Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1 | 18.412 | sucesio-mcpmcp · other | The AI Seller for Sucesio.io — digital estate planning for expats in Europe. Structured data on product, pricing, use cases, security, and B2B… | 368 installs | No commit datelisted | No one-command install · Source |
| 2 | 22.557 | ansvar-automotive-cybersecuritymcp · other | Automotive cybersecurity standards reference covering R155/R156, ISO 21434, TISAX, and AUTOSAR. | 1 star | No commit datelisted | No one-command install · Source |
| 3 | 22.557 | urlscanmcp · other | Provides a bridge to urlscan.io for analyzing website security and content information through a single tool that accepts URL parameters and returns… | 1 star | No one-command install · Source | |
| 4 | 22.557 | ismsmcp · other | Integrates Mistral AI and Qdrant to provide intelligent security workflows for automated risk assessment, policy management, and contextual incident… | 1 star | No one-command install · Source | |
| 5 | 22.557 | rajnaveen344-lsp-toolsmcp · other | Provides regex-based text analysis capabilities for developers to precisely locate character and line positions of pattern matches within files, with… | 1 star | No one-command install · Source | |
| 6 | 22.557 | rossja-asnlookupmcp · other | Provides network analysis tools for security professionals, enabling IP address lookups with ASN information and organization details for incident… | 1 star | No one-command install · Source | |
| 7 | 22.557 | gongrzhe-office-wordmcp · other | Integrates with Microsoft Word documents to create, read, manipulate content including headings, paragraphs, tables, images, apply rich formatting… | 1 star | No one-command install · Source | |
| 8 | 22.557 | lordbasilaiassistant-sudo-base-security-scannermcp · other | Scans smart contracts on Base for honeypots, rug pulls, hidden mints, and proxy patterns with read-only bytecode analysis. | 1 star | No one-command install · Source | |
| 9 | 22.557 | achilliesbot-delphi-oraclemcp · other | Real-time AI intelligence signals covering security events, market data, and ecosystem developments. | 1 star | No one-command install · Source | |
| 10 | 22.557 | volta-notesmcp · other | Burn-after-read encrypted notes with E2E encryption on the Internet Computer. | 1 star | No one-command install · Source | |
| 11 | 22.557 | unphurlmcp · other | URL intelligence service that analyzes links across security, brand safety, and data quality dimensions, returning structured signals. | 1 star | No one-command install · Source | |
| 12 | 22.557 | guardxmcp · other | A keyless, defensive code-security auditor that scans codebases for hardcoded secrets, audits dependencies for known CVEs, and checks passwords… | 1 star | No one-command install · Source | |
| 13 | 22.557 | daedalus-pymetasploit3mcp · other | Exposes Metasploit Framework capabilities via pymetasploit3 for exploit management and penetration testing. | 1 star | No one-command install · Source | |
| 14 | 22.557 | coderegistrymcp · other | Enterprise code intelligence for M&A, security audits, and technical debt analysis. | 1 star | No one-command install · Source | |
| 15 | 22.557 | mcp-kali-toolsmcp · other | Enables MCP clients to invoke common Kali Linux pentesting tools directly as tool calls, with each binary executed safely without a shell. | 1 star | No one-command install · Source | |
| 16 | 22.557 | mcp-tool-security-inspectormcp · other | Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift… | 1 star | No one-command install · Source | |
| 17 | 23.374 | shutter-network-timelockmcp · other | Encrypts messages using Shutter Network's decentralized timelock encryption system where messages can only be decrypted after a specified future time… | 1 fork | No one-command install · Source | |
| 18 | 23.374 | wyre-technology-blumiramcp · other | Blumira SIEM integration for querying findings, evidence, and detection data. | 1 fork | No one-command install · Source | |
| 19 | 23.374 | veeam-ports-mcpmcp · other | Provides structured access to Veeam product network port requirements. Enables querying ports, generating topology diagrams, and producing firewall… | 1 fork | No one-command install · Source | |
| 20 | 29.013 | cnosuke-command-execmcp · other | Enables secure remote command execution with robust security controls like command allowlisting, direct command invocation without shell access, and… | 1 star · 1 fork | No one-command install · Source | |
| 21 | 29.013 | dnehoda-source-google-secopsmcp · other | Security operations toolkit with 60 tools for Google SecOps, VirusTotal, and threat intelligence. | 1 star · 1 fork | No one-command install · Source | |
| 22 | 32.223 | anthonykewl20-ranex-frameworkmcp · other | Hybrid governance framework combining Rust-based security scanning with Python application development through contract decorators, enabling automated… | 2 stars | No commit datelisted | No one-command install · Source |
| 23 | 32.223 | ansvar-ot-securitymcp · other | OT security standards reference covering IEC 62443, NIST 800-82/53, and MITRE ATT&CK for ICS. | 2 stars | No commit datelisted | No one-command install · Source |
| 24 | 32.223 | christopherwoodall-nmapmcp · other | Provides a bridge to Nmap network scanning tool for performing reconnaissance, port scanning, and service identification with customizable options and… | 2 stars | No one-command install · Source | |
| 25 | 32.223 | bajuzjefe-aikidomcp · other | Security analysis for Aiken smart contracts on Cardano with 75 vulnerability detectors. | 2 stars | No one-command install · Source | |
| 26 | 32.223 | ako2345-android-security-analyzermcp · other | Static security analysis of Android application source code with 53 rules across manifest, Gradle, source, XML, and secret scanning. | 2 stars | No one-command install · Source | |
| 27 | 32.223 | r00tkit77-nessusmcp · other | Transforms Nessus vulnerability scan data into prioritized remediation tasks by correlating CVEs with NVD, CISA KEV, and asset ownership data. | 2 stars | No one-command install · Source | |
| 28 | 32.223 | notasandy-code-sanitizermcp · other | Strict AI code reviewer powered by Groq that detects bugs and security vulnerabilities in code. | 2 stars | No one-command install · Source | |
| 29 | 32.223 | ongjin-security-scannermcp · other | Detects security vulnerabilities in code including OWASP Top 10 threats and hardcoded secrets | 2 stars | No one-command install · Source | |
| 30 | 32.223 | cinderfimcp · other | Retirement planning for Canada and the US with CPP, OAS, Social Security, and Monte Carlo simulations. | 2 stars | No one-command install · Source | |
| 31 | 32.223 | daimonmcp · other | A local daemon for macOS that gives any MCP-capable AI client eyes, hands, and a face — screen capture, accessibility tree, mouse/keyboard actions… | 2 stars | No one-command install · Source | |
| 32 | 32.223 | phantom-mcpmcp · other | Exposes all PHANTOM security testing capabilities as MCP tools, enabling reconnaissance, vulnerability scanning, red teaming, and report generation… | 2 stars | No one-command install · Source | |
| 33 | 32.223 | ratatoskmcp · other | CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release… | 2 stars | No one-command install · Source | |
| 34 | 38.066 | seal-frameworksmcp · other | Read-only access to Security Alliance (SEAL) security framework documentation for Web3 builders. | 2 stars · 1 fork | No one-command install · Source | |
| 35 | 38.066 | mredvard-dev-toolsmcp · other | Exposes developer tools over HTTP with security guardrails for file access, shell execution, and web fetching. | 2 stars · 1 fork | No one-command install · Source | |
| 36 | 38.412 | abdessamad-elamrani-malware-analyzermcp · other | Provides specialized terminal access to common malware analysis tools like 'strings', 'file', 'hexdump', and 'objdump' with parameter validation and… | 3 stars | No one-command install · Source | |
| 37 | 38.412 | pentest-toolsmcp · other | Provides direct access to penetration testing tools including nmap, gobuster, nikto, nuclei, ffuf, dirsearch, hydra, john, and hashcat for… | 3 stars | No one-command install · Source | |
| 38 | 38.412 | spritualkb-nucleimcp · other | Provides a bridge to the Nuclei vulnerability scanning tool, enabling automated security scans on target URLs with configurable parameters like… | 3 stars | No one-command install · Source | |
| 39 | 38.412 | honey-guard-anchormcp · other | Provides security analysis for Solana Anchor programs by exposing tools that check smart contracts against Fender security vulnerabilities directly… | 3 stars | No one-command install · Source | |
| 40 | 38.412 | salrad22-code-sentinelmcp · other | Analyzes code for security vulnerabilities, deceptive patterns, placeholders, and code smells that traditional linters miss. | 3 stars | No one-command install · Source | |
| 41 | 38.412 | cortexd-labs-mcpdmcp · other | Exposes 100+ Linux system administration tools covering processes, services, networking, containers, packages, storage, security, and desktop… | 3 stars | No one-command install · Source | |
| 42 | 38.412 | ghostsecuritymcp · other | Provides programmatic access to Ghost Security's application security platform | 3 stars | No one-command install · Source | |
| 43 | 38.412 | d24yk4r4-bbmcp · other | Privacy-first bug bounty hunting toolkit providing recon, web testing, and vulnerability scanning tools with a sanitization layer. | 3 stars | No one-command install · Source | |
| 44 | 38.412 | gh-downatthebottomofthemolehole-megalintermcp · other | Run Ox Security MegaLinter code analysis via mega-linter-runner for multi-language linting. | 3 stars | No one-command install · Source | |
| 45 | 43.275 | disdjj-cocomcp · other | MCP-Coco provides a pair programming tool that guides technical discussions by transforming code snippets into structured frameworks for critical… | 4 stars | No one-command install · Source | |
| 46 | 43.275 | scorecard-mcpmcp · other | Enables asking natural language questions about OpenSSF Scorecard security assessments for open source projects. | 4 stars | No one-command install · Source | |
| 47 | 43.498 | stefanskiasan-semgrepmcp · other | Integrates Semgrep static analysis capabilities for automated code scanning, vulnerability detection, and security checks in development workflows. | 2 stars · 2 forks | No one-command install · Source | |
| 48 | 43.498 | markdown-to-htmlmcp · other | Converts Markdown content to HTML with syntax highlighting, ensuring proper formatting and security through sanitization | 2 stars · 2 forks | No one-command install · Source | |
| 49 | 44.256 | k4sku-ai-pair-programmermcp · other | Ruby-based pair programming assistant providing five specialized tools for code review, brainstorming, performance analysis, and security audits… | 3 stars · 1 fork | No one-command install · Source | |
| 50 | 44.256 | jhuntinfosec-openctimcp · other | Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and… | 3 stars · 1 fork | No one-command install · Source | |
| 51 | 46.654 | kevinrabun-fedramp-20xmcp · other | Programmatic access to FedRAMP 20x security requirements with Azure-first implementation guidance | 5 stars | No one-command install · Source | |
| 52 | 46.654 | rm-rf-prod-groundtruthmcp · other | Live documentation fetcher and code auditor covering 363+ libraries with 100+ security and best-practice audit patterns. | 5 stars | No one-command install · Source | |
| 53 | 47.273 | kiss-kedaya-cryptomcp · other | Provides cryptographic operations including encryption, decryption, hashing, and digital signatures using the PyCryptodome library for secure data… | 3 stars · 2 forks | No one-command install · Source | |
| 54 | 47.273 | fantasieleven-code-calloutmcp · other | Multi-perspective architecture review for AI-assisted development. Nine expert viewpoints (CTO, Security, Product, DevOps, Customer, Strategy… | 3 stars · 2 forks | No one-command install · Source | |
| 55 | 48.150 | sentinelone-mcpmcp · other | Multitenant Streamable HTTP wrapper for SentinelOne's purple-mcp. Enables MSPs to expose SentinelOne threat detection and response capabilities to AI… | 4 forks | No one-command install · Source | |
| 56 | 49.118 | r3versein-hackermcp-pentestingmcp · other | Integrates penetration testing tools like Nmap and Metasploit Framework through tmux session management to enable automated security assessments… | 4 stars · 1 fork | No one-command install · Source | |
| 57 | 49.118 | devanshkaria88-depshieldmcp · other | Security checkpoint that intercepts package installations to block vulnerable dependencies. | 4 stars · 1 fork | No one-command install · Source | |
| 58 | 49.118 | sigmamcp · other | pySigma-powered Sigma security detection rule validation. | 4 stars · 1 fork | No one-command install · Source | |
| 59 | 49.325 | mohdhaji87-nmapmcp · other | Exposes Nmap network scanning capabilities through 11 specialized tools for network discovery, service detection, OS fingerprinting, vulnerability… | 6 stars | No one-command install · Source | |
| 60 | 49.325 | jnormore-unitaskmcp · other | Safe code execution in ephemeral unikernels with declarative security policies. | 6 stars | No one-command install · Source | |
| 61 | 50.895 | microsoft-sentinelmcp · other | Query and analyze security data, incidents, and threat intelligence from Microsoft Sentinel's data lake using natural language. | 2 stars · 3 forks | No one-command install · Source | |
| 62 | 51.401 | apexfdn-copilot-mcpmcp · other | Provides Web3 founders with tools for project scoring, portfolio matching, fund matching, hackathon discovery, jurisdiction analysis, Twitter audit… | 7 stars | No one-command install · Source | |
| 63 | 53.985 | wrlu-jadx-daemonmcp · other | Provides Android APK and DEX file decompilation through jadx library, enabling extraction of AndroidManifest.xml content, decompiled Java code, smali… | 4 stars · 3 forks | No one-command install · Source | |
| 64 | 55.168 | gh-r3352-redactmcp · other | Automatic PII detection and obfuscation using regex pattern matching and AI-powered Named Entity Recognition for secure data handling during… | 6 stars · 1 fork | No one-command install · Source | |
| 65 | 55.168 | titaniumtushar-burp-mcp-plusmcp · other | Wraps Burp Suite for AI-assisted penetration testing, providing proxy history access, structured HTTP request building, and Intruder integration. | 6 stars · 1 fork | No one-command install · Source | |
| 66 | 57.245 | math280h-safe-pkgsmcp · other | Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning. | 7 stars · 1 fork | No one-command install · Source | |
| 67 | 57.245 | benahammond-code-auditormcp · other | Analyze code for SOLID principles, DRY violations, and security issues | 7 stars · 1 fork | No one-command install · Source | |
| 68 | 57.311 | apk-security-guard-suitemcp · other | Integrates JADX, MobSF, JEB Pro, and APKTOOL to provide Android APK decompilation, security scanning, reverse engineering, and resource extraction for… | 11 stars | No commit datelisted | No one-command install · Source |
| 69 | 57.754 | bmorphism-slowtimemcp · other | Integrates drand and tlock-js to enable secure, time-locked encryption for managing scheduled events with cryptographic guarantees. | 3 stars · 4 forks | No one-command install · Source | |
| 70 | 58.185 | thiagofrag-ldplayer-android-pentestmcp · other | Provides Android penetration testing capabilities through LDPlayer emulator integration with ADB commands, Frida script injection, and 38 security… | 6 stars · 2 forks | No one-command install · Source | |
| 71 | 58.185 | 0xbuz3r-emba-firmware-analyzermcp · other | EMBA firmware security analysis for embedded device scanning. | 6 stars · 2 forks | No one-command install · Source | |
| 72 | 58.185 | securitahguy-rapid7mcp · other | Queries vulnerability and threat data across Rapid7 InsightVM, InsightIDR, and Metasploit Pro using natural language. | 6 stars · 2 forks | No one-command install · Source | |
| 73 | 59.029 | gautamvarmadatla-safety-wardenmcp · other | MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | 8 stars · 1 fork | No one-command install · Source | |
| 74 | 60.035 | go-unifi-mcpmcp · other | Manage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall rules. | 6 stars · 3 forks | No one-command install · Source | |
| 75 | 60.677 | gh-rul1an-assaymcp · other | Firewall for tool calls with policy enforcement, audit trails, and replayable evidence bundles. | 9 stars · 1 fork | No one-command install · Source | |
| 76 | 63.155 | ida-pro-mcp-multimcp · other | Extends IDA Pro with multi-instance support and vulnerability scanning for AI-assisted reverse engineering. | 11 stars · 1 fork | No one-command install · Source | |
| 77 | 63.439 | kevinrabun-judgesmcp · other | Evaluates AI-generated code for security, cost, and quality with AST analysis. | 7 stars · 4 forks | No one-command install · Source | |
| 78 | 63.694 | angr-mcpmcp · other | Exposes angr binary-analysis capabilities (symbolic execution, taint analysis, CFG recovery) as MCP tools for vulnerability exploration and exploit… | 9 stars · 2 forks | No one-command install · Source | |
| 79 | 63.896 | mrexodia-binary-refinerymcp · other | Provides access to Binary Refinery's malware analysis and reverse engineering toolkit for processing binary data, extracting artifacts from suspicious… | 8 stars · 3 forks | No one-command install · Source | |
| 80 | 64.707 | nkcc-apk-mobsfmcp · other | Integrates with MobSF (Mobile Security Framework) to provide automated mobile application security analysis for APK, IPA, and APPX files with… | 23 stars | No commit datelisted | No one-command install · Source |
| 81 | 65.043 | sarkarsaurabh27-deskmatemcp · other | Enables remote control of your Mac through natural language commands, executing shell commands, managing files, and performing system operations with… | 10 stars · 2 forks | No one-command install · Source | |
| 82 | 66.258 | tenzirmcp · other | Integrates with Tenzir data pipelines and OCSF schema framework to execute cybersecurity data processing workflows and retrieve structured security… | 8 stars · 5 forks | No one-command install · Source | |
| 83 | 66.528 | prodlintmcp · other | Static analysis for vibe-coded apps. Flags security, reliability, performance, and AI quality issues in code generated by Cursor, v0, Bolt, and… | 15 stars · 1 fork | No one-command install · Source | |
| 84 | 66.528 | gh-anthony-marcovecchio-prodlintmcp · other | Production readiness checks for vibe-coded apps with 52 security and performance rules. | 15 stars · 1 fork | No one-command install · Source | |
| 85 | 66.871 | n0zer0d4y-vulcan-file-opsmcp · other | Security-centric filesystem operations with enterprise-grade access controls and CVE protection | 9 stars · 4 forks | No one-command install · Source | |
| 86 | 66.871 | scopeblindmcp · other | MCP security gateway enforcing per-tool policies, rate limits, and approval gates with signed audit receipts. | 9 stars · 4 forks | No one-command install · Source | |
| 87 | 66.893 | norbinsh-trivy-security-scannermcp · other | Integrates with Trivy to provide vulnerability scanning and automated remediation for projects across multiple programming languages and package… | 10 stars · 3 forks | No one-command install · Source | |
| 88 | 66.893 | susuya233-ida-pro-binary-analysismcp · other | Integrates with IDA Pro for automated vulnerability scanning including buffer overflows, format strings, and command injection detection with… | 10 stars · 3 forks | No one-command install · Source | |
| 89 | 67.900 | montimage-mitre-attackmcp · other | Access the MITRE ATT&CK cybersecurity knowledge base | 13 stars · 2 forks | No one-command install · Source | |
| 90 | 68.547 | trustifymcp · other | Integrates with Trustify supply chain security platforms to query SBOMs and packages, retrieve vulnerability information by CVE ID or PURL, analyze… | 4 stars · 7 forks | No one-command install · Source | |
| 91 | 68.847 | doublegate-cyberchefmcp · other | Converts CyberChef's 300+ cryptographic, encoding, compression, and data analysis operations into individual tools for cybersecurity analysis, data… | 19 stars · 1 fork | No one-command install · Source | |
| 92 | 69.545 | gleicon-osv-security-analyzermcp · other | Integrates with OSV.dev to identify and analyze potential vulnerabilities in codebases, providing dependency checking and code security analysis with… | 15 stars · 2 forks | No one-command install · Source | |
| 93 | 70.210 | mcp-security-scannermcp · other | Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants. | 16 stars · 2 forks | No one-command install · Source | |
| 94 | 70.328 | kibana-mcpmcp · other | Enables AI assistants to manage Kibana security alerts, rules, and exception lists via the Model Context Protocol. | 12 stars · 4 forks | No one-command install · Source | |
| 95 | 70.564 | deshabhishek007-domain-toolsmcp · other | Provides domain analysis capabilities through WHOIS lookups, DNS record queries, health checks, and comprehensive domain validation for system… | 14 stars · 3 forks | No one-command install · Source | |
| 96 | 71.077 | jgamblin-epssmcp · other | Integrates with vulnerability intelligence systems to provide CVE information with EPSS scores that indicate exploitation likelihood, enabling… | 13 stars · 4 forks | No one-command install · Source | |
| 97 | 71.077 | lazy-importer-detect-it-easymcp · other | Bridges with Detect It Easy (DIE) executable analysis tool to provide file analysis, metadata extraction, and threat detection capabilities for… | 13 stars · 4 forks | No one-command install · Source | |
| 98 | 71.115 | cloris-cryptomcp · other | Provides encryption, decryption, and hashing functionalities using the crypto-js library for secure data handling and integrity verification in… | 11 stars · 6 forks | No one-command install · Source | |
| 99 | 72.060 | vorotaai-nmapmcp · other | Wraps Nmap for automated security assessments with port scanning, host discovery, service detection, OS fingerprinting, and vulnerability scanning. | 16 stars · 3 forks | No one-command install · Source | |
| 100 | 73.813 | akira-papa-osascriptmcp · other | Enables macOS automation through AppleScript and JavaScript for Automation execution with security filtering that blocks destructive operations while… | 6 stars · 9 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.