Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1 | 99.8058 | usestrix-strixcli · otherContributed by Sentinel | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | 60,015 stars · 6,564 forks · 7 mentions | No one-command install · Source | |
| 2 | 98.3634 | pentest-aimcp · other | Provides penetration testing tools for reconnaissance, vulnerability scanning, and exploit assistance. | 1,641 stars · 315 forks | No one-command install · Source | |
| 3 | 98.2942 | mukul975-cvemcp · other | Security intelligence with 27 tools across 21 sources including NVD, EPSS, VirusTotal, and Shodan. | 1,587 stars · 261 forks | No one-command install · Source | |
| 4 | 98.2880 | nugetmcp · other | Real-time NuGet package management with vulnerability detection and intelligent version updates | 1,554 stars · 275 forks | No one-command install · Source | |
| 5 | 98.2329 | supermemorymcp · other | Personal knowledge platform that helps collect, organize, and recall information from various sources with end-to-end encryption and optional… | 1,722 stars · 176 forks | No one-command install · Source | |
| 6 | 97.9407 | portswigger-burp-suitemcp · other | Integrates with Burp Suite for web security testing, enabling HTTP request manipulation, proxy history analysis, and security testing operations for… | 1,124 stars · 185 forks | No one-command install · Source | |
| 7 | 97.5896 | gh05tcrew-metasploit-frameworkmcp · other | Provides a secure interface to Metasploit Framework's penetration testing capabilities, enabling exploit execution, payload generation, session… | 732 stars · 207 forks | No one-command install · Source | |
| 8 | 97.4676 | cyfrin-aderynmcp · other | Provides intelligent Solidity smart contract analysis through the Aderyn static analyzer, scanning codebases to identify security vulnerabilities… | 794 stars · 117 forks | No one-command install · Source | |
| 9 | 97.0680 | jtang613-ghidra-assistmcp · other | Integrates with Ghidra's analysis framework to provide binary reverse engineering capabilities including function decompilation, disassembly… | 732 stars · 66 forks | No one-command install · Source | |
| 10 | 96.8841 | semgrepmcp · other | Integrates with Semgrep's static analysis engine to scan code for security vulnerabilities and coding issues, enabling developers to identify and fix… | 685 stars · 56 forks | No one-command install · Source | |
| 11 | 96.1037 | mordavid-bloodhoundmcp · other | Integrates with BloodHound security tool to analyze Active Directory and Azure environments for attack paths, privilege escalation opportunities, and… | 375 stars · 56 forks | No one-command install · Source | |
| 12 | 95.6957 | gh-smart-mcp-proxy-mcpproxymcp · other | Smart proxy with BM25 tool discovery, quarantine security, and token savings. | 330 stars · 44 forks | No one-command install · Source | |
| 13 | 95.5038 | mikrotik-mcpmcp · other | Provides a bridge between AI assistants and MikroTik RouterOS devices, enabling natural language management of VLANs, firewall rules, DNS settings… | 262 stars · 57 forks | No one-command install · Source | |
| 14 | 95.5001 | dnakov-radare2mcp · other | Provides direct access to radare2's binary analysis framework for reverse engineering, malware analysis, and debugging through a simple stdin/stdout… | 311 stars · 39 forks | No one-command install · Source | |
| 15 | 95.2384 | bhavsec-autopentest-aimcp · other | Automated web application penetration testing framework implementing OWASP WSTG methodology. | 231 stars · 60 forks | No one-command install · Source | |
| 16 | 94.7649 | bx33661-wiresharkmcp · other | TShark network packet analysis with capture, protocol stats, field extraction, and security analysis. | 272 stars · 28 forks | No one-command install · Source | |
| 17 | 94.1714 | taida957789-ida-promcp · other | Enables direct interaction with IDA Pro for binary analysis tasks including disassembly, decompilation, and function querying for malware analysis and… | 188 stars · 34 forks | No one-command install · Source | |
| 18 | 93.7623 | postrv-narsilmcp · other | Deep code intelligence with tree-sitter parsing, call graphs, and security vulnerability scanning | 182 stars · 27 forks | No one-command install · Source | |
| 19 | 93.6287 | rust-mcp-stack-filesystemmcp · other | Provides secure, high-performance access to local filesystem operations with strict path validation, enabling read/write file manipulation while… | 174 stars · 27 forks | No one-command install · Source | |
| 20 | 93.0721 | vnshmcp · other | Ephemeral encrypted file sharing for AI with AES-256 encryption and 24-hour auto-deletion. | 156 stars · 24 forks | No one-command install · Source | |
| 21 | 92.7207 | jordyzomer-codeqlmcp · other | Bridges to the CodeQL static analysis engine for identifying security vulnerabilities and quality issues in codebases through structured query… | 149 stars · 21 forks | No one-command install · Source | |
| 22 | 91.0350 | dreamending-siemens-nxmcp · other | Controls Siemens NX CAD software through 47 tools covering 3D modeling, sketching, assembly, drawing creation, and measurement operations. | 95 stars · 19 forks | No one-command install · Source | |
| 23 | 90.8701 | gongrzhe-terminal-controllermcp · other | Enables secure terminal command execution, directory navigation, and file system operations across Windows and UNIX-based systems, with built-in… | 97 stars · 17 forks | No one-command install · Source | |
| 24 | 90.3915 | pantheon-security-notebooklm-securemcp · other | Security-hardened fork with post-quantum encryption, secrets scanning, and enterprise-grade protections | 81 stars · 19 forks | No one-command install · Source | |
| 25 | 89.8076 | cyanheads-filesystemmcp · other | Provides a secure interface for interacting with local filesystems, enabling file reading, writing, updating, and directory management with robust… | 50 stars · 28 forks | No one-command install · Source | |
| 26 | 89.3897 | chuprinadaria-fartrunmcp · other | Local code scanner with 29 tools for security vulnerability detection, health analysis, and dead code identification without cloud uploads. | 139 stars · 7 forks | No one-command install · Source | |
| 27 | 88.1968 | s4dp4nd4-frida-c2mcp · other | Enables dynamic mobile application security testing by running Frida instrumentation directly on rooted Android devices through Termux for real-time… | 63 stars · 13 forks | No one-command install · Source | |
| 28 | 87.9299 | mxcpmcp · other | Enterprise-grade MCP framework for building production-ready AI tools with data quality, security, audit trails, and comprehensive testing. | 69 stars · 10 forks | No one-command install · Source | |
| 29 | 87.7657 | howardpen9-kimi-codemcp · other | Delegates bulk codebase analysis to Kimi K2.5's 256K context window, enabling architecture reviews, security audits, dependency mapping, and… | 61 stars · 12 forks | No one-command install · Source | |
| 30 | 87.1056 | atomicchonk-roadrecon-analyzermcp · other | Exposes Azure AD security data collected by ROADrecon for analyzing tenant security posture, identifying privileged users, evaluating MFA status… | 52 stars · 13 forks | No one-command install · Source | |
| 31 | 86.6219 | eversinc33-triage-pe-file-analysismcp · other | Integrates with multiple security tools to perform static analysis of PE files, extracting critical information like import tables, metadata, strings… | 78 stars · 6 forks | No one-command install · Source | |
| 32 | 86.4549 | ktol1-redteam-toolkitmcp · other | Wraps 15+ offensive security tools including gogo, fscan, httpx, nuclei, and Impacket for AI-driven penetration testing, Active Directory attacks, and… | 67 stars · 7 forks | No one-command install · Source | |
| 33 | 85.9129 | joern-code-analysismcp · other | Integrates with Joern's code analysis capabilities to enable static code analysis, vulnerability identification, and code structure understanding… | 45 stars · 12 forks | No one-command install · Source | |
| 34 | 85.9123 | phialsbasement-nmap-scannermcp · other | Integrates NMAP to enable network scanning, security assessments, and automated penetration testing on Windows systems. | 49 stars · 10 forks | No one-command install · Source | |
| 35 | 85.8207 | depwiremcp · other | Builds compiler-accurate dependency graphs at the symbol level, enabling impact analysis, architecture health scoring, dead code detection, security… | 60 stars · 7 forks | No one-command install · Source | |
| 36 | 85.4440 | mark3labs-nucleimcp · other | Integrates with Nuclei vulnerability scanner to automate security assessments through configurable scanning operations with comprehensive reporting… | 48 stars · 9 forks | No one-command install · Source | |
| 37 | 85.0925 | jtang613-binassistmcp · other | Integrates with Binary Ninja to expose decompilation, IL analysis, symbol management, type system manipulation, and cross-reference analysis tools for… | 49 stars · 8 forks | No one-command install · Source | |
| 38 | 84.6534 | context-optimizermcp · other | Provides targeted file content extraction, secure terminal command execution with intelligent output analysis, and web research capabilities while… | 62 stars · 5 forks | No one-command install · Source | |
| 39 | 84.5607 | aim-guardmcp · other | Provides security middleware that guards MCP implementations against unauthorized access, data leakage, and malicious interactions through threat… | 21 stars · 17 forks | No one-command install · Source | |
| 40 | 84.4053 | xxipv6-ida-pro-multiplemcp · other | Bridges IDA Pro's reverse engineering capabilities with language models through a multi-session architecture that enables concurrent binary analysis… | 52 stars · 6 forks | No one-command install · Source | |
| 41 | 84.2407 | headless-idamcp · other | Enables reverse engineering of binary files through IDA Pro's headless mode, providing tools for function analysis, disassembly, decompilation, and… | 43 stars · 8 forks | No one-command install · Source | |
| 42 | 84.1244 | elastic-securitymcp · otheralso listed as elastic-security-mcp-app | Interactive security operations dashboards for alert triage, threat hunting, and case management. | 22 stars · 16 forks | No one-command install · Source | |
| 44 | 84.0730 | fastly-cdnmcp · other | Integrates with Fastly CDN to enable direct management of services, domains, cache settings, and security configurations for streamlined DevOps… | 39 stars · 9 forks | No one-command install · Source | |
| 45 | 83.6189 | adeosec-shodanmcp · other | Integrates with Shodan's network intelligence capabilities to provide cybersecurity analysts with tools for host information lookup, vulnerability… | 23 stars · 15 forks | No one-command install · Source | |
| 46 | 83.2994 | mwhesse-dataversemcp · other | Integrates with Microsoft Dataverse to enable schema operations, data management, and configuration tasks across Power Platform environments through… | 20 stars · 15 forks | No one-command install · Source | |
| 47 | 83.2923 | kridaydave-file-organizermcp · other | Security-hardened file organizer with smart categorization, duplicate detection, and rollback support. | 44 stars · 6 forks | No one-command install · Source | |
| 48 | 83.1456 | himanshusanecha-osint-toolkitmcp · other | Provides a unified interface for network reconnaissance with parallel execution of OSINT tools including WHOIS, Nmap, DNS lookups, and typosquatting… | 48 stars · 5 forks | No one-command install · Source | |
| 49 | 82.4564 | sarthaksiddha-wiresharkmcp · other | Extracts, structures, and transmits network packet data from Wireshark for security analysis, anomaly detection, and network troubleshooting without… | 31 stars · 9 forks | No one-command install · Source | |
| 50 | 82.4103 | wireshark-network-analysismcp · other | Integrates with Wireshark's tshark tool to capture and analyze network packets with configurable filters, SSL decryption support, and multiple output… | 35 stars · 7 forks | No one-command install · Source | |
| 51 | 82.0356 | szowesgad-semgrepmcp · other | Integrates Semgrep for static code analysis, enabling AI-driven security scanning, vulnerability detection, and code quality improvement across… | 28 stars · 10 forks | No one-command install · Source | |
| 52 | 80.5567 | adrian803-lingximcp · other | Autonomous penetration testing framework with MCP tool bridges for Kali Linux container management and CTF workflows. | 38 stars · 4 forks | No one-command install · Source | |
| 53 | 78.8004 | super-shellmcp · other | Enables secure execution of shell commands across Windows, macOS, and Linux with a three-tier whitelist security model for controlled system access. | 20 stars · 9 forks | No one-command install · Source | |
| 54 | 78.6128 | nekzus-utilitymcp · other | Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights | 18 stars · 10 forks | No one-command install · Source | |
| 55 | 78.3745 | stanfrbd-cyberbromcp · other | IOC extraction, enrichment, and reputation analysis for cybersecurity investigations. | 19 stars · 9 forks | No one-command install · Source | |
| 56 | 78.0974 | operantlabs-operantmcp · other | Security testing toolkit with 51 tools for penetration testing, forensics, and vulnerability assessment. | 22 stars · 6 forks | No one-command install · Source | |
| 57 | 76.6536 | jamiesonio-defectdojomcp · other | Bridges to the DefectDojo vulnerability management system, enabling interaction with security findings, products, and engagements for streamlined… | 15 stars · 9 forks | No one-command install · Source | |
| 58 | 76.3318 | nslookup-iomcp · other | DNS lookups, SSL certificate checks, security scanning, and domain intelligence via nslookup.io. | 22 stars · 4 forks | No one-command install · Source | |
| 59 | 76.2757 | imjdl-nmap-scannermcp · other | Provides a secure, controlled interface for network administrators and security researchers to perform targeted network reconnaissance and analysis… | 18 stars · 6 forks | No one-command install · Source | |
| 60 | 75.9805 | reconftw-mcpmcp · other | Enables AI assistants to perform reconnaissance tasks using the reconFTW framework, supporting full, passive, subdomain, vulnerability, and OSINT… | 21 stars · 4 forks | No one-command install · Source | |
| 61 | 75.7191 | mcp-slim-guardmcp · other | Lightweight MCP security proxy — compression (up to 86%) + SSRF protection + allow/deny + audit + rate limiting + injection detection | 178 stars | No one-command install · Source | |
| 62 | 75.6136 | qualys-mcpmcp · other | Enables AI assistants to interact with Qualys security data via 7 workflow tools for vulnerability management, cloud security, containers, compliance… | 15 stars · 8 forks | No one-command install · Source | |
| 62 | 75.6136 | thehivemcp · other | Integrates with TheHive incident response platform to retrieve alerts and cases, promote alerts to cases, and create new cases for automated security… | 15 stars · 8 forks | No one-command install · Source | |
| 64 | 75.0416 | guardlinkmcp · other | Embeds security annotations directly in source code to maintain living threat models that update with code changes, enforced through CI validation. | 19 stars · 4 forks | No one-command install · Source | |
| 65 | 74.7835 | sint-ai-sint-protocolmcp · other | Security-first MCP governance proxy (`sint-mcp`) with capability tokens, T0-T3 approval tiers, fail-closed execution, and tamper-evident audit… | 14 stars · 8 forks | No one-command install · Source | |
| 66 | 74.4881 | icloud-calendar-mcp-icloud-calendarmcp · other | Secure iCloud Calendar access via CalDAV with OWASP-aligned security controls. | 15 stars · 6 forks | No one-command install · Source | |
| 67 | 74.4221 | berba-q-faostatmcp · other | UN Food and Agriculture Organization statistics for 245 countries — crops, trade, food security, and emissions via 21 tools. | 16 stars · 5 forks | No one-command install · Source | |
| 68 | 74.3113 | binaryanalysis-mcpmcp · other | Enables analysis of binary files (PE, ELF, Mach-O, COFF) by providing tools to retrieve info, headers, sections, imports, exports, libraries, security… | 25 stars · 2 forks | No one-command install · Source | |
| 69 | 73.8137 | akira-papa-osascriptmcp · other | Enables macOS automation through AppleScript and JavaScript for Automation execution with security filtering that blocks destructive operations while… | 6 stars · 9 forks | No one-command install · Source | |
| 70 | 72.0600 | vorotaai-nmapmcp · other | Wraps Nmap for automated security assessments with port scanning, host discovery, service detection, OS fingerprinting, and vulnerability scanning. | 16 stars · 3 forks | No one-command install · Source | |
| 71 | 71.1150 | cloris-cryptomcp · other | Provides encryption, decryption, and hashing functionalities using the crypto-js library for secure data handling and integrity verification in… | 11 stars · 6 forks | No one-command install · Source | |
| 72 | 71.0778 | lazy-importer-detect-it-easymcp · other | Bridges with Detect It Easy (DIE) executable analysis tool to provide file analysis, metadata extraction, and threat detection capabilities for… | 13 stars · 4 forks | No one-command install · Source | |
| 72 | 71.0778 | jgamblin-epssmcp · other | Integrates with vulnerability intelligence systems to provide CVE information with EPSS scores that indicate exploitation likelihood, enabling… | 13 stars · 4 forks | No one-command install · Source | |
| 74 | 70.5647 | deshabhishek007-domain-toolsmcp · other | Provides domain analysis capabilities through WHOIS lookups, DNS record queries, health checks, and comprehensive domain validation for system… | 14 stars · 3 forks | No one-command install · Source | |
| 75 | 70.3286 | kibana-mcpmcp · other | Enables AI assistants to manage Kibana security alerts, rules, and exception lists via the Model Context Protocol. | 12 stars · 4 forks | No one-command install · Source | |
| 76 | 70.2108 | mcp-security-scannermcp · other | Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants. | 16 stars · 2 forks | No one-command install · Source | |
| 77 | 69.5455 | gleicon-osv-security-analyzermcp · other | Integrates with OSV.dev to identify and analyze potential vulnerabilities in codebases, providing dependency checking and code security analysis with… | 15 stars · 2 forks | No one-command install · Source | |
| 78 | 68.8474 | doublegate-cyberchefmcp · other | Converts CyberChef's 300+ cryptographic, encoding, compression, and data analysis operations into individual tools for cybersecurity analysis, data… | 19 stars · 1 fork | No one-command install · Source | |
| 79 | 68.5478 | trustifymcp · other | Integrates with Trustify supply chain security platforms to query SBOMs and packages, retrieve vulnerability information by CVE ID or PURL, analyze… | 4 stars · 7 forks | No one-command install · Source | |
| 80 | 67.9009 | montimage-mitre-attackmcp · other | Access the MITRE ATT&CK cybersecurity knowledge base | 13 stars · 2 forks | No one-command install · Source | |
| 81 | 66.8931 | susuya233-ida-pro-binary-analysismcp · other | Integrates with IDA Pro for automated vulnerability scanning including buffer overflows, format strings, and command injection detection with… | 10 stars · 3 forks | No one-command install · Source | |
| 81 | 66.8931 | norbinsh-trivy-security-scannermcp · other | Integrates with Trivy to provide vulnerability scanning and automated remediation for projects across multiple programming languages and package… | 10 stars · 3 forks | No one-command install · Source | |
| 83 | 66.8716 | scopeblindmcp · other | MCP security gateway enforcing per-tool policies, rate limits, and approval gates with signed audit receipts. | 9 stars · 4 forks | No one-command install · Source | |
| 83 | 66.8716 | n0zer0d4y-vulcan-file-opsmcp · other | Security-centric filesystem operations with enterprise-grade access controls and CVE protection | 9 stars · 4 forks | No one-command install · Source | |
| 85 | 66.5282 | gh-anthony-marcovecchio-prodlintmcp · otheralso listed as prodlint | Production readiness checks for vibe-coded apps with 52 security and performance rules. | 15 stars · 1 fork | No one-command install · Source | |
| 87 | 66.2583 | tenzirmcp · other | Integrates with Tenzir data pipelines and OCSF schema framework to execute cybersecurity data processing workflows and retrieve structured security… | 8 stars · 5 forks | No one-command install · Source | |
| 88 | 65.0439 | sarkarsaurabh27-deskmatemcp · other | Enables remote control of your Mac through natural language commands, executing shell commands, managing files, and performing system operations with… | 10 stars · 2 forks | No one-command install · Source | |
| 89 | 64.7076 | nkcc-apk-mobsfmcp · other | Integrates with MobSF (Mobile Security Framework) to provide automated mobile application security analysis for APK, IPA, and APPX files with… | 23 stars | No commit datelisted | No one-command install · Source |
| 90 | 63.8962 | mrexodia-binary-refinerymcp · other | Provides access to Binary Refinery's malware analysis and reverse engineering toolkit for processing binary data, extracting artifacts from suspicious… | 8 stars · 3 forks | No one-command install · Source | |
| 91 | 63.6946 | angr-mcpmcp · other | Exposes angr binary-analysis capabilities (symbolic execution, taint analysis, CFG recovery) as MCP tools for vulnerability exploration and exploit… | 9 stars · 2 forks | No one-command install · Source | |
| 92 | 63.4394 | kevinrabun-judgesmcp · other | Evaluates AI-generated code for security, cost, and quality with AST analysis. | 7 stars · 4 forks | No one-command install · Source | |
| 93 | 63.1551 | ida-pro-mcp-multimcp · other | Extends IDA Pro with multi-instance support and vulnerability scanning for AI-assisted reverse engineering. | 11 stars · 1 fork | No one-command install · Source | |
| 94 | 60.6774 | gh-rul1an-assaymcp · other | Firewall for tool calls with policy enforcement, audit trails, and replayable evidence bundles. | 9 stars · 1 fork | No one-command install · Source | |
| 95 | 60.0350 | go-unifi-mcpmcp · other | Manage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall rules. | 6 stars · 3 forks | No one-command install · Source | |
| 96 | 59.0297 | gautamvarmadatla-safety-wardenmcp · other | MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution. | 8 stars · 1 fork | No one-command install · Source | |
| 97 | 58.1857 | securitahguy-rapid7mcp · other | Queries vulnerability and threat data across Rapid7 InsightVM, InsightIDR, and Metasploit Pro using natural language. | 6 stars · 2 forks | No one-command install · Source | |
| 97 | 58.1857 | 0xbuz3r-emba-firmware-analyzermcp · other | EMBA firmware security analysis for embedded device scanning. | 6 stars · 2 forks | No one-command install · Source | |
| 97 | 58.1857 | thiagofrag-ldplayer-android-pentestmcp · other | Provides Android penetration testing capabilities through LDPlayer emulator integration with ADB commands, Frida script injection, and 38 security… | 6 stars · 2 forks | No one-command install · Source | |
| 100 | 57.7540 | bmorphism-slowtimemcp · other | Integrates drand and tlock-js to enable secure, time-locked encryption for managing scheduled events with cryptographic guarantees. | 3 stars · 4 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.