Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 901 | 44.256 | lorrylockie-larkmcp · auth | Provides a bridge to Lark/Feishu workplace collaboration platform, enabling access to employee information and messaging capabilities with automatic… | 3 stars · 1 fork | No one-command install · Source | |
| 901 | 44.256 | ethereumdegen-rustmcp · auth | Provides a flexible, type-safe Rust foundation for building applications with tool management, authentication handling, and custom middleware support… | 3 stars · 1 fork | No one-command install · Source | |
| 903 | 43.498 | goodreads-mcpmcp · ai-agents | A read-only MCP server for Goodreads that enables LLMs to search for books, retrieve detailed book info with ratings and reviews, and explore… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | myfitnesspal-mcp-servermcp · ai-agents | Enables Claude to manage MyFitnessPal food diaries, nutrition goals, exercises, body measurements, and water intake via a remote MCP server using… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | osidb-mcpmcp · ai-agents | MCP server for OSIDB (Red Hat Product Security's vulnerability management system). Enables read-only querying of flaws, affects, trackers, and status… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | unwindmcp · observability | A security layer for AI agents that monitors, checks, and records every action, providing a trust light, timeline, rewind, and ghost mode for testing… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | revsmoke-prompt-rejectormcp · ai-agents | Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities. | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | fwrule-mcpmcp · back-end | An MCP server that analyzes firewall rule overlap, duplication, shadowing, and conflicts across multi-vendor firewall policies. | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | sinxne0-pentestmcp · back-end | Comprehensive ethical penetration testing server exposing 40+ industry-standard security tools. | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | ibm-qradar-mcp-servermcp · back-end | A Model Context Protocol (MCP) server that provides comprehensive access to IBM QRadar security intelligence platform. Query logs, events, offenses… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | mcp-database-managermcp · database | Enables AI assistants to interact with and manage multiple database types (PostgreSQL, MySQL, SQLite, SQL Server, MongoDB, Redis) through natural… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | slanycukr-bugbountymcp · database | Provides specialized bug bounty hunting tools for reconnaissance, vulnerability discovery, and security testing with automated workflows, OSINT… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | mohdhaji87-bugcrowdmcp · back-end | Integrates with Bugcrowd's bug bounty platform API to provide complete access invitation management, asset operations, program administration… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | emqx-toolsmcp · auth | Provides health monitoring and troubleshooting tools for EMQX MQTT broker clusters, enabling cluster status checks, connector management… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | markdown-to-htmlmcp · other | Converts Markdown content to HTML with syntax highlighting, ensuring proper formatting and security through sanitization | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | zxfgds-toolkitmcp · back-end | Provides AI assistants with access to local and network resources through specialized tools for file system operations, database connections, GitHub… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | athapong-argusmcp · github-vcs | Integrates with GitLab repositories to enable automated security assessments, code reviews, and DevOps workflows through repository analysis and file… | 2 stars · 2 forks | No one-command install · Source | |
| 903 | 43.498 | stefanskiasan-semgrepmcp · other | Integrates Semgrep static analysis capabilities for automated code scanning, vulnerability detection, and security checks in development workflows. | 2 stars · 2 forks | No one-command install · Source | |
| 919 | 43.275 | 0xmihirk-herculesmcp · ai-agentsalso listed as hercules-mcp | Penetration testing tools via containerized Kali Linux for Claude. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | sandraschi-tailscalemcp · observability | Integrates with Tailscale networks to provide device management, traffic monitoring, file transfers via Taildrop, MagicDNS configuration, and security… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | zw008-vmware-nsx-securitymcp · observability | VMware NSX security management with DFW policies, security groups, Traceflow, and IDPS tools. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | toan203-osv-uimcp · front-end | Visual CVE audit dashboard for npm, Python, Go, and Rust. Scan from Claude/Cursor, opens a browser UI for human review (human-in-the-loop), applies… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | walrusquant-sports-leadermcp · auth | Access live ESPN sports data across 17 sports and 139 leagues — scores, stats, rosters, betting odds, and standings without authentication. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | zsvirt-mcp-servermcp · back-end | Enables natural language discovery, inspection, and execution of ZStack's 2000+ cloud management APIs, plus searching and retrieving monitoring… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | nx-mcpmcp · back-end | Enables natural language control of Siemens NX for text-to-CAD modeling, generating .prt files via NX Open API. Currently supports basic solids… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | django-mcp-sqlmcp · database | Provides a read-only PostgreSQL SQL surface for LLM agents via MCP, with defense-in-depth security layers for safe database queries. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | django-admin-mcp-apimcp · back-end | Exposes Django admin's ModelAdmin as MCP tools, with identical permissions, form validation, and session authentication. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | iamakash-06-mcpeekmcp · back-end | Static AST-level security scanner for MCP server source code vulnerabilities. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | dadepo-whoismcp · database | Provides network information lookup through WHOIS and RIR database queries across RIPE NCC and ARIN regions, enabling contact card lookups, AS-SET… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | nxopen-mcpmcp · back-end | Provides AI coding agents with accurate knowledge of the Siemens NXOpen .NET API by performing hybrid retrieval over local documentation, eliminating… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | excel-mcpmcp · back-end | An MCP server for performing Excel file operations including read, write, and manipulation, with enterprise security features and VS Code integration. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | seraphmcp · ai-agents | Seraph is Kondux's crypto transaction firewall and risk-scoring MCP server for AI agents. It provides OAuth-secured Streamable HTTP tools for… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | garagon-aguaramcp · ai-agents | Security scanner for AI agent skills and MCP server configurations. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | grippy-code-reviewmcp · ai-agents | Open-source AI code review MCP server for local git diff auditing with deterministic security rules and AI-powered analysis using any… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | rapid7-mcpmcp · observability | Enables AI assistants to interact with Rapid7 InsightIDR SIEM for investigating incidents, searching logs with LEQL, managing alerts and assets… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | saisudhir14-linkedin-job-searchmcp · search | Scrapes LinkedIn job listings to provide job search, filtering by location and experience level, company research, and detailed job information… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | ankitvirdi4-helmetmcp · back-end | Production middleware toolkit for building MCP servers, adding authentication, health checks, rate limiting, and graceful shutdown to MCP… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | mceptionmcp · back-end | Audits MCP servers for security vulnerabilities including tool poisoning, remote code execution, SSRF, and credential exfiltration risks. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | stepsecuritymcp · back-end | Official StepSecurity MCP server for CI/CD security, supply chain threat response, and anomaly detection. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | velvetway-bdu-fstecmcp · database | Query Russia's official FSTEC vulnerability database with 86,000+ records via full-text search, CVE mapping, and BDU identifier lookup. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | pierre3-owasp-zapmcp · devops | Integrates with OWASP ZAP to enable web application vulnerability scanning through Docker container management and 14 MCP tools for active scanning… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | hannes221-kali-linuxmcp · auth | Docker-based Kali Linux environment with security tools for authorized penetration testing. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | basicmachines-co-code-remotemcp · auth | Enables secure remote command execution on your local machine through a cloud-hosted relay architecture with WebSocket connections and token-based… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | mcp-oauth-samplemcp · auth | A production-ready MCP OAuth 2.1 server implementation with analytics and security monitoring, enabling secure authentication for MCP clients like… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | jhlee0409-elenchusmcp · ai-agents | Orchestrates multi-round code review sessions between verifier and critic roles to systematically identify security, correctness, reliability… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | romiconez-llamatormcp · ai-agents | Automated LLM red teaming and security testing server that orchestrates asynchronous test runs against OpenAI-compatible endpoints with job lifecycle… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | 0x-professor-ctftimemcp · search | Integrates with CTFtime.org to retrieve cybersecurity competition data including upcoming events, team rankings, historical results, and event search… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | build-club-mcpmcp · auth | MCP server with example tools for arithmetic and greeting, designed for deployment on Amazon Bedrock AgentCore Runtime with OAuth authentication. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | sheepion-openapi-searchmcp · back-end | Loads OpenAPI specifications from URLs and provides tools for searching endpoints, exploring schemas, and extracting authentication configurations to… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | git-memory-mcp-servermcp · observability | Enables Git repository operations and real-time monitoring via MCP tools, with support for WebSocket events, authentication, and observability. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | risky-business-aimcp · search | Integrates with GitHub, NIST NVD, and CISA's Known Exploited Vulnerabilities catalog to automate CVE exploitability assessment by searching for… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | zhihu-mcp-servermcp · auth | Enables scraping Zhihu webpages, getting hot questions, and publishing answers using Puppeteer with QR code login authentication. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | scorecard-mcpmcp · other | Enables asking natural language questions about OpenSSF Scorecard security assessments for open source projects. | 4 stars | No one-command install · Source | |
| 919 | 43.275 | d-bus-mcp-servermcp · back-end | Bridges AI assistants to Linux D-Bus for system interaction, enabling clipboard, notifications, screenshots, and service discovery with configurable… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | disdjj-cocomcp · other | MCP-Coco provides a pair programming tool that guides technical discussions by transforming code snippets into structured frameworks for critical… | 4 stars | No one-command install · Source | |
| 919 | 43.275 | geoffwhittington-devicimcp · front-end | Integrates with the Devici threat modeling platform to manage security workflows including user and team management, threat model creation, component… | 4 stars | No commit datelisted | No one-command install · Source |
| 958 | 42.840 | knowbe4-mcpmcp · back-end | MCP server for KnowBe4 — security awareness training, phishing simulation, and user risk management API integration | 3 forks | No one-command install · Source | |
| 958 | 42.840 | wyre-technology-knowbe4mcp · ai-agents | Community MCP integration for KnowBe4, enabling AI agents to manage security awareness training and phishing campaigns. | 3 forks | No one-command install · Source | |
| 958 | 42.840 | adepanges-teamretromcp · auth | Provides a bridge to TeamRetro's team management platform for creating and managing teams, users, and members through natural language commands with… | 3 forks | No one-command install · Source | |
| 958 | 42.840 | topcoder-mcp-servermcp · auth | Enables interaction with Topcoder challenges through tools that support authentication-based access via JWT and role/permission guards. | 3 forks | No one-command install · Source | |
| 958 | 42.840 | sd-elements-mcp-servermcp · back-end | A Model Context Protocol server that provides SD Elements API integration. This server enables LLMs to interact with SD Elements security development… | 3 forks | No one-command install · Source | |
| 958 | 42.840 | oauth-mcp-servermcp · auth | An MCP server for OAuth 2.0 authentication supporting Device Code and Client Credentials flows, enabling secure token management for MCP applications. | 3 forks | No one-command install · Source | |
| 958 | 42.840 | cloudways-mcp-servermcp · back-end | Enables AI assistants to manage Cloudways infrastructure, including servers, applications, monitoring, and security via the Cloudways API. | 3 forks | No one-command install · Source | |
| 965 | 41.082 | accuknox-mcp-servermcp · back-end | Enables interaction with the AccuKnox cloud security platform through MCP, allowing users to query cloud assets, vulnerabilities, and perform security… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | hk-law-mcp-servermcp · back-end | MCP server providing access to Hong Kong law and security data, including Foreign Domestic Helpers statistics from the Immigration Department. | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | local-model-workers-mcpmcp · ai-agents | A local MCP server that lets Claude Code and Codex delegate repository exploration and test proposals to a remote LM Studio model, while enforcing… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | abilities-mcpmcp · auth | Open-source MCP bridge that connects any AI client to your WordPress sites through the WordPress Abilities API. Supports multi-site routing, OAuth 2.1… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | fred-mcpmcp · auth | Enables querying and retrieving Federal Reserve Economic Data (FRED) including series, categories, releases, sources, and tags, with support for stdio… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | keycard-hello-mcp-servermcp · auth | An MCP server demonstrating OAuth 2.0 authentication with Keycard's Security Token Service, providing tools for displaying the Keycard logo and… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | wei9072-aegismcp · ai-agents | AI-agent admission-control MCP server: validates file edits against Ring 0 syntax + Ring 0.5 structural-cost regression + workspace boundary (path /… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | security-detections-mcpmcp · ai-agents | Unifies 7,283+ detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a single queryable interface via MCP, with a web dashboard and… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | fewsats-sherlock-domainsmcp · back-end | Enables AI to search, purchase, and manage internet domains through Sherlock Domains API, handling authentication, ICANN requirements, and DNS… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | secure-mcp-grpcmcp · observability | Provides a secure gRPC transport layer for the Model Context Protocol (MCP) with mutual TLS, token-based authentication, and fine-grained… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | mcollina-perm-shellmcp · comms | Enables secure execution of shell commands through desktop notifications that require explicit user approval for each operation, maintaining strong… | 1 star · 2 forks | No one-command install · Source | |
| 965 | 41.082 | astromined-pygithubmcp · github-vcs | Integrates with GitHub's API through PyGithub to enable repository management, issue tracking, and pull request operations with automatic… | 1 star · 2 forks | No one-command install · Source | |
| 977 | 38.412 | aliensec-mcp-servermcp · back-end | Enables AI agents to perform endpoint security scanning using AlienVault OTX and VirusTotal, including multi-platform scans, threat intelligence… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | ssh-client-mcp-servermcp · ai-agents | A local MCP server that enables LLMs to execute shell commands on remote hosts over SSH with multiple authentication methods. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | haasonsaas-openapimcp · back-end | Converts OpenAPI specifications into callable tools with authentication, runtime validation, and a security policy engine for controlled API access. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | gh-downatthebottomofthemolehole-megalintermcp · other | Run Ox Security MegaLinter code analysis via mega-linter-runner for multi-language linting. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | n8n-pro-mcpmcp · auth | Full-instance management for self-hosted n8n — including queue mode — through the Model Context Protocol. 51 tools covering workflows, executions… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | mcp-ambassador-servermcp · back-end | Centralized authentication, authorization, and audit for MCP tools. One server governs every downstream MCP your organization uses. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | isaacpeel-solesonicmcp · auth | Spring Boot-based MCP server implementation with OAuth2 JWT authentication through AWS Cognito that provides a simple echo tool for returning user… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | d24yk4r4-bbmcp · other | Privacy-first bug bounty hunting toolkit providing recon, web testing, and vulnerability scanning tools with a sanitization layer. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | openapi-mcp-gatewaymcp · back-end | Mount any OpenAPI spec as an MCP server, supporting multiple APIs with authentication and resource auto-promotion. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | callspecmcp · back-end | Provides an MCP server that automatically exposes API routes as MCP tools with input validation and authentication, enabling AI agents to call the… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | txn2-datahubmcp · auth | Connects to DataHub data catalogs for searching datasets, exploring schemas, tracing lineage, and managing metadata with enterprise-grade… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | vikunja-mcp-2mcp · back-end | A stateless FastMCP server that exposes the Vikunja REST API as MCP tools for managing projects, tasks, labels, comments, filters, and webhooks… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | browser-bridgemcp · browser | Bridges opencode into Firefox, letting you read pages, run JavaScript, and audit for security flaws from the terminal. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | ancrz-skill-swarmmcp · ai-agents | Automates skill discovery, trust evaluation, and installation from multiple registries for coding agents with security scanning and usage tracking. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | 3ilm-mcpmcp · ai-agents | Enables AI agents and security researchers to query a curated knowledge base of 1,032 verified smart contract vulnerability findings from Sherlock… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | google-health-brokermcp · auth | Self-hosted multi-user Google Health OAuth broker and read-only Agent API with remote MCP support. Enables users to connect their Google account and… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | tenable-vpr-mcpmcp · back-end | MCP server for Tenable.io/One Vulnerability Management that provides read-only tools for querying scans, assets, plugins, and vulnerabilities, plus… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | pentest-tools-commcp · ai-agentsalso listed as pentest-tools-com-mcp-server | Run penetration testing scans, manage findings, and generate reports via AI agents. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | mcp-mrtr-devops-demomcp · database | Enables stateless human-in-the-loop DevOps automation, demonstrating MCP SEP-2322 multi-round trip requests for emergency database migration… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | openvas-mcpmcp · ai-agents | Self-hosted MCP server that gives AI agents structured access to OpenVAS vulnerability scanning without sending data externally. | 3 stars | No one-command install · Source | |
| 977 | 38.412 | cyber-master-mcp-servermcp · back-end | AI-powered cybersecurity automation platform with 155+ security tools for network, web, cloud, and binary analysis, controllable via natural language… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | open-db-mcpmcp · database | A multi-database MCP server that enables LLM agents to safely access MySQL, Oracle, DM, PostgreSQL, and SQLite databases with security features like… | 3 stars | No one-command install · Source | |
| 977 | 38.412 | phishark-playwright-mcpmcp · browser | A fork of Playwright MCP that adds PhiShark preflight and browser-deep security checks to block or warn on phishing and high-risk pages. | 3 stars | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.