Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 1101 | 32.223 | gotify-rmcpmcp · ai-agents | MCP server and CLI for Gotify that lets agents send push notifications, check server health, list messages, and manage Gotify apps and clients over… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | unifi-rmcpmcp · back-end | MCP server and CLI for UniFi Network controllers: clients, devices, WLANs, firewall, and health over stdio or streamable HTTP, with auth. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | securecode-mcpmcp · back-end | Standalone MCP server that provides security scanning, project mapping, and vulnerability fix generation to AI coding assistants. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mcp-security-frameworkmcp · back-end | Enables creation of secure-by-default MCP servers with 5-layer validation to protect against injection, path traversal, and other attack vectors. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mal-mcpmcp · back-end | MCP server for MyAnimeList that enables searching anime/manga, getting details, rankings, seasons, characters, reviews, and user profiles without… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | partner-center-mcpmcp · back-end | An MCP server that helps you build against the Partner Center REST API, providing scenario discovery, REST examples, authentication guidance, and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | velvet-ropemcp · ai-agents | An MCP server for agent authorization that tests the full effect surface and enforces control over consequential actions before dispatch, emitting… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | wrg-11-wrg-sigma-rulesmcp · back-end | Sigma detection rule writing, validation, and conversion (Splunk/Elastic/Kibana/Wazuh) via 3 MCP tools (`draft_rule`, `validate_rule`, `convert_rule`)… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | ratatoskmcp · other | CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | dangerous-skills-mcpmcp · back-end | A TypeScript MCP server delivering a vendored 'dangerous skills' corpus and adversarial fixtures over MCP for security-research testing, supporting… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cveasy-mcpmcp · back-end | Provides MCP clients like Claude with tools to query and manage security scans, CVEs, assets, findings, threat intel, and generate polished reports by… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cerberusmcp · auth | Provides a three-layer payment firewall for AI agents, enabling identity verification, risk screening, and execution authorization with on-chain… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | snapkitty-clojure-lisp-bridgemcp · back-end | An archived, unsafe MCP server with critical security vulnerabilities, classified as a pump and dump operation. Do not use in production. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | brentwpeterson-gmailmcp · auth | Integrates with Gmail API using OAuth 2.0 authentication to enable email management including reading, sending, replying, searching, and organizing… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | dsh-safetymcp · ai-agents | An MCP server that audits DeepSeek Harness (DSH) plugins for security threats using static and dynamic analysis. It enables automatic safety reviews… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | agent-nextupmcp · auth | Enables AI agents to maintain project continuity through a file-based state hub with tasks, phases, and handoff snapshots. Provides MCP tools for… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | fusae-memory-vaultmcp · back-end | Local-first MCP memory server with semantic search, AES-256-GCM encryption, and optional Supabase cloud sync. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | nirikshakmcp · back-end | MCP server for passive domain reconnaissance and attack surface monitoring. It scans subdomains, security headers, TLS certs, and tech stack, detects… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | panos-mcp-servermcp · back-end | MCP server for managing Palo Alto Networks firewalls and Panorama, providing tools to interact with PanOS via MCP protocol with authenticated HTTP… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | patrowlintelmcpmcp · search | Exposes PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks) via MCP tools like search_cves, get_cve, and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | brainbase-mcpmcp · auth | Enables management of Brainbase agents, components, evals, tasks, and more via a remote MCP connection with OAuth authentication. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | tablecloth-mcpmcp · back-end | MCP server that discovers Korean e-Government and financial websites and launches them in a clean disposable Windows Sandbox (or macOS macSandbox)… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | secure-host-mcpmcp · auth | Exposes a Windows or Linux host terminal to remote MCP clients via Streamable HTTP, enabling command execution, tunnel management, and privileged… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | the-boxmcp · ai-agents | A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | phantom-mcpmcp · other | Exposes all PHANTOM security testing capabilities as MCP tools, enabling reconnaissance, vulnerability scanning, red teaming, and report generation… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | dhks77-ssh-gatewaymcp · back-end | Enables secure SSH connections through gateway servers with Kerberos authentication for remote command execution and server management. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | tiledmcpmcp · back-end | A security-first Tilemap MCP server for Tiled Map Editor, enabling safe inspection, creation, editing, validation, and preview of Tiled assets, with… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mcp-script-runnermcp · back-end | Enables MCP clients to remotely execute server-side JavaScript in ServiceNow via a single tool, allowing full CRUD and API access with audit logging… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | code-wheel-drupal-toolsmcp · observability | Drupal module providing read-only analysis tools for site health monitoring, content management, configuration inspection, user administration, and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | sap-security-notes-mcp-servermcp · front-end | Enables querying SAP Security Note metadata including Patch Day releases, CVSS scores, CVEs, affected components, and actively-exploited status via… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | daimonmcp · other | A local daemon for macOS that gives any MCP-capable AI client eyes, hands, and a face — screen capture, accessibility tree, mouse/keyboard actions… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | codemore-mcp-servermcp · back-end | Enables AI agents to scan code for security and quality issues and receive machine-readable reports with suggested fixes and verification criteria. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cinderfimcp · other | Retirement planning for Canada and the US with CPP, OAS, Social Security, and Monte Carlo simulations. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | touful-vuln-search-mcpmcp · ai-agents | Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | flagrixmcp · github-vcs | Enables AI agents to scan GitHub repositories and user profiles for malware signals before cloning, providing risk verdicts pinned to specific… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | substack-article-mcpmcp · ai-agents | MCP server for Substack that enables reading articles, comments, feed, and subscriptions from AI clients like Cursor and Claude, with optional… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | dephealth-mcpmcp · back-end | Dependency security & health auditing for AI agents with no account or API key required. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | checkslip-mcpmcp · auth | A remote MCP server for verifying Thai bank transfer slips using slip images, QR payloads, or transaction references, with OAuth 2.1 authentication… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | achetronic-browsemcp · auth | Provides web search, page fetching, and file downloading with JWT authentication, OAuth 2.0 integration, and CEL-based policy controls for supervised… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | sast-mcp-servermcp · back-end | Enables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | guard-scannermcp · ai-agents | Provides a security scanner for AI agent skills and MCP servers, detecting threats like prompt injection, identity hijacking, and memory poisoning. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | aegismcpmcp · ai-agents | A local-first security gateway and visual dashboard for AI agents that enforces cost caps, blocks prompt injections, and requires approval for… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mcp-security-auditmcp · ai-agents | Security auditor for MCP servers that enumerates tools, resources, and prompts, scans for injection patterns, classifies risk levels, and produces a… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | juscraper-mcpmcp · back-end | Public MCP server for querying Brazilian court jurisprudence, processes, and communications without authentication. Supports courts like TJSP, TJRS… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | arvancloud-mcp-servermcp · back-end | Enables AI agents to manage the entire ArvanCloud platform (compute, networking, storage, CDN, DNS, etc.) plus a cloud-DevOps toolbox for… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | aws-sra-verify-mcp-servermcp · back-end | Enables AI agents to assess AWS environments against the AWS Security Reference Architecture (SRA) by providing tools to discover, describe, and run… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | vibecheckmcp · database | Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mcp-7zip-servermcp · back-end | An MCP server for 7-Zip archive operations (list, extract, create) with dual-engine architecture and sandbox security features. Note: currently a… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | depureco-industrial-vacuum-explorermcp · auth | Remote MCP Server for industrial vacuum cleaner configuration. Query 150+ products across 24 industrial sectors with full ATEX certification data… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | ongjin-security-scannermcp · other | Detects security vulnerabilities in code including OWASP Top 10 threats and hardcoded secrets | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | nogoo9-mcp-server-cloud-fsmcp · auth | A cloud replacement for mcp-server-filesystem that provides 30 tools for S3, Azure Blob, and Google Cloud Storage, deployable locally via STDIO or… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | powerbi-mcp-proxymcp · back-end | A self-hosted MCP server that proxies MCP clients to Power BI, using your own Entra tenant and Azure subscription. It enables DAX queries, workspace… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | notasandy-code-sanitizermcp · other | Strict AI code reviewer powered by Groq that detects bugs and security vulnerabilities in code. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | qualys-mcp-servermcp · back-end | MCP server enabling AI assistants to interact with the Qualys vulnerability management platform. Supports investigation, risk assessment, compliance… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | masx200-webdavmcp · search | Connects to WebDAV-enabled storage systems with authenticated access and bcrypt encryption, providing file and directory operations, glob pattern… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | poisonstefani-dev-threadsmcp · back-end | MCP server for the official Meta Threads API covering authentication, publishing, reading, replies, insights, and search operations. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | loganmurphy-ouramcp · auth | MCP server for Oura Ring health data running on Cloudflare Workers, exposing sleep, activity, and readiness metrics via OAuth 2.1 authentication. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cve-search-mcp-servermcp · back-end | Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | r00tkit77-nessusmcp · other | Transforms Nessus vulnerability scan data into prioritized remediation tasks by correlating CVEs with NVD, CISA KEV, and asset ownership data. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | shemcpmcp · back-end | An MCP server that provides sandboxed shell command execution with configurable security policies, enabling safe AI-assisted command runs within a… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | jstibal-openterms-mcpmcp · ai-agents | Ed25519-signed consent receipts and programmable policy engine for AI agents. Spending caps, action whitelists, escalation thresholds, and JWKS-backed… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | nhpsecurity-policy-firewallmcp · back-end | Security proxy that enforces allow/deny policies on MCP tool calls between AI clients and downstream MCP servers, with secret redaction and audit… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | drupal-best-practicesmcp · front-end | Provides access to curated Drupal development standards and security guidelines through searchable CSV-based knowledge covering coding conventions… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | eyaushev-swagger-testcase-mcpmcp · back-end | MCP server for API test case generation from Swagger/OpenAPI specs. Parses Swagger 2.0 and OpenAPI 3.x, generates test cases across 8 categories… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | muhannad-hash-mcp-shieldmcp · ai-agents | Security scanner for MCP servers. Detects backdoors, exfiltration code, obfuscation, dangerous code execution, prompt injection, and supply chain… | 2 stars | armory install muhannad-hash-mcp-shield --cli claude | |
| 1101 | 32.223 | netsuite-mcpmcp · auth | Enables AI assistants to query and manage NetSuite data via natural language, supporting SuiteQL queries and record operations through Token-Based… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mcpampelmcp · back-end | MCP server that scans other MCP servers for security vulnerabilities using 16 scanning engines, returning aggregated trust scores. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | kof-stitch-mcpmcp · front-end | Enables AI-powered UI/UX design generation and management via Google Stitch, handling OAuth authentication automatically for MCP clients like Claude… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | ako2345-android-security-analyzermcp · otheralso listed as android-security-analyzer | Static security analysis of Android application source code with 53 rules across manifest, Gradle, source, XML, and secret scanning. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | oneclicklmmcp · back-end | A robust MCP server for NotebookLM that provides auto-healing authentication, zero-config setup, and tools to list, query, create notebooks, and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | danielsebastianc-frappe-apimcp · back-end | Provides a single tool for making HTTP requests to Frappe/ERPNext REST API endpoints with token-based authentication. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | pipeline-assistant-mcpmcp · back-end | An MCP server that automates CI/CD pipeline creation, analysis, and security enforcement. It generates production-ready pipelines from templates and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | vyos-mcpmcp · back-end | MCP server for managing VyOS routers via the VyOS HTTP API, allowing AI assistants to read config, set interfaces, firewall rules, VPNs, and more. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | ossec-mcpmcp · ai-agents | MCP server that exposes OSSEC HIDS security monitoring capabilities as tools, resources, and prompts for AI assistants. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | bajuzjefe-aikidomcp · other | Security analysis for Aiken smart contracts on Cardano with 75 vulnerability detectors. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | securechaindev-secure-chainmcp · database | Integrates with vulnerability databases and dependency graphs to provide software supply chain security assessment through package status checking… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | kaewz-manga-wordpress-nodeflowmcp · back-end | Cloudflare Workers-based WordPress REST API integration with multi-tenant authentication and external image hosting for automated content management. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | mary-code217-swagger-openapimcp · back-end | Parses Swagger/OpenAPI specifications to dynamically generate callable tools for REST API integration with support for multiple APIs and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | claude-flowmcp · ai-agents | Multi-agent AI orchestration platform for Claude Code that enables deploying and coordinating specialized agents in swarms with self-learning… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cliai-slack-wrappermcp · auth | Docker-wrapped CLI tool that provides token-efficient access to Slack workspaces through structured JSON output and multiple authentication methods. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | gpt-commandermcp · ai-agents | A security-first MCP server that provides LLMs with structured tools for filesystem, process, search, build/test/lint, IDE integration, and more. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | ricardodeazambuja-browser-automation-playwrightmcp · browser | Universal browser automation server using Playwright that provides web navigation, element interaction, media control, network monitoring, security… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | notoriousarnav-eventhorizonmcp · back-end | Integrates with EventHorizon Django platform using Knox authentication to manage event lifecycles, registrations with approval workflows, and user… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | jim-coyne-acimcp · back-end | Integrates with Cisco ACI fabrics through APIC REST API to automate network infrastructure management including tenant configuration, policy creation… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | wcoppedge-cisa-threat-intelligencemcp · search | Integrates with CISA's Known Exploited Vulnerabilities catalog and NVD data to provide vulnerability searching, threat trend analysis, CVE… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | sanjanaspanda-github-code-reviewmcp · github-vcs | Integrates with GitHub's API to analyze pull requests, detect code patterns and security vulnerabilities, manage reviews and comments, and enforce… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | rykerwang-openapi2mcpservermcp · back-end | Automatically converts OpenAPI specifications into callable tools with authentication handling, input validation, and HTTP request proxying for… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | alexgarabt-bizangafest-penetration-testingmcp · back-end | Autonomous penetration testing server that performs network reconnaissance with nmap scanning and vulnerability discovery through searchsploit… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | tshark-mcp-servermcp · back-end | Analyzes pcap files using tshark to detect network attacks and security threats. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | gchallen-withingsmcp · auth | Integrates with Withings smart scales through OAuth2 authentication to retrieve weight measurements, body composition data (fat mass, muscle mass… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | lastmiao-pathscanmcp · search | Integrates dirsearch directory brute-forcing tool with Firecrawl web crawling services to enable automated discovery of hidden web directories, files… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | dabhivijay2478-better-authmcp · search | Integrates with Better Auth documentation through web scraping to provide authentication provider listings, feature details with code examples… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | superego-mcpmcp · ai-agents | Superego MCP is an intelligent tool-call review system for AI agents that provides configurable security rules and automated guardrails. | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | can-acar-jarvismcp · back-end | Go-based system administration server that provides secure filesystem operations, terminal command execution, web content fetching, and multi-file… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | cookie-jarmcp · auth | Provides cookie management capabilities for web automation and testing workflows, enabling storage, retrieval, and manipulation of session state and… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | gigapipemcp · observability | Integrates with Gigapipe's observability platform to query Prometheus metrics with PromQL, search Loki logs with LogQL, and retrieve Tempo traces by… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | shanksxz-github-repo-contextmcp · github-vcs | Provides a GitHub repository context retrieval tool that enables AI models to access repository structures, file contents, and filtered file lists… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | trustasia-mysslmcp · back-end | Integrates with MySSL API to provide domain and IP security checking capabilities for verifying secure HTTPS deployments and monitoring SSL/TLS… | 2 stars | No one-command install · Source | |
| 1101 | 32.223 | christopherwoodall-nmapmcp · other | Provides a bridge to Nmap network scanning tool for performing reconnaissance, port scanning, and service identification with customizable options and… | 2 stars | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.