Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 801 | 49.118 | behrensd-mcp-firewallmcp · observability | Deterministic security proxy (iptables for MCP) that intercepts tool calls, enforces YAML policies, scans for secret leakage, and logs everything. No… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | achetronic-hassmcp · auth | Bridges Home Assistant smart home systems with tools for device control, automation management, system monitoring, and troubleshooting through local… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | mobile-security-mcpmcp · back-end | An MCP server that enables AI assistants to analyze Android APK and iOS IPA files for security issues through natural language conversation, including… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | apiiro-guardianmcp · back-endalso listed as apiiro-guardian-agent-mcp-server | Application security posture management tools for AI coding assistants. | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | sigmamcp · other | pySigma-powered Sigma security detection rule validation. | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | devanshkaria88-depshieldmcp · other | Security checkpoint that intercepts package installations to block vulnerable dependencies. | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | ronantakizawa-social-videomcp · auth | Plays YouTube and TikTok videos through a local mpv player with full playback control, account browsing, smart recommendations, and cookie-based… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | claude-code-starter-kit-mcpmcp · ai-agents | Enables AI-powered automated testing, security scanning, code review, and maintenance tasks directly within Claude Code or desktop. | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | adityasugandhi-skillsyncmcp · github-vcsalso listed as skillsync-mcp | Security-gated skill management server that scans GitHub repositories against 60+ threat patterns before allowing installation to Claude Code and… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | timlikesai-code-sandboxmcp · devops | Provides secure code execution across 7 programming languages through Docker containerization with real-time output streaming, syntax validation, and… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | nvd-cve-mcp-servermcp · back-end | Enables users to retrieve and display CVE vulnerability information from the National Vulnerability Database (NVD) with support for keyword search and… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | wanzunz-github-graphql-apimcp · github-vcs | Provides direct access to GitHub's GraphQL API for querying repositories, issues, pull requests, and schema documentation with secure authentication… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | r3versein-hackermcp-pentestingmcp · other | Integrates penetration testing tools like Nmap and Metasploit Framework through tmux session management to enable automated security assessments… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | rohit-kaundal-digitaloceanmcp · auth | Integrates with DigitalOcean cloud infrastructure using OAuth2 authentication to provide complete CRUD operations for droplets, volumes, snapshots… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | adamshannag-api-toolsmcp · back-end | Converts JSON configuration files into callable tools for dynamic API integration, enabling rapid exposure of REST APIs through declarative schemas… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | quickjs-sandboxmcp · devops | Provides a secure JavaScript execution environment using QuickJS in WebAssembly, enabling safe execution of arbitrary JavaScript code without security… | 4 stars · 1 fork | No one-command install · Source | |
| 801 | 49.118 | noveum-api-marketmcp · back-end | Converts OpenAPI specifications from API.market into tools for accessing over 200 services including image generation, geocoding, and content… | 4 stars · 1 fork | No one-command install · Source | |
| 820 | 48.979 | middlebrick-api-securitymcp · back-end | Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data… | 2,930 installs | No commit datelisted | No one-command install · Source |
| 821 | 48.479 | wg21-wiki-mcpmcp · ai-agents | A local MCP server that gives an LLM agent read access to the WG21 (ISO C++) committee wiki as a verifiable source of truth, requiring authentication… | 1 star · 3 forks | No one-command install · Source | |
| 821 | 48.479 | samvas-codes-dawshund-mcpmcp · back-end | An MCP server based on dAWShund to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and… | 1 star · 3 forks | No one-command install · Source | |
| 821 | 48.479 | databutton-app-proxymcp · back-end | Enables using Databutton app API endpoints as tools by establishing secure websocket connections and handling authentication for seamless integration | 1 star · 3 forks | No one-command install · Source | |
| 821 | 48.479 | mailpacemcp · back-end | Provides a bridge to MailPace's transactional email API for sending HTML/text emails with attachments, custom headers, and CC/BCC recipients using… | 1 star · 3 forks | No one-command install · Source | |
| 825 | 48.150 | sentinelone-mcpmcp · other | Multitenant Streamable HTTP wrapper for SentinelOne's purple-mcp. Enables MSPs to expose SentinelOne threat detection and response capabilities to AI… | 4 forks | No one-command install · Source | |
| 826 | 47.273 | mcp-pypimcp · back-end | A security-focused MCP server that enables AI assistants to search PyPI packages, scan for vulnerabilities, audit dependencies, and ensure security… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | higgsfield-unlimited-mcpmcp · auth | MCP server for Higgsfield AI that enables unlimited-mode image, video, audio generation, uploads, and job management via multiple parallel accounts… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | mcp-sqlservermcp · database | A powerful MCP server for Microsoft SQL Server that connects AI assistants directly to your SQL Server databases with enterprise-grade security… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | agentseal-mcp-intelmcp · ai-agents | Enables users to scan MCP servers for security threats, check installed servers, and analyze config files for risks, all from AI assistants like… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | fantasieleven-code-calloutmcp · other | Multi-perspective architecture review for AI-assisted development. Nine expert viewpoints (CTO, Security, Product, DevOps, Customer, Strategy… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | guardianshieldmcp · observabilityalso listed as sparkvibe-guardianshield | Universal AI security layer for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging. | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | mcp-vanguardmcp · back-end | A security pentesting MCP server with 89 tools across 10 categories, enabling comprehensive reconnaissance, web security, OSINT, and exploitation… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | mysqlmcpmcp · database | A high-performance MySQL database MCP server providing 29 professional tools for data operations, schema management, bulk operations, backup… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | wangmhaha-apifoxmcp · back-end | Bridges Claude with Apifox API testing platform, enabling direct interaction with API documentation and testing capabilities through environment… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | hrishi0102-spotifymcp · auth | Integrates with Spotify to enable music search, playlist creation, personalized recommendations, and profile management through secure OAuth… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | ranjeet-floyd-informix-dbmcp · database | Provides secure database operations for IBM Informix databases with configurable read-only and full SQL access modes, connection pooling, and built-in… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | trivy-sbom-generatormcp · front-end | Generates Software Bill of Materials (SBOM) for container images using Trivy scanner, providing detailed component information including package… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | kiss-kedaya-cryptomcp · other | Provides cryptographic operations including encryption, decryption, hashing, and digital signatures using the PyCryptodome library for secure data… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | google-formsmcp · auth | Enables programmatic interaction with Google Forms by generating refresh tokens and establishing OAuth authentication for automating form-related… | 3 stars · 2 forks | No one-command install · Source | |
| 826 | 47.273 | miguelg719-home-assistantmcp · observability | Integrates Home Assistant devices and automation into workflows, enabling control and monitoring of smart home systems like lighting, climate, and… | 3 stars · 2 forks | No one-command install · Source | |
| 842 | 46.654 | mcpaymcp · back-end | High-performance Go gateway and reverse proxy for Model Context Protocol servers with rate-limiting, authorization, and pay-per-result metering. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | safe-bifrostmcp · ai-agents | A local MCP server that provides a safe plan-and-execute workflow for AI coding assistants, storing plans and tasks, and executing agent commands with… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | cryptojones-kali-toolsmcp · auth | Wraps 8 Kali Linux security tools (nmap, nikto, gobuster, sslscan, whois, dig, searchsploit, openssl) with token-based authorization and target… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | cipher-rc5-firecrawlmcp · back-end | Self-hostable Firecrawl MCP server built with Effect-TS and Bun, supporting Vercel deployment, Prometheus metrics, multi-tenant authentication, and… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | pocmap-mcp-servermcp · back-end | AI-agent-optimized CVE exploit discovery toolkit that provides 19 tools for finding proof-of-concept exploits, CTF labs, bug bounty reports, and… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | argus-qamcp · back-end | AI-powered QA testing platform — catches JS errors, accessibility failures, visual regressions, API loops, security issues, and more via Chrome… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | tenable-identity-exposure-mcp-servermcp · back-end | Exposes the Tenable Identity Exposure (TIE) REST API as tools for LLM clients, enabling queries on security profiles, activity timelines, AD objects… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | rm-rf-prod-groundtruthmcp · other | Live documentation fetcher and code auditor covering 363+ libraries with 100+ security and best-practice audit patterns. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | ragbrain-auth-mcp-servermcp · auth | Provides MCP tools for RagBrain authentication, including register, login, and fetching the current user's profile. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | greynoise-mcp-servermcp · back-end | MCP server for GreyNoise threat intelligence, enabling IP analysis, GNQL queries, tag and vulnerability lookups, and session/pcap retrieval via… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | oculo-mcp-servermcp · back-end | An AI-powered native browser that provides 12 MCP tools for AI clients to browse, interact with, and extract data from any website with low token cost… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | appium-mcp-authmcp · auth | Authentication and authorization plugin for appium-mcp, adding bearer API keys, OAuth JWT, session tokens, scope-based authorization, rate limiting… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | eigen-plc-mcpmcp · ai-agents | An open-source MCP server for industrial automation that generates, debugs, and validates PLC code for Siemens S7-1200, serving as a free and… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | huawei-cloud-mcp-serversmcp · auth | Provides MCP servers for managing Huawei Cloud ECS, CodeArts Pipeline, and CTS audit logs with unified JWT authentication and role-based access… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | marucie-authboxmcp · auth | Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | bettyguo-postgresmcp · database | Security-hardened read-only PostgreSQL MCP server with AST-based SQL guard using pglast, per-transaction safety envelope, and JSON-Lines audit… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | nraintd-kali-linuxmcp · database | Access to Kali Linux penetration testing tools including nmap, nikto, sqlmap, and hydra. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | agentic-storemcp · ai-agents | Open-source AI agent toolkit providing code analysis, security scanning, web search, and persistent memory tools. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | mcp-server-postgresmcp · database | Provides a secure, schema-aware PostgreSQL database agent for LLMs, enabling natural language queries and validated SQL execution with strong security… | 5 stars | No one-command install · Source | |
| 842 | 46.654 | fedramp-20x-mcp-servermcp · back-endalso listed as kevinrabun-fedramp-20x | Provides access to FedRAMP 20x security requirements and controls with Azure-first guidance. | 5 stars | No one-command install · Source | |
| 842 | 46.654 | kevin-valerio-aflppmcp · ai-agents | Integrates with AFL++ fuzzing framework for automated security testing through workspace management, instrumented binary compilation, corpus… | 5 stars | No one-command install · Source | |
| 864 | 45.714 | titan-storemcp · search | TitanStore provides AI agents with programmatic access to compute credits, API keys, cloud storage, and GPU capacity. Search products, manage cart… | 1,542 installs | No commit datelisted | No one-command install · Source |
| 865 | 44.256 | mittwald-mcp-servermcp · auth | Enables external MCP clients to execute Mittwald CLI commands on behalf of users via stateless OAuth authentication. | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | freepik-prometheusmcp · auth | Integrates with Prometheus monitoring systems to provide instant PromQL queries, range queries with time windows, and metric discovery with enterprise… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | msf-harnessmcp · auth | Enables AI agents to conduct authorized penetration tests by providing scope-enforced access to Metasploit Framework's RPC, with tools for… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | sec-netexec-mcpmcp · back-end | An MCP server that enables AI assistants to execute NetExec network penetration testing commands via SSH to a Kali Linux machine, supporting protocols… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | huntermcp · ai-agents | AI-driven penetration testing MCP server that equips Claude with 13 tools for automated reconnaissance, analysis, vulnerability validation, and… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | thinkneo-mcp-servermcp · back-end | Open-source MCP server providing 72 tools for AI governance, observability, and security, with a built-in defense layer (ThinkShield). | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | kiteworksmcp · auth | Integrates with Kiteworks enterprise file sharing platforms through OAuth 2.0 authentication to provide secure file and folder management capabilities… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | rudraneel93-mcp-guardianmcp · back-end | Provides security monitoring and governance for MCP server interactions. | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | fuzzmind-frida-mcpmcp · ai-agents | A Frida MCP server for authorized dynamic analysis and application security research, exposing device/session management, script injection, process… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | nodriver-proxy-mcpmcp · browser | Gives AI agents a browser that bypasses bot detection, a MITM proxy for traffic interception, and a Python sandbox to autonomously write and execute… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | greenbonemcpmcp · back-end | An MCP server connecting AI clients to Greenbone/OpenVAS for vulnerability scanning workflows, enabling scan creation, monitoring, report retrieval… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | lu-zhengda-virtual-filesystemmcp · database | PostgreSQL-backed virtual filesystem with session isolation, cross-session shared stores, POSIX-style operations, and Row Level Security. | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | mikrotik-mcp-servermcp · back-end | Enables management of MikroTik routers running RouterOS 6 and 7 via SSH, Telnet, or API with automatic command adaptation. Provides over 46 MCP tools… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | jhuntinfosec-openctimcp · other | Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | quantmew-patchrightmcp · browser | Provides browser automation with session inheritance, enabling seamless web automation that maintains user authentication states and preferences from… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | licensespringmcp · back-end | Integrates with LicenseSpring's license management platform to enable software license activation, validation, consumption tracking, customer… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | relaxcloud-cn-port-scannermcp · devops | Provides network port scanning, HTTP service discovery, and admin directory enumeration with banner grabbing, service version detection, and… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | el-el-san-vidumcp · back-end | Transforms static images into dynamic videos with customizable parameters through the Vidu AI video generation API, handling authentication, file… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | k4sku-ai-pair-programmermcp · other | Ruby-based pair programming assistant providing five specialized tools for code review, brainstorming, performance analysis, and security audits… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | dishant27-twittermcp · back-end | Integrates with Twitter's API to enable posting tweets, searching content, managing profiles, and handling follower relationships with robust error… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | emeryray2002-virustotalmcp · back-end | Bridges to the VirusTotal API for comprehensive threat intelligence, enabling security analysts to analyze file hashes, URLs, domains, and IP… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | x3r0k-shodanmcp · database | Integrates with Shodan's database to enable host information lookup, vulnerability scanning, and DNS resolution for security research and network… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | tim10002-azure-resourcemcp · back-end | Integrates with Azure cloud services to enable resource listing, management, and cost analysis through service principal authentication and the Azure… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | launchthatbrand-graphqlmcp · back-end | Enables LLMs to interact with GraphQL APIs through schema introspection and query execution, with security measures like disabled mutations by… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | lorrylockie-larkmcp · auth | Provides a bridge to Lark/Feishu workplace collaboration platform, enabling access to employee information and messaging capabilities with automatic… | 3 stars · 1 fork | No one-command install · Source | |
| 865 | 44.256 | ethereumdegen-rustmcp · auth | Provides a flexible, type-safe Rust foundation for building applications with tool management, authentication handling, and custom middleware support… | 3 stars · 1 fork | No one-command install · Source | |
| 891 | 43.498 | goodreads-mcpmcp · ai-agents | A read-only MCP server for Goodreads that enables LLMs to search for books, retrieve detailed book info with ratings and reviews, and explore… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | myfitnesspal-mcp-servermcp · ai-agents | Enables Claude to manage MyFitnessPal food diaries, nutrition goals, exercises, body measurements, and water intake via a remote MCP server using… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | osidb-mcpmcp · ai-agents | MCP server for OSIDB (Red Hat Product Security's vulnerability management system). Enables read-only querying of flaws, affects, trackers, and status… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | unwindmcp · observability | A security layer for AI agents that monitors, checks, and records every action, providing a trust light, timeline, rewind, and ghost mode for testing… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | revsmoke-prompt-rejectormcp · ai-agents | Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities. | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | fwrule-mcpmcp · back-end | An MCP server that analyzes firewall rule overlap, duplication, shadowing, and conflicts across multi-vendor firewall policies. | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | sinxne0-pentestmcp · back-end | Comprehensive ethical penetration testing server exposing 40+ industry-standard security tools. | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | ibm-qradar-mcp-servermcp · back-end | A Model Context Protocol (MCP) server that provides comprehensive access to IBM QRadar security intelligence platform. Query logs, events, offenses… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | mcp-database-managermcp · database | Enables AI assistants to interact with and manage multiple database types (PostgreSQL, MySQL, SQLite, SQL Server, MongoDB, Redis) through natural… | 2 stars · 2 forks | No one-command install · Source | |
| 891 | 43.498 | slanycukr-bugbountymcp · database | Provides specialized bug bounty hunting tools for reconnaissance, vulnerability discovery, and security testing with automated workflows, OSINT… | 2 stars · 2 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.