Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1 | 98.5758 | zinja-coder-jadx-ai-mcpmcp · ai-agents | JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live reverse… | 2,741 stars · 249 forks | No one-command install · Source | |
| 2 | 98.5433 | vmoranv-jshookmcp · browser | JavaScript analysis, security auditing, browser automation, and hook injection via MCP. | 1,970 stars · 457 forks | No one-command install · Source | |
| 3 | 98.4537 | korotovsky-slack-conversationsmcp · auth | Bridges AI with Slack's messaging platform, enabling access to conversation history from channels through secure authentication and flexible transport… | 1,808 stars · 366 forks | No one-command install · Source | |
| 4 | 98.4314 | mariocandela-beelzebubmcp · ai-agents | Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious agent behavior… | 2,165 stars · 205 forks | No one-command install · Source | |
| 5 | 98.3634 | pentest-aimcp · other | Provides penetration testing tools for reconnaissance, vulnerability scanning, and exploit assistance. | 1,641 stars · 315 forks | No one-command install · Source | |
| 6 | 98.2942 | mukul975-cvemcp · other | Security intelligence with 27 tools across 21 sources including NVD, EPSS, VirusTotal, and Shodan. | 1,587 stars · 261 forks | No one-command install · Source | |
| 7 | 98.2880 | nugetmcp · other | Real-time NuGet package management with vulnerability detection and intelligent version updates | 1,554 stars · 275 forks | No one-command install · Source | |
| 8 | 98.2329 | supermemorymcp · other | Personal knowledge platform that helps collect, organize, and recall information from various sources with end-to-end encryption and optional… | 1,722 stars · 176 forks | No one-command install · Source | |
| 9 | 98.0450 | mongodb-js-mongodbmcp · database | Provides a bridge between MongoDB databases and conversational interfaces, enabling comprehensive database operations, collection management, schema… | 1,116 stars · 283 forks | No one-command install · Source | |
| 10 | 97.9635 | junglemcp · back-end | Self-hosted MCP tool registry and proxy server that enables centralized discovery, management, and secure access to multiple MCP servers through a… | 1,242 stars · 156 forks | No one-command install · Source | |
| 11 | 97.9407 | portswigger-burp-suitemcp · other | Integrates with Burp Suite for web security testing, enabling HTTP request manipulation, proxy history analysis, and security testing operations for… | 1,124 stars · 185 forks | No one-command install · Source | |
| 12 | 97.6104 | mcp-kali-servermcp · back-end | Connects MCP clients to a Kali Linux terminal for AI-assisted penetration testing and CTF challenge solving by executing commands like Nmap… | 808 stars · 160 forks | No one-command install · Source | |
| 13 | 97.5896 | gh05tcrew-metasploit-frameworkmcp · other | Provides a secure interface to Metasploit Framework's penetration testing capabilities, enabling exploit execution, payload generation, session… | 732 stars · 207 forks | No one-command install · Source | |
| 14 | 97.4676 | cyfrin-aderynmcp · other | Provides intelligent Solidity smart contract analysis through the Aderyn static analyzer, scanning codebases to identify security vulnerabilities… | 794 stars · 117 forks | No one-command install · Source | |
| 15 | 97.4039 | reddit-buddymcp · auth | Provides clean access to Reddit's public API through specialized tools for browsing subreddits, searching content, retrieving posts with comments… | 809 stars · 98 forks | No one-command install · Source | |
| 16 | 97.4032 | luckypipewrench-pipelockmcp · back-end | Security harness that wraps MCP servers as stdio proxies with credential exfiltration prevention, DLP pattern matching, and SSRF protection. | 828 stars · 95 forks | No one-command install · Source | |
| 17 | 97.2728 | tufantunc-ssh-mcpmcp · ai-agents | MCP server exposing SSH control for Linux and Windows servers via Model Context Protocol. Securely execute remote shell commands with password or SSH… | 680 stars · 104 forks | No one-command install · Source | |
| 18 | 97.2708 | golfmcp · ai-agents | Easiest framework for building MCP servers with automatic discovery of tools, prompts, and resources, plus enterprise-grade authentication and… | 839 stars · 70 forks | No one-command install · Source | |
| 19 | 97.2446 | fofamapmcp · ai-agents | A MCP-enabled asset mapping and vulnerability scanning agent with AI self-reflection, allowing natural language queries and automated scanning… | 713 stars · 95 forks | No one-command install · Source | |
| 20 | 97.1664 | damms005-devdbmcp · back-end | Exposes database tables and schemas via HTTP endpoints, allowing tools to query database structure without direct database access for… | 1,431 stars · 39 forks | No one-command install · Source | |
| 21 | 97.1595 | cyproxio-security-toolsmcp · database | Bridges popular security tools (Nmap, Masscan, SQLMap, FFUF) with external systems for network scanning, port discovery, SQL injection testing, and… | 633 stars · 100 forks | No one-command install · Source | |
| 22 | 97.0680 | jtang613-ghidra-assistmcp · other | Integrates with Ghidra's analysis framework to provide binary reverse engineering capabilities including function decompilation, disassembly… | 732 stars · 66 forks | No one-command install · Source | |
| 23 | 97.0040 | zinja-coder-apktoolmcp · search | Provides a bridge to the APKTool utility for analyzing and modifying Android applications, enabling decoding, editing, searching, rebuilding, and… | 658 stars · 67 forks | No one-command install · Source | |
| 24 | 96.9083 | marcelmarais-spotifymcp · auth | Integrates with Spotify to enable music playback control, playlist management, and track searching through OAuth authentication and a lightweight… | 443 stars · 143 forks | No one-command install · Source | |
| 25 | 96.8841 | semgrepmcp · other | Integrates with Semgrep's static analysis engine to scan code for security vulnerabilities and coding issues, enabling developers to identify and fix… | 685 stars · 56 forks | No one-command install · Source | |
| 26 | 96.7600 | wiremcp-network-traffic-analysismcp · observability | Empowers network analysis with real-time traffic monitoring capabilities through Wireshark's tshark utility, providing tools for packet capture… | 577 stars · 62 forks | No one-command install · Source | |
| 27 | 96.7360 | coleam00-postgresql-github-oauthmcp · database | Provides secure PostgreSQL database access with GitHub OAuth authentication, enabling read-only operations for all authenticated users while… | 299 stars · 142 forks | No one-command install · Source | |
| 28 | 96.7083 | mhaggis-security-detectionsmcp · database | Aggregates security detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a unified searchable SQLite database with MITRE ATT&CK mappings and… | 478 stars · 75 forks | No one-command install · Source | |
| 29 | 96.5981 | anyproto-anytypemcp · back-end | Converts any OpenAPI 3.0/3.1 specification into callable tools by automatically generating schemas from REST API endpoints, handling authentication… | 517 stars · 57 forks | No one-command install · Source | |
| 30 | 96.1037 | mordavid-bloodhoundmcp · other | Integrates with BloodHound security tool to analyze Active Directory and Azure environments for attack paths, privilege escalation opportunities, and… | 375 stars · 56 forks | No one-command install · Source | |
| 31 | 95.9497 | duriantaco-skylosmcp · ai-agents | Privacy-first SAST tool for Python, TypeScript, and Go that detects dead code, security vulnerabilities, and code quality issues with hybrid AST and… | 546 stars · 30 forks | No one-command install · Source | |
| 32 | 95.8246 | canvrno-proxmoxmcp · back-end | Integrates with Proxmox virtualization environments to enable monitoring and management of virtual machines, containers, storage pools, and cluster… | 288 stars · 69 forks | No one-command install · Source | |
| 33 | 95.6957 | gh-smart-mcp-proxy-mcpproxymcp · other | Smart proxy with BM25 tool discovery, quarantine security, and token savings. | 330 stars · 44 forks | No one-command install · Source | |
| 34 | 95.6379 | atomic-mail-agenticmcp · auth | Read and write email through the Atomic Mail from an AI agent. Handles proof-of-work authentication and JMAP so the agent thinks in JMAP method calls… | 264 stars · 66 forks | No one-command install · Source | |
| 35 | 95.6320 | gojue-molingmcp · back-end | Enables AI to interact with local system resources through a secure, configurable server that provides browser automation, file operations, and… | 338 stars · 40 forks | No one-command install · Source | |
| 36 | 95.6016 | crowdstrike-falconmcp · auth | Connect with the CrowdStrike Falcon platform for intelligent security analysis, providing programmatic access to detections, incidents, behaviors… | 243 stars · 80 forks | No one-command install · Source | |
| 37 | 95.5038 | mikrotik-mcpmcp · other | Provides a bridge between AI assistants and MikroTik RouterOS devices, enabling natural language management of VLANs, firewall rules, DNS settings… | 262 stars · 57 forks | No one-command install · Source | |
| 38 | 95.5001 | dnakov-radare2mcp · other | Provides direct access to radare2's binary analysis framework for reverse engineering, malware analysis, and debugging through a simple stdin/stdout… | 311 stars · 39 forks | No one-command install · Source | |
| 39 | 95.4784 | grafbase-nexusmcp · auth | AI gateway that aggregates multiple MCP servers and LLM providers through a unified HTTP interface with JWT authentication, rate limiting, and tool… | 435 stars · 27 forks | No one-command install · Source | |
| 40 | 95.4109 | unmuktoai-wazuhmcp · search | Integrates with Wazuh security platform to provide real-time security alerts and event data from Elasticsearch indices for security operations and… | 241 stars · 64 forks | No one-command install · Source | |
| 41 | 95.3842 | sdglbl-claude-codemcp · ai-agents | Enables Claude to execute code-related tasks through direct tools for code understanding, modification, command execution, and file operations with… | 303 stars · 37 forks | No one-command install · Source | |
| 42 | 95.3212 | gbrigandi-mcp-server-wazuhmcp · back-end | 🚨 🍎 🪟 🐧 - A Rust-based MCP server bridging Wazuh SIEM with AI assistants, providing real-time security alerts and event data for enhanced… | 237 stars · 61 forks | No one-command install · Source | |
| 43 | 95.2731 | versuscontrol-aws-infrastructure-agentmcp · devops | Provides autonomous AWS infrastructure management through natural language processing, combining real-time resource discovery with AI-driven planning… | 217 stars · 71 forks | No one-command install · Source | |
| 44 | 95.2384 | bhavsec-autopentest-aimcp · other | Automated web application penetration testing framework implementing OWASP WSTG methodology. | 231 stars · 60 forks | No one-command install · Source | |
| 45 | 95.2161 | digitaloceanmcp · devops | Enables AI to manage DigitalOcean cloud infrastructure by providing access to account information, droplets, domains, firewalls, and other services… | 131 stars · 84 forks | No one-command install · Source | |
| 46 | 95.1648 | gmail-mcp-server-artymclabin-forkmcp · auth | Lean Gmail MCP server with auto authentication, attachments, thread operations, filter management, and configurable OAuth scopes. Actively maintained… | 231 stars · 55 forks | No one-command install · Source | |
| 47 | 95.1381 | lyonzin-knowledge-ragmcp · search | Local knowledge retrieval system that combines semantic search with keyword-based routing for document analysis across security, development, and… | 265 stars · 38 forks | No one-command install · Source | |
| 48 | 95.1067 | gannonh-firebasemcp · back-end | Enables Firebase Authentication, Firestore, and Storage operations for developers building applications that require seamless backend service… | 248 stars · 41 forks | No one-command install · Source | |
| 49 | 95.0643 | azure-api-management-gateway-with-entra-id-authenticationmcp · back-end | Secures remote AI servers using Azure API Management as a gateway with Microsoft Entra ID authentication, enabling enterprise-grade access control for… | 128 stars · 79 forks | No one-command install · Source | |
| 50 | 95.0057 | loopwork-openapi-transformermcp · back-end | Transforms OpenAPI specifications into ready-to-use tools that enable seamless interaction with REST APIs through automatic endpoint mapping… | 331 stars · 26 forks | No one-command install · Source | |
| 51 | 94.8733 | jamsusmaximus-trainingpeaksmcp · auth | Integrates with TrainingPeaks through cookie-based authentication to access workout data, personal records, and fitness metrics for endurance sports… | 150 stars · 69 forks | No one-command install · Source | |
| 52 | 94.7649 | bx33661-wiresharkmcp · other | TShark network packet analysis with capture, protocol stats, field extraction, and security analysis. | 272 stars · 28 forks | No one-command install · Source | |
| 53 | 94.4545 | open-edisonmcp · observability | Deterministic agentic data firewall that secures, monitors, and controls AI agent interactions with data and software via MCP, preventing data leaks. | 288 stars · 22 forks | No one-command install · Source | |
| 54 | 94.4175 | securityfortech-secops-mcpmcp · ai-agents | All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it… | 208 stars · 33 forks | No one-command install · Source | |
| 55 | 94.4010 | cycode-security-scannermcp · github-vcs | Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning on local files, Git repositories, and commit… | 100 stars · 66 forks | No one-command install · Source | |
| 56 | 94.3906 | roomi-fields-notebooklmmcp · auth | Integrates with Google NotebookLM through browser automation to enable document analysis, question answering, and notebook library management with… | 171 stars · 53 forks | No one-command install · Source | |
| 57 | 94.3718 | henkdz-postgresqlmcp · database | Integrates with PostgreSQL databases to enable schema management, data migration, performance monitoring, and security configuration through direct… | 198 stars · 36 forks | No one-command install · Source | |
| 58 | 94.3280 | dddabtc-winremotemcp · browser | Remote control and automation for Windows desktops with tiered security, supporting screenshots, input control, file operations, PowerShell, OCR, and… | 187 stars · 39 forks | No one-command install · Source | |
| 59 | 94.3058 | barryyip0625-discordmcp · front-end | Integrates with Discord to enable channel management, forum post creation, message sending, and reaction handling through secure authentication and… | 103 stars · 64 forks | No one-command install · Source | |
| 60 | 94.3051 | cy-s3c-burpmcp-ultramcp · back-end | Burp Suite extension with embedded MCP server exposing 137 tools for web security testing via SSE transport. | 209 stars · 30 forks | No one-command install · Source | |
| 61 | 94.2849 | jimprosser-obsidian-webmcp · auth | Remote Obsidian vault access over HTTPS with OAuth 2.0 authentication and Cloudflare Tunnel security. | 165 stars · 53 forks | No one-command install · Source | |
| 62 | 94.1714 | taida957789-ida-promcp · other | Enables direct interaction with IDA Pro for binary analysis tasks including disassembly, decompilation, and function querying for malware analysis and… | 188 stars · 34 forks | No one-command install · Source | |
| 63 | 94.1626 | huccihuang-bilibili-searchmcp · auth | Enables search across Bilibili's Chinese video platform through a lightweight FastMCP interface that retrieves video content, user information, and… | 190 stars · 33 forks | No one-command install · Source | |
| 64 | 94.1469 | mladensu-cli-mcp-servermcp · back-end | Execute shell commands with strict security policies. | 178 stars · 37 forks | No one-command install · Source | |
| 65 | 93.9939 | floriscornel-teamsmcp · back-end | Integrates with Microsoft Teams through Graph API to search messages, manage chats and channels, send messages, create group chats, and handle… | 133 stars · 55 forks | No one-command install · Source | |
| 66 | 93.9262 | anton10xr-gibbermcp · back-end | Provides cryptographic tools for secure communication, including key generation, shared secret derivation, and message encryption/decryption using… | 215 stars · 23 forks | No one-command install · Source | |
| 67 | 93.7623 | postrv-narsilmcp · other | Deep code intelligence with tree-sitter parsing, call graphs, and security vulnerability scanning | 182 stars · 27 forks | No one-command install · Source | |
| 68 | 93.6343 | cmdaltctr-gemini-climcp · back-end | Integrates with Google's Gemini models through API and CLI to provide intelligent code analysis, security auditing, and large-scale codebase… | 234 stars · 18 forks | No one-command install · Source | |
| 69 | 93.6287 | rust-mcp-stack-filesystemmcp · other | Provides secure, high-performance access to local filesystem operations with strict path validation, enabling read/write file manipulation while… | 174 stars · 27 forks | No one-command install · Source | |
| 70 | 93.5331 | philschmid-code-sandboxmcp · devops | Provides secure code execution capabilities through containerized sandbox environments, supporting Python and JavaScript with pre-installed libraries… | 203 stars · 20 forks | No one-command install · Source | |
| 71 | 93.5092 | mrwyndham-pocketbasemcp · database | Provides a bridge between AI systems and PocketBase databases, enabling direct interaction with collections, records, and user authentication for… | 151 stars · 34 forks | No one-command install · Source | |
| 72 | 93.4747 | pydantic-logfire-opentelemetrymcp · observability | Enables AI systems to query and analyze OpenTelemetry traces and metrics through Logfire's API, providing tools for finding exceptions, investigating… | 162 stars · 28 forks | No one-command install · Source | |
| 73 | 93.4581 | socket-securitymcp · back-end | Integrates with Socket's dependency security API to analyze npm and PyPI packages, returning detailed security and quality metrics for vulnerability… | 132 stars · 45 forks | No one-command install · Source | |
| 74 | 93.4135 | arkanamcp · back-end | An MCP server that provides 294 malware analysis tools behind an AI-driven interface, enabling natural language investigation of binaries. | 211 stars · 18 forks | No one-command install · Source | |
| 75 | 93.2595 | burtthecoder-shodanmcp · back-end | Access Shodan API and CVEDB to query IoT device data and vulnerability information. | 161 stars · 25 forks | No one-command install · Source | |
| 76 | 93.0721 | vnshmcp · other | Ephemeral encrypted file sharing for AI with AES-256 encryption and 24-hour auto-deletion. | 156 stars · 24 forks | No one-command install · Source | |
| 77 | 92.9897 | dynatrace-oss-dynatracemcp · observability | Integrates with Dynatrace to provide real-time observability data, enabling developers to monitor problems, security vulnerabilities, logs, and… | 138 stars · 28 forks | No one-command install · Source | |
| 78 | 92.8164 | lekssays-joernmcp · observability | Provides static code analysis capabilities using Joern's Code Property Graph technology in Docker environments, automatically detecting programming… | 163 stars · 19 forks | No one-command install · Source | |
| 79 | 92.7335 | aikts-yandex-trackermcp · auth | Integrates with Yandex Tracker for comprehensive issue management, queue operations, user management, and project data access with OAuth 2.0… | 113 stars · 36 forks | No one-command install · Source | |
| 80 | 92.7207 | jordyzomer-codeqlmcp · other | Bridges to the CodeQL static analysis engine for identifying security vulnerabilities and quality issues in codebases through structured query… | 149 stars · 21 forks | No one-command install · Source | |
| 81 | 92.6999 | jdez427-claude-ipcmcp · auth | Enables secure inter-process communication between multiple AI instances running on the same machine through TCP socket-based message brokering… | 133 stars · 25 forks | No one-command install · Source | |
| 82 | 92.6835 | hexsleeves-tailscalemcp · back-end | Integrates with Tailscale's CLI and REST API to provide network management capabilities including device authorization, route configuration, ACL… | 136 stars · 24 forks | No one-command install · Source | |
| 83 | 92.6284 | burtthecoder-virustotalmcp · back-end | This VirusTotal MCP server enables AI assistants to programmatically access VirusTotal's threat intelligence for security analysis and threat… | 149 stars · 20 forks | No one-command install · Source | |
| 84 | 92.5240 | stevenyu113228-bloodhoundmcp · database | Enables security professionals to analyze Active Directory and Azure AD environments through natural language queries by connecting to BloodHound's… | 160 stars · 17 forks | No one-command install · Source | |
| 85 | 92.4992 | jnmetacode-shellwardmcp · ai-agents | AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII… | 131 stars · 23 forks | No one-command install · Source | |
| 86 | 92.4565 | brandon-ghidramcp · search | Integrates with Ghidra's binary analysis capabilities to enable decompiled code retrieval, function analysis, and security assessment of binaries… | 135 stars · 21 forks | No one-command install · Source | |
| 86 | 92.4565 | dkruyt-hetznermcp · back-end | Integrates with Hetzner Cloud API to enable management of cloud infrastructure resources including servers, volumes, firewalls, and SSH keys for… | 135 stars · 21 forks | No one-command install · Source | |
| 88 | 92.3881 | zencoderai-slackmcp · auth | Integrates with Slack workspaces to enable complete messaging operations including channel management, message posting, thread replies, reactions, and… | 75 stars · 41 forks | No one-command install · Source | |
| 89 | 92.3849 | jfrogmcp · github-vcs | Bridges to the JFrog Platform, enabling interaction with Artifactory repositories, builds, security scanning, and release management for streamlined… | 118 stars · 26 forks | No one-command install · Source | |
| 90 | 92.3687 | discoursemcp · back-end | Integrates with Discourse forums through API tools and remote tool discovery, enabling search, content management, user lookup, and automated… | 74 stars · 41 forks | No one-command install · Source | |
| 91 | 92.3345 | jlucaso1-whatsappmcp · search | Connects AI to WhatsApp accounts using TypeScript and Baileys, enabling message history retrieval, contact search, and secure communication through… | 72 stars · 41 forks | No one-command install · Source | |
| 92 | 92.2668 | houtini-lmmcp · ai-agents | Provides expert prompt engineering capabilities through LM Studio integration, featuring 35+ specialized functions for code analysis, generation… | 113 stars · 26 forks | No one-command install · Source | |
| 93 | 92.2469 | eliasbiondo-redditmcp · back-end | Browse, search, and read Reddit content without API keys or authentication using the redd scraping library. | 154 stars · 16 forks | No one-command install · Source | |
| 94 | 92.2264 | vectorize-iomcp · database | Bridges Claude with Vectorize.io's vector database services for advanced document retrieval, text extraction, and research capabilities through… | 112 stars · 26 forks | No one-command install · Source | |
| 95 | 92.1892 | dcolley-swaggermcp · back-end | Transforms Swagger/OpenAPI specifications into tools that enable interaction with any documented API through multiple authentication methods and… | 116 stars · 24 forks | No one-command install · Source | |
| 96 | 92.1383 | ibm-imcp · database | Provides direct access to IBM i (AS/400) systems through SQL-based tools and database operations with security validation, connection pooling, and… | 82 stars · 38 forks | No one-command install · Source | |
| 97 | 92.1286 | pentesterflow-offensivesetmcp · back-end | MCP server for generating pentesting conversation datasets to train security-focused language models, with scenario listing and validation tools. | 100 stars · 32 forks | No one-command install · Source | |
| 98 | 91.9685 | howardzhangdqs-wechat-botmcp · auth | Enables AI agents to send and receive WeChat messages through QR code authentication and long-polling message retrieval. | 108 stars · 24 forks | No one-command install · Source | |
| 99 | 91.8212 | purple-ai-mcp-servermcp · back-end | Enables MCP clients to interact with SentinelOne's cybersecurity platform for security analysis, threat investigation, and asset management through… | 95 stars · 30 forks | No one-command install · Source | |
| 100 | 91.6778 | fr0ster-sap-abap-adtmcp · auth | Full CRUD access to SAP ABAP repositories via ADT for on-premise ECC/S4HANA and BTP ABAP Cloud systems with JWT/XSUAA and service-key authentication. | 94 stars · 28 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.