaniumtushar-burp-mcp-plusmcp · other | Wraps Burp Suite for AI-assisted penetration testing, providing proxy history access, structured HTTP request building, and Intruder integration. | 6 stars · 1 fork | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.