Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 201 | 85.766 | slouchd-cyberchef-api-mcp-servermcp · back-end | MCP server for interacting with the CyberChef server API which will allow an MCP client to utilise the CyberChef operations. | 44 stars · 12 forks | No one-command install · Source | |
| 202 | 85.697 | handsomestwei-java-class-analyzermcp · github-vcs | Analyzes and decompiles Java class files with CFR decompiler integration, Maven repository support, and dependency scanning to enable reverse… | 42 stars · 13 forks | No one-command install · Source | |
| 202 | 85.697 | lyuboslavlyubenov-soloditmcp · database | Integrates with Solodit's vulnerability database to search smart contract security audit findings and retrieve detailed vulnerability reports… | 42 stars · 13 forks | No one-command install · Source | |
| 204 | 85.530 | halilkirazkaya-pentestermcp · devops | Integrates 200+ cybersecurity and penetration testing tools into AI assistants via Docker-isolated sandboxes. | 52 stars · 8 forks | No one-command install · Source | |
| 205 | 85.444 | mark3labs-nucleimcp · other | Integrates with Nuclei vulnerability scanner to automate security assessments through configurable scanning operations with comprehensive reporting… | 48 stars · 9 forks | No one-command install · Source | |
| 206 | 85.422 | agent-linkmcp · github-vcs | Enables two coding agents on separate machines to communicate directly via a private git repo, with end-to-end encryption and no server required… | 56 stars · 7 forks | No one-command install · Source | |
| 207 | 85.331 | nationalparksmcp · back-end | Provides real-time National Park Service data for searching parks by location or activities, retrieving detailed information, and accessing current… | 41 stars · 12 forks | No one-command install · Source | |
| 208 | 85.244 | mcp-wayback-machine-servermcp · search | MCP server and CLI tool for interacting with the Internet Archive's Wayback Machine, supporting full CDX search, snapshot retrieval, screenshot… | 50 stars · 8 forks | No one-command install · Source | |
| 209 | 85.237 | sage-mcpmcp · back-end | A multi-tenant MCP server platform that hosts isolated MCP servers with OAuth/API key authentication for 23+ services, enabling integration with… | 44 stars · 10 forks | No one-command install · Source | |
| 210 | 85.206 | pinkpixel-pollinations-multimodalmcp · back-end | Enables multimodal content generation through Pollinations APIs, providing image, text, and audio creation capabilities without requiring… | 39 stars · 13 forks | No one-command install · Source | |
| 210 | 85.206 | secfathy-apktoolmcp · search | Integrates with Apktool to provide Android APK decompilation, recompilation, manifest analysis, permission extraction, and smali code searching for… | 39 stars · 13 forks | No one-command install · Source | |
| 212 | 85.101 | bugbountymcp · database | Integrates 90+ security tools including Nuclei, Subfinder, Nmap, SQLMap, and OSINT platforms like Shodan and VirusTotal to provide comprehensive bug… | 41 stars · 11 forks | No one-command install · Source | |
| 213 | 85.092 | jtang613-binassistmcp · other | Integrates with Binary Ninja to expose decompilation, IL analysis, symbol management, type system manipulation, and cross-reference analysis tools for… | 49 stars · 8 forks | No one-command install · Source | |
| 214 | 85.060 | mythos-agentmcp · ai-agents | Open-source AI security agent with SAST, DAST, and policy-as-code capabilities over MCP. | 43 stars · 10 forks | No one-command install · Source | |
| 215 | 85.034 | gaffx-volatility-mcpmcp · back-end | MCP server for Volatility 3.x, allowing you to perform memory forensics analysis with AI assistant. Experience memory forensics without barriers as… | 52 stars · 7 forks | No one-command install · Source | |
| 216 | 84.859 | codeinspectusmcp · ai-agents | Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and… | 44 stars · 9 forks | No one-command install · Source | |
| 217 | 84.840 | aquasecurity-trivymcp · github-vcs | Integrates Trivy's security scanning capabilities to detect vulnerabilities, misconfigurations, licenses, and secrets in local filesystems, container… | 47 stars · 8 forks | No one-command install · Source | |
| 218 | 84.750 | gh-artmann-package-registrymcp · search | Search and retrieve package information from npm, Cargo, PyPI, NuGet, and Go registries with security advisory lookups. | 39 stars · 11 forks | No one-command install · Source | |
| 219 | 84.697 | projectmemorymcp · ai-agents | A proof-of-concept MCP server for security research demonstrating a multi-phase parasitic attack that disguises itself as a legitimate project memory… | 46 stars · 8 forks | No one-command install · Source | |
| 220 | 84.653 | context-optimizermcp · other | Provides targeted file content extraction, secure terminal command execution with intelligent output analysis, and web research capabilities while… | 62 stars · 5 forks | No one-command install · Source | |
| 221 | 84.595 | hexastrike-eventwhispermcp · observability | Provides access to Windows Event Log files for querying events with time range, event ID, and text filters to enable security investigations, system… | 49 stars · 7 forks | No one-command install · Source | |
| 222 | 84.560 | aim-guardmcp · other | Provides security middleware that guards MCP implementations against unauthorized access, data leakage, and malicious interactions through threat… | 21 stars · 17 forks | No one-command install · Source | |
| 223 | 84.481 | multi-mcpmcp · ai-agents | A multi-model AI orchestration MCP server for automated code review and LLM-powered analysis, integrating with Claude Code and OpenCode to orchestrate… | 35 stars · 13 forks | No one-command install · Source | |
| 224 | 84.455 | brutus-gr-osint-templatemcp · observability | Real-time OSINT intelligence platform for global security monitoring. | 72 stars · 4 forks | No one-command install · Source | |
| 225 | 84.451 | gregkop-sketchfabmcp · back-end | Integrates with Sketchfab to enable searching, viewing details, and downloading 3D models in various formats using an API key for authentication. | 39 stars · 10 forks | No one-command install · Source | |
| 226 | 84.405 | xxipv6-ida-pro-multiplemcp · other | Bridges IDA Pro's reverse engineering capabilities with language models through a multi-session architecture that enables concurrent binary analysis… | 52 stars · 6 forks | No one-command install · Source | |
| 227 | 84.240 | headless-idamcp · other | Enables reverse engineering of binary files through IDA Pro's headless mode, providing tools for function analysis, disassembly, decompilation, and… | 43 stars · 8 forks | No one-command install · Source | |
| 228 | 84.124 | elastic-securitymcp · otheralso listed as elastic-security-mcp-app | Interactive security operations dashboards for alert triage, threat hunting, and case management. | 22 stars · 16 forks | No one-command install · Source | |
| 230 | 84.073 | fastly-cdnmcp · other | Integrates with Fastly CDN to enable direct management of services, domains, cache settings, and security configurations for streamlined DevOps… | 39 stars · 9 forks | No one-command install · Source | |
| 231 | 83.982 | czottmann-kagi-kenmcp · back-end | JavaScript-based Kagi search and summarization server that provides web search and document summarization capabilities through the kagi-ken package… | 41 stars · 8 forks | No one-command install · Source | |
| 231 | 83.982 | hdresearch-shellmcp · back-end | Secure shell command execution server for AI models to interact with local systems while maintaining strict security controls. | 41 stars · 8 forks | No one-command install · Source | |
| 233 | 83.817 | cisco-supportmcp · auth | Integrates with Cisco's Support APIs to search bug databases, retrieve case information, and access product lifecycle data with OAuth2 authentication… | 33 stars · 12 forks | No one-command install · Source | |
| 234 | 83.783 | rabbitmq-mcp-server-2mcp · back-end | Enables AI agents to manage RabbitMQ message brokers through admin APIs, supporting multiple brokers, OAuth authentication, and mutative tools. | 40 stars · 8 forks | No one-command install · Source | |
| 235 | 83.618 | adeosec-shodanmcp · other | Integrates with Shodan's network intelligence capabilities to provide cybersecurity analysts with tools for host information lookup, vulnerability… | 23 stars · 15 forks | No one-command install · Source | |
| 236 | 83.587 | thedigitalninja-fitbitmcp · auth | Integrates with Fitbit to provide access to personal health data including weight measurements, sleep logs, and profile information through OAuth 2.0… | 33 stars · 11 forks | No one-command install · Source | |
| 237 | 83.486 | nahmanmate-better-authmcp · auth | Integrates with Better-Auth to simplify authentication processes. | 41 stars · 7 forks | No one-command install · Source | |
| 238 | 83.370 | verygoodplugins-evernotemcp · auth | Evernote note management with OAuth authentication and ENML format conversion. | 32 stars · 11 forks | No one-command install · Source | |
| 239 | 83.299 | mwhesse-dataversemcp · other | Integrates with Microsoft Dataverse to enable schema operations, data management, and configuration tasks across Power Platform environments through… | 20 stars · 15 forks | No one-command install · Source | |
| 240 | 83.292 | kridaydave-file-organizermcp · other | Security-hardened file organizer with smart categorization, duplicate detection, and rollback support. | 44 stars · 6 forks | No one-command install · Source | |
| 240 | 83.292 | octsshmcp · ai-agents | Provides LLMs with safe, controllable, and stateful SSH access to shell environments, enabling remote command execution and file transfers with async… | 44 stars · 6 forks | No one-command install · Source | |
| 242 | 83.288 | asterisk-mcp-servermcp · back-end | Provides security vulnerability scanning for code snippets, codebases, and code changes through integration with the Asterisk security API. | 33 stars · 10 forks | No one-command install · Source | |
| 243 | 83.145 | himanshusanecha-osint-toolkitmcp · other | Provides a unified interface for network reconnaissance with parallel execution of OSINT tools including WHOIS, Nmap, DNS lookups, and typosquatting… | 48 stars · 5 forks | No one-command install · Source | |
| 244 | 83.134 | stackloklabs-osvmcp · database | Integrates with the Open Source Vulnerabilities (OSV) database to enable querying vulnerabilities by package versions, commits, or IDs for security… | 39 stars · 7 forks | No one-command install · Source | |
| 245 | 83.070 | firewallamcp · back-end | Integrates with Firewalla's MSP API v2 to provide real-time network monitoring, security analysis, and firewall management through 28 specialized… | 32 stars · 10 forks | No one-command install · Source | |
| 246 | 82.951 | ibrahimsaleem-pentestthinkingmcp · search | Advanced reasoning engine for penetration testing that implements Beam Search and Monte Carlo Tree Search algorithms to systematically analyze… | 38 stars · 7 forks | No one-command install · Source | |
| 247 | 82.853 | greptimeteam-greptimedbmcp · database | Enables AI interaction with GreptimeDB time-series databases through MySQL protocol for data exploration, analysis, and SQL query execution with… | 29 stars · 12 forks | No one-command install · Source | |
| 248 | 82.713 | marcolooy-pega-dxmcp · auth | Integrates with Pega Infinity's DX APIs to enable conversational case management and workflow automation through OAuth2 authentication, supporting… | 21 stars · 14 forks | No one-command install · Source | |
| 249 | 82.686 | pan-mcp-relaymcp · back-end | Security-enhanced MCP Relay/Proxy server providing real-time AI threat protection for MCP Clients, scanning tool descriptions, call parameters, and… | 34 stars · 8 forks | No one-command install · Source | |
| 250 | 82.609 | descope-authenticationmcp · auth | Integrates with Descope's authentication platform to enable natural language-driven user management, authentication flows, and access control… | 36 stars · 7 forks | No one-command install · Source | |
| 251 | 82.607 | super-i-tech-plexusmcp · auth | Multi-tenant OAuth framework that provides secure user authentication, encrypted API key management, and tenant-scoped tool access controls for… | 30 stars · 10 forks | No one-command install · Source | |
| 252 | 82.589 | pocketbase-mcp-servermcp · back-end | Enables AI assistants and MCP clients to interact with PocketBase databases for authentication, data management, and administrative operations. | 65 stars · 3 forks | No one-command install · Source | |
| 253 | 82.544 | siva010928-multi-chatmcp · auth | Integrates with Google Chat API to send messages, search conversations, manage spaces, and retrieve user information with OAuth 2.0 authentication… | 27 stars · 13 forks | No one-command install · Source | |
| 254 | 82.456 | sarthaksiddha-wiresharkmcp · other | Extracts, structures, and transmits network packet data from Wireshark for security analysis, anomaly detection, and network troubleshooting without… | 31 stars · 9 forks | No one-command install · Source | |
| 255 | 82.410 | wireshark-network-analysismcp · other | Integrates with Wireshark's tshark tool to capture and analyze network packets with configurable filters, SSL decryption support, and multiple output… | 35 stars · 7 forks | No one-command install · Source | |
| 256 | 82.345 | mcp-boilerplatemcp · back-end | A boilerplate for deploying a remote MCP server on Google Cloud with authentication, enabling experimentation with MCP tools. | 8 stars · 18 forks | No one-command install · Source | |
| 257 | 82.035 | szowesgad-semgrepmcp · other | Integrates Semgrep for static code analysis, enabling AI-driven security scanning, vulnerability detection, and code quality improvement across… | 28 stars · 10 forks | No one-command install · Source | |
| 258 | 82.014 | greensheep01201-stitchmcp · front-end | Integrates with Google Stitch API using OAuth authentication to provide automated design workflow capabilities including UI/UX development, design… | 31 stars · 8 forks | No one-command install · Source | |
| 259 | 81.790 | deslicer-splunkmcp · observability | Integrates with Splunk Enterprise through the Splunk SDK to provide search execution, health monitoring, user management, and alert analysis with… | 27 stars · 10 forks | No one-command install · Source | |
| 259 | 81.790 | stytch-consumer-todo-mcp-servermcp · auth | An MCP server that enables AI agents to manage a TODO list with user authentication via Stytch. It provides tools for creating, reading, updating, and… | 27 stars · 10 forks | No one-command install · Source | |
| 261 | 81.787 | malwarebazaar-mcpmcp · back-end | An AI-driven MCP server that autonomously interfaces with Malware Bazaar, delivering real-time threat intel and sample metadata for authorized… | 30 stars · 8 forks | No one-command install · Source | |
| 262 | 81.518 | grantexmcp · auth | OAuth 2.0 authorization infrastructure for AI agents — scoped delegation tokens, audit trails, and revocation. | 31 stars · 7 forks | No one-command install · Source | |
| 263 | 81.482 | rymurr-signalmcp · comms | Enables secure communication with Signal messaging through direct messaging, group chats, and message reception capabilities, leveraging Signal's… | 26 stars · 10 forks | No one-command install · Source | |
| 264 | 81.352 | ricauts-cybermcpmcp · back-end | Provides API security testing tools for authentication testing, SQL injection detection, data leakage analysis, and vulnerability scanning with… | 16 stars · 13 forks | No one-command install · Source | |
| 265 | 81.291 | janeemcp · back-end | Secrets management MCP server that injects credentials into API requests for AI agents, enforcing policies and logging all activity without exposing… | 30 stars · 7 forks | No one-command install · Source | |
| 265 | 81.291 | nickpending-mcp-reconmcp · back-end | Conversational recon interface and MCP server powered by httpx and asnmap. Supports various reconnaissance levels for domain analysis, security header… | 30 stars · 7 forks | No one-command install · Source | |
| 267 | 81.153 | quickchat-aimcp · back-end | Provides a bridge between AI assistants and Quickchat's conversation platform, enabling seamless interaction with Quickchat scenarios through API key… | 24 stars · 11 forks | No one-command install · Source | |
| 268 | 81.008 | rapid7-bulk-exportmcp · back-endalso listed as rapid7-bulk-export-mcp-server | Exports and queries Rapid7 Command Platform vulnerability and asset data via Bulk Export API with DuckDB-powered analysis. | 29 stars · 7 forks | No one-command install · Source | |
| 268 | 81.008 | cyreslab-exploitdbmcp · database | Provides direct access to ExploitDB functionality for cybersecurity research, enabling exploit searches by keywords, CVE IDs, or platforms with local… | 29 stars · 7 forks | No one-command install · Source | |
| 271 | 80.970 | cybersecurityup-offensive-toolkitmcp · back-end | Provides cybersecurity professionals with penetration testing capabilities through specialized servers for payload generation, reconnaissance… | 27 stars · 8 forks | No one-command install · Source | |
| 272 | 80.662 | linux-desktop-slash-commandsworkflow · back-end | A library of slash commands intended specifically to facilitate common and advanced operations on Linux desktop environments (although many would also… | 30 stars · 6 forks | No one-command install · Source | |
| 272 | 80.662 | kotlin-androidmcp · back-end | Provides Android/Kotlin development capabilities through 31+ specialized tools covering code generation, build management, architecture setup, Gradle… | 30 stars · 6 forks | No one-command install · Source | |
| 274 | 80.556 | adrian803-lingximcp · other | Autonomous penetration testing framework with MCP tool bridges for Kali Linux container management and CTF workflows. | 38 stars · 4 forks | No one-command install · Source | |
| 275 | 80.473 | gh-itspecialist111-teams-transcriptsmcp · auth | Retrieves and cleans Microsoft Teams meeting transcripts via Microsoft Graph API with delegated OAuth 2.0 On-Behalf-Of authentication. | 27 stars · 7 forks | No one-command install · Source | |
| 276 | 80.456 | glassbead-tc-tindermcp · back-end | Provides a secure TypeScript-based interface to Tinder's dating app API, handling authentication, rate limiting, and core functionality like profiles… | 23 stars · 10 forks | No one-command install · Source | |
| 277 | 80.448 | chimera-protocol-csl-coremcp · ai-agents | Deterministic AI safety policy engine with Z3 formal verification. Write, verify, and enforce machine-verifiable constraints for AI agents via MCP. | 16 stars · 12 forks | No one-command install · Source | |
| 278 | 80.282 | ibm-content-services-filenetmcp · back-end | Integrates with IBM Content Services (FileNet) through GraphQL APIs to provide enterprise document operations, folder management, metadata-driven… | 15 stars · 12 forks | No one-command install · Source | |
| 279 | 80.165 | intruder-io-intruder-mcpmcp · back-end | MCP server to access [Intruder](https://www.intruder.io/), helping you identify, understand, and fix security vulnerabilities in your infrastructure. | 26 stars · 7 forks | No one-command install · Source | |
| 280 | 80.078 | jguimera-security-copilotmcp · auth | Integrates Microsoft Security Copilot with Microsoft Sentinel for running KQL queries, managing skillsets, and executing prompts using Azure Identity… | 23 stars · 9 forks | No one-command install · Source | |
| 281 | 80.050 | bsahane-proxmoxmcp · back-end | Integrates with Proxmox VE API to provide complete virtualization management including VM and container lifecycle operations, cloud-init… | 20 stars · 11 forks | No one-command install · Source | |
| 282 | 79.980 | chatgpt2localbridgemcp · auth | Self-hosted MCP server that enables ChatGPT to access and operate on local project files after OAuth authorization, without uploading the workspace… | 107 stars · 1 fork | No one-command install · Source | |
| 283 | 79.722 | lanalyzer-mcp-servermcp · back-end | Enables AI models to perform static taint analysis on Python code, detecting security vulnerabilities by tracking data flows from sources to sinks. | 9 stars · 13 forks | No one-command install · Source | |
| 284 | 79.691 | mbelinky-x-twittermcp · auth | Integrates with Twitter/X API using dual OAuth authentication (1.0a and 2.0) to enable tweet posting with media attachments, tweet searching, and… | 21 stars · 10 forks | No one-command install · Source | |
| 285 | 79.664 | strom-capital-db2imcp · database | Provides secure read-only access to IBM DB2 for i (AS/400) databases through the JT400 JDBC driver with SQL security validation, rate limiting, and… | 22 stars · 9 forks | No one-command install · Source | |
| 286 | 79.577 | agentgatemcp · comms | Human-in-the-loop approval gateway for agent tool calls: agents request, policies decide, humans approve via Slack/Discord/web — with an… | 33 stars · 4 forks | No one-command install · Source | |
| 286 | 79.577 | contrastcybermcp · ai-agents | Free security intelligence tools for AI agents including CVE lookup, OSINT, threat intel, and code security. | 33 stars · 4 forks | No one-command install · Source | |
| 288 | 79.530 | aci-labs-ms-fabricmcp · back-end | Integrates with Microsoft Fabric APIs to explore and document data assets including workspaces, lakehouses, warehouses, tables, and semantic models… | 16 stars · 11 forks | No one-command install · Source | |
| 289 | 79.363 | sammcj-snykmcp · github-vcs | Integrates with Snyk CLI to scan GitHub repositories and Snyk projects for security vulnerabilities directly within conversations, enabling developers… | 15 stars · 11 forks | No one-command install · Source | |
| 290 | 79.359 | dlhellme-telegrammcp · back-end | Integrates with Telegram channels and groups through web scraping and official API to extract posts, channel information, and perform searches with… | 32 stars · 4 forks | No one-command install · Source | |
| 291 | 79.156 | marcoeg-nvdmcp · database | Provides access to the NIST National Vulnerability Database through get_cve and search_cve tools for retrieving and searching CVE records with… | 14 stars · 11 forks | No one-command install · Source | |
| 292 | 79.113 | nirholas-repo-intelmcp · observability | Analyze repositories of any size with deep code analysis, security scanning, complexity metrics, and AI-powered semantic search. | 27 stars · 5 forks | No one-command install · Source | |
| 293 | 78.896 | sleepingbag945-ipsearchmcp · database | Provides IP address lookups and geolocation queries through local SQLite database storage for cybersecurity workflows, network analysis, and threat… | 30 stars · 4 forks | No one-command install · Source | |
| 294 | 78.871 | evan7198-pcileechmcp · ai-agents | Direct memory access through PCILeech DMA hardware for debugging, reverse engineering, and security research | 21 stars · 8 forks | No one-command install · Source | |
| 294 | 78.871 | pullkitsan-mobsf-mcp-servermcp · back-end | A MCP server for MobSF which can be used for static and dynamic analysis of Android and iOS application. | 21 stars · 8 forks | No one-command install · Source | |
| 296 | 78.805 | aliyun-edge-security-accelerationmcp · back-end | Provides a bridge to Alibaba Cloud's Edge Security Acceleration service for managing edge routines, deployments, routes, and sites through… | 26 stars · 5 forks | No one-command install · Source | |
| 297 | 78.800 | super-shellmcp · other | Enables secure execution of shell commands across Windows, macOS, and Linux with a three-tier whitelist security model for controlled system access. | 20 stars · 9 forks | No one-command install · Source | |
| 298 | 78.726 | savethepolarbears-julesmcp · back-end | Integrates with Google Jules API for code generation and modification with autonomous scheduling capabilities, featuring cron-based recurring tasks… | 22 stars · 7 forks | No one-command install · Source | |
| 298 | 78.726 | shodan-mcp-servermcp · back-end | Enables AI agents to perform passive reconnaissance, vulnerability intelligence, DNS analysis, and device search using Shodan's database of… | 22 stars · 7 forks | No one-command install · Source | |
| 300 | 78.612 | nekzus-utilitymcp · other | Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights | 18 stars · 10 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.