Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 101 | 57.311 | apk-security-guard-suitemcp · other | Integrates JADX, MobSF, JEB Pro, and APKTOOL to provide Android APK decompilation, security scanning, reverse engineering, and resource extraction for… | 11 stars | No commit datelisted | No one-command install · Source |
| 102 | 57.245 | benahammond-code-auditormcp · other | Analyze code for SOLID principles, DRY violations, and security issues | 7 stars · 1 fork | No one-command install · Source | |
| 102 | 57.245 | math280h-safe-pkgsmcp · other | Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning. | 7 stars · 1 fork | No one-command install · Source | |
| 104 | 55.168 | titaniumtushar-burp-mcp-plusmcp · other | Wraps Burp Suite for AI-assisted penetration testing, providing proxy history access, structured HTTP request building, and Intruder integration. | 6 stars · 1 fork | No one-command install · Source | |
| 104 | 55.168 | gh-r3352-redactmcp · other | Automatic PII detection and obfuscation using regex pattern matching and AI-powered Named Entity Recognition for secure data handling during… | 6 stars · 1 fork | No one-command install · Source | |
| 106 | 53.985 | wrlu-jadx-daemonmcp · other | Provides Android APK and DEX file decompilation through jadx library, enabling extraction of AndroidManifest.xml content, decompiled Java code, smali… | 4 stars · 3 forks | No one-command install · Source | |
| 107 | 51.401 | apexfdn-copilot-mcpmcp · other | Provides Web3 founders with tools for project scoring, portfolio matching, fund matching, hackathon discovery, jurisdiction analysis, Twitter audit… | 7 stars | No one-command install · Source | |
| 108 | 50.895 | microsoft-sentinelmcp · other | Query and analyze security data, incidents, and threat intelligence from Microsoft Sentinel's data lake using natural language. | 2 stars · 3 forks | No one-command install · Source | |
| 109 | 49.325 | jnormore-unitaskmcp · other | Safe code execution in ephemeral unikernels with declarative security policies. | 6 stars | No one-command install · Source | |
| 109 | 49.325 | mohdhaji87-nmapmcp · other | Exposes Nmap network scanning capabilities through 11 specialized tools for network discovery, service detection, OS fingerprinting, vulnerability… | 6 stars | No one-command install · Source | |
| 111 | 49.118 | sigmamcp · other | pySigma-powered Sigma security detection rule validation. | 4 stars · 1 fork | No one-command install · Source | |
| 111 | 49.118 | devanshkaria88-depshieldmcp · other | Security checkpoint that intercepts package installations to block vulnerable dependencies. | 4 stars · 1 fork | No one-command install · Source | |
| 111 | 49.118 | r3versein-hackermcp-pentestingmcp · other | Integrates penetration testing tools like Nmap and Metasploit Framework through tmux session management to enable automated security assessments… | 4 stars · 1 fork | No one-command install · Source | |
| 114 | 48.150 | sentinelone-mcpmcp · other | Multitenant Streamable HTTP wrapper for SentinelOne's purple-mcp. Enables MSPs to expose SentinelOne threat detection and response capabilities to AI… | 4 forks | No one-command install · Source | |
| 115 | 47.273 | fantasieleven-code-calloutmcp · other | Multi-perspective architecture review for AI-assisted development. Nine expert viewpoints (CTO, Security, Product, DevOps, Customer, Strategy… | 3 stars · 2 forks | No one-command install · Source | |
| 115 | 47.273 | kiss-kedaya-cryptomcp · other | Provides cryptographic operations including encryption, decryption, hashing, and digital signatures using the PyCryptodome library for secure data… | 3 stars · 2 forks | No one-command install · Source | |
| 117 | 46.654 | rm-rf-prod-groundtruthmcp · other | Live documentation fetcher and code auditor covering 363+ libraries with 100+ security and best-practice audit patterns. | 5 stars | No one-command install · Source | |
| 117 | 46.654 | kevinrabun-fedramp-20xmcp · other | Programmatic access to FedRAMP 20x security requirements with Azure-first implementation guidance | 5 stars | No one-command install · Source | |
| 119 | 44.256 | jhuntinfosec-openctimcp · other | Connects to OpenCTI threat intelligence platforms with specialized tools for querying malware, threat actors, attack patterns, vulnerabilities, and… | 3 stars · 1 fork | No one-command install · Source | |
| 119 | 44.256 | k4sku-ai-pair-programmermcp · other | Ruby-based pair programming assistant providing five specialized tools for code review, brainstorming, performance analysis, and security audits… | 3 stars · 1 fork | No one-command install · Source | |
| 121 | 43.498 | markdown-to-htmlmcp · other | Converts Markdown content to HTML with syntax highlighting, ensuring proper formatting and security through sanitization | 2 stars · 2 forks | No one-command install · Source | |
| 121 | 43.498 | stefanskiasan-semgrepmcp · other | Integrates Semgrep static analysis capabilities for automated code scanning, vulnerability detection, and security checks in development workflows. | 2 stars · 2 forks | No one-command install · Source | |
| 123 | 43.275 | scorecard-mcpmcp · other | Enables asking natural language questions about OpenSSF Scorecard security assessments for open source projects. | 4 stars | No one-command install · Source | |
| 123 | 43.275 | disdjj-cocomcp · other | MCP-Coco provides a pair programming tool that guides technical discussions by transforming code snippets into structured frameworks for critical… | 4 stars | No one-command install · Source | |
| 125 | 38.412 | gh-downatthebottomofthemolehole-megalintermcp · other | Run Ox Security MegaLinter code analysis via mega-linter-runner for multi-language linting. | 3 stars | No one-command install · Source | |
| 125 | 38.412 | d24yk4r4-bbmcp · other | Privacy-first bug bounty hunting toolkit providing recon, web testing, and vulnerability scanning tools with a sanitization layer. | 3 stars | No one-command install · Source | |
| 125 | 38.412 | ghostsecuritymcp · other | Provides programmatic access to Ghost Security's application security platform | 3 stars | No one-command install · Source | |
| 125 | 38.412 | cortexd-labs-mcpdmcp · other | Exposes 100+ Linux system administration tools covering processes, services, networking, containers, packages, storage, security, and desktop… | 3 stars | No one-command install · Source | |
| 125 | 38.412 | salrad22-code-sentinelmcp · other | Analyzes code for security vulnerabilities, deceptive patterns, placeholders, and code smells that traditional linters miss. | 3 stars | No one-command install · Source | |
| 125 | 38.412 | honey-guard-anchormcp · other | Provides security analysis for Solana Anchor programs by exposing tools that check smart contracts against Fender security vulnerabilities directly… | 3 stars | No one-command install · Source | |
| 125 | 38.412 | spritualkb-nucleimcp · other | Provides a bridge to the Nuclei vulnerability scanning tool, enabling automated security scans on target URLs with configurable parameters like… | 3 stars | No one-command install · Source | |
| 125 | 38.412 | pentest-toolsmcp · other | Provides direct access to penetration testing tools including nmap, gobuster, nikto, nuclei, ffuf, dirsearch, hydra, john, and hashcat for… | 3 stars | No one-command install · Source | |
| 125 | 38.412 | abdessamad-elamrani-malware-analyzermcp · other | Provides specialized terminal access to common malware analysis tools like 'strings', 'file', 'hexdump', and 'objdump' with parameter validation and… | 3 stars | No one-command install · Source | |
| 134 | 38.066 | mredvard-dev-toolsmcp · other | Exposes developer tools over HTTP with security guardrails for file access, shell execution, and web fetching. | 2 stars · 1 fork | No one-command install · Source | |
| 134 | 38.066 | seal-frameworksmcp · other | Read-only access to Security Alliance (SEAL) security framework documentation for Web3 builders. | 2 stars · 1 fork | No one-command install · Source | |
| 136 | 32.223 | ratatoskmcp · other | CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release… | 2 stars | No one-command install · Source | |
| 136 | 32.223 | phantom-mcpmcp · other | Exposes all PHANTOM security testing capabilities as MCP tools, enabling reconnaissance, vulnerability scanning, red teaming, and report generation… | 2 stars | No one-command install · Source | |
| 136 | 32.223 | daimonmcp · other | A local daemon for macOS that gives any MCP-capable AI client eyes, hands, and a face — screen capture, accessibility tree, mouse/keyboard actions… | 2 stars | No one-command install · Source | |
| 136 | 32.223 | cinderfimcp · other | Retirement planning for Canada and the US with CPP, OAS, Social Security, and Monte Carlo simulations. | 2 stars | No one-command install · Source | |
| 136 | 32.223 | ongjin-security-scannermcp · other | Detects security vulnerabilities in code including OWASP Top 10 threats and hardcoded secrets | 2 stars | No one-command install · Source | |
| 136 | 32.223 | notasandy-code-sanitizermcp · other | Strict AI code reviewer powered by Groq that detects bugs and security vulnerabilities in code. | 2 stars | No one-command install · Source | |
| 136 | 32.223 | r00tkit77-nessusmcp · other | Transforms Nessus vulnerability scan data into prioritized remediation tasks by correlating CVEs with NVD, CISA KEV, and asset ownership data. | 2 stars | No one-command install · Source | |
| 136 | 32.223 | ako2345-android-security-analyzermcp · other | Static security analysis of Android application source code with 53 rules across manifest, Gradle, source, XML, and secret scanning. | 2 stars | No one-command install · Source | |
| 136 | 32.223 | bajuzjefe-aikidomcp · other | Security analysis for Aiken smart contracts on Cardano with 75 vulnerability detectors. | 2 stars | No one-command install · Source | |
| 136 | 32.223 | christopherwoodall-nmapmcp · other | Provides a bridge to Nmap network scanning tool for performing reconnaissance, port scanning, and service identification with customizable options and… | 2 stars | No one-command install · Source | |
| 136 | 32.223 | ansvar-ot-securitymcp · other | OT security standards reference covering IEC 62443, NIST 800-82/53, and MITRE ATT&CK for ICS. | 2 stars | No commit datelisted | No one-command install · Source |
| 136 | 32.223 | anthonykewl20-ranex-frameworkmcp · other | Hybrid governance framework combining Rust-based security scanning with Python application development through contract decorators, enabling automated… | 2 stars | No commit datelisted | No one-command install · Source |
| 148 | 29.013 | dnehoda-source-google-secopsmcp · other | Security operations toolkit with 60 tools for Google SecOps, VirusTotal, and threat intelligence. | 1 star · 1 fork | No one-command install · Source | |
| 148 | 29.013 | cnosuke-command-execmcp · other | Enables secure remote command execution with robust security controls like command allowlisting, direct command invocation without shell access, and… | 1 star · 1 fork | No one-command install · Source | |
| 150 | 23.374 | veeam-ports-mcpmcp · other | Provides structured access to Veeam product network port requirements. Enables querying ports, generating topology diagrams, and producing firewall… | 1 fork | No one-command install · Source | |
| 150 | 23.374 | wyre-technology-blumiramcp · other | Blumira SIEM integration for querying findings, evidence, and detection data. | 1 fork | No one-command install · Source | |
| 150 | 23.374 | shutter-network-timelockmcp · other | Encrypts messages using Shutter Network's decentralized timelock encryption system where messages can only be decrypted after a specified future time… | 1 fork | No one-command install · Source | |
| 153 | 22.557 | mcp-tool-security-inspectormcp · other | Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift… | 1 star | No one-command install · Source | |
| 153 | 22.557 | mcp-kali-toolsmcp · other | Enables MCP clients to invoke common Kali Linux pentesting tools directly as tool calls, with each binary executed safely without a shell. | 1 star | No one-command install · Source | |
| 153 | 22.557 | coderegistrymcp · other | Enterprise code intelligence for M&A, security audits, and technical debt analysis. | 1 star | No one-command install · Source | |
| 153 | 22.557 | daedalus-pymetasploit3mcp · other | Exposes Metasploit Framework capabilities via pymetasploit3 for exploit management and penetration testing. | 1 star | No one-command install · Source | |
| 153 | 22.557 | guardxmcp · other | A keyless, defensive code-security auditor that scans codebases for hardcoded secrets, audits dependencies for known CVEs, and checks passwords… | 1 star | No one-command install · Source | |
| 153 | 22.557 | unphurlmcp · other | URL intelligence service that analyzes links across security, brand safety, and data quality dimensions, returning structured signals. | 1 star | No one-command install · Source | |
| 153 | 22.557 | volta-notesmcp · other | Burn-after-read encrypted notes with E2E encryption on the Internet Computer. | 1 star | No one-command install · Source | |
| 153 | 22.557 | achilliesbot-delphi-oraclemcp · other | Real-time AI intelligence signals covering security events, market data, and ecosystem developments. | 1 star | No one-command install · Source | |
| 153 | 22.557 | lordbasilaiassistant-sudo-base-security-scannermcp · other | Scans smart contracts on Base for honeypots, rug pulls, hidden mints, and proxy patterns with read-only bytecode analysis. | 1 star | No one-command install · Source | |
| 153 | 22.557 | gongrzhe-office-wordmcp · other | Integrates with Microsoft Word documents to create, read, manipulate content including headings, paragraphs, tables, images, apply rich formatting… | 1 star | No one-command install · Source | |
| 153 | 22.557 | rossja-asnlookupmcp · other | Provides network analysis tools for security professionals, enabling IP address lookups with ASN information and organization details for incident… | 1 star | No one-command install · Source | |
| 153 | 22.557 | rajnaveen344-lsp-toolsmcp · other | Provides regex-based text analysis capabilities for developers to precisely locate character and line positions of pattern matches within files, with… | 1 star | No one-command install · Source | |
| 153 | 22.557 | ismsmcp · other | Integrates Mistral AI and Qdrant to provide intelligent security workflows for automated risk assessment, policy management, and contextual incident… | 1 star | No one-command install · Source | |
| 153 | 22.557 | urlscanmcp · other | Provides a bridge to urlscan.io for analyzing website security and content information through a single tool that accepts URL parameters and returns… | 1 star | No one-command install · Source | |
| 153 | 22.557 | ansvar-automotive-cybersecuritymcp · other | Automotive cybersecurity standards reference covering R155/R156, ISO 21434, TISAX, and AUTOSAR. | 1 star | No commit datelisted | No one-command install · Source |
| 168 | 18.412 | sucesio-mcpmcp · other | The AI Seller for Sucesio.io — digital estate planning for expats in Europe. Structured data on product, pricing, use cases, security, and B2B… | 368 installs | No commit datelisted | No one-command install · Source |
| 169 | Unranked | mcp-security-feedsmcp · other | Enables listing, reading, and fetching curated cybersecurity feeds (RSS/Atom/RDF) with optional filtering, part of Pipeworx gateway. | No signals yet | No one-command install · Source | |
| 170 | Unranked | pipeworx-io-linkedin-humblebragmcp · other | Transforms achievements into LinkedIn-style humble-brag posts complete with mandatory vulnerability, via StupidAPIs. | No signals yet | No one-command install · Source | |
| 171 | Unranked | soc-siem-mcpmcp · other | Unified SIEM MCP gateway for AI-driven SOC operations and threat hunting across Azure Sentinel, Splunk, Wazuh, IBM QRadar, and Securonix. | No signals yet | No one-command install · Source | |
| 172 | Unranked | rami-code-reviewmcp · other | Reviews every PR for security, bugs, and performance, then fixes the findings through MCP, keeping you in control of what merges. | No signals yet | No one-command install · Source | |
| 173 | Unranked | saglitzsecure-mcpmcp · other | Enables security scanning of source code and Apple configuration files, providing evidence-based findings, explanations, remediation plans, threat… | No signals yet | No one-command install · Source | |
| 174 | Unranked | pipeworx-alienvault-otxmcp · other | AlienVault Open Threat Exchange connector providing cybersecurity threat intelligence data through the Pipeworx MCP gateway. | No signals yet | No one-command install · Source | |
| 175 | Unranked | cloud-alm-mcpmcp · other | Enables local or HTTP-based MCP interactions with a mock SAP Cloud ALM environment, enforcing read/write capability separation and fail-closed… | No signals yet | No one-command install · Source | |
| 176 | Unranked | vuln-mcp-appmcp · other | An intentionally vulnerable, locally-runnable MCP security laboratory (a 'DVWA for MCP') used to evaluate a separate FYP security scanner. | No signals yet | No one-command install · Source | |
| 177 | Unranked | evm-mcp-auditormcp · other | Enables AI assistants to audit Solidity smart contracts for security vulnerabilities, fetch verified source code from block explorers, decode… | No signals yet | No one-command install · Source | |
| 178 | Unranked | scanmalwaremcp · other | Scans URLs for malware, phishing, and security threats using ScanMalware.com. | No signals yet | No one-command install · Source | |
| 179 | Unranked | apk-docforgemcp · other | Enables local-first static and optional controlled dynamic analysis of Android APK artifacts, with provenance-aware downloads, Markdown reports, and… | No signals yet | No one-command install · Source | |
| 180 | Unranked | esp32-cyd-wi-fi-analyzer-mcpmcp · other | Enables AI assistants to scan and analyze nearby Wi-Fi networks for security vulnerabilities, control an ESP32-CYD device's display and RGB LED, and… | No signals yet | No one-command install · Source | |
| 181 | Unranked | python-code-validatormcp · other | Validates AI-generated Python: syntax, lint, security scan and deterministic repair. | No signals yet | No one-command install · Source | |
| 182 | Unranked | juniper-junos-mcpmcp · other | Enables safe interaction with Juniper Junos devices (SRX firewalls) via MCP, providing operational read tools and a configuration change flow with… | No signals yet | No one-command install · Source | |
| 183 | Unranked | kali-mcp-2mcp · other | Enables AI assistants to perform penetration testing by running real Kali Linux security tools and returning structured, verified findings instead of… | No signals yet | No one-command install · Source | |
| 184 | Unranked | chokepoint-finder-mcpmcp · other | Reduces thousands of security findings to the smallest set of high-impact remediation actions, with fail-closed safety gates, typed execution plans… | No signals yet | No one-command install · Source | |
| 185 | Unranked | bloodhoundmcp · other | Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD… | No signals yet | No one-command install · Source | |
| 186 | Unranked | wphealthkit-mcpmcp · other | Security audits for WordPress plugins and themes — 62 verification layers (58 deterministic scanners + 4 AI engines), prioritised fix plans and SBOMs. | No signals yet | No one-command install · Source | |
| 187 | Unranked | posturecheck-mcpmcp · other | Performs domain security posture checks including SPF, DKIM, DMARC, TLS, and HTTP security headers. | No signals yet | No one-command install · Source | |
| 188 | Unranked | mcp-sonarcloudmcp · other | Enables interaction with SonarCloud projects, issues, quality gates, and security hotspots through natural language. | No signals yet | No one-command install · Source | |
| 189 | Unranked | secure-harness-mcpmcp · other | Verify-and-repair secure-coding harness that generates, hardens, audits, and scores Go code with a build and security scan feedback loop, and includes… | No signals yet | No one-command install · Source | |
| 190 | Unranked | resume-pdf-mcpmcp · other | Compiles LaTeX resumes into PDFs via MCP tools, including validation, preview, template compilation, and LaTeX export, with security defaults like… | No signals yet | No one-command install · Source | |
| 191 | Unranked | innpmcp · other | AI-native security testing platform with native MCP support, enabling automated penetration testing, vulnerability discovery, and attack-chain… | No signals yet | No one-command install · Source | |
| 192 | Unranked | wazuh-servidor-mcpmcp · other | Enables natural language interaction with Wazuh SIEM for alert querying, threat hunting, vulnerability scanning, and active response actions. | No signals yet | No one-command install · Source | |
| 193 | Unranked | absec-mcpmcp · other | Enables security review of code diffs and files in Cursor/VS Code using local rule-based analysis with the same rule IDs as CI, no cloud required. | No signals yet | No one-command install · Source | |
| 194 | Unranked | lithuanian-cybersecurity-mcpmcp · other | Query Lithuanian cybersecurity data — regulations, decisions, and requirements from NKSC — directly from AI assistants. | No signals yet | No one-command install · Source | |
| 195 | Unranked | n8n-workflow-security-scannermcp · other | Statically analyzes exported n8n automation workflows for security issues and returns structured findings. | No signals yet | No one-command install · Source | |
| 196 | Unranked | antigravity-mcp-2mcp · other | Bridges Google Antigravity CLI with MCP clients, enabling 13 specialized tools for AI-assisted coding, automation, and security audits. | No signals yet | No one-command install · Source | |
| 197 | Unranked | zeroforgemcp · other | Enables adaptive binary 0day research with persistent knowledge graph and adaptive planning, automating vulnerability analysis and exploit development… | No signals yet | No one-command install · Source | |
| 198 | Unranked | security-research-mcpmcp · other | Aggregates and summarizes security research from IEEE, NIST, CISA, and blogs with a live-streaming web UI. | No signals yet | No one-command install · Source | |
| 199 | Unranked | daedalus-cryptographymcp · other | Python cryptography library tools for encryption, hashing, and digital signatures. | No signals yet | No one-command install · Source | |
| 200 | Unranked | mcp-spring-boot-toolkitmcp · other | Provides tools and guides for Spring Boot development including code generation, security audit, and query optimization. | No signals yet | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.