Leaderboard
Scored on public signals; components with none are listed as Unranked · Formula
Component
Domain
Vertical
| Rank | Score | Component | Description | Evidence | Last commit | Install |
|---|---|---|---|---|---|---|
| 501 | 66.893 | norbinsh-trivy-security-scannermcp · other | Integrates with Trivy to provide vulnerability scanning and automated remediation for projects across multiple programming languages and package… | 10 stars · 3 forks | No one-command install · Source | |
| 502 | 66.871 | mcp-authentication-demomcp · back-end | A template for building MCP servers with optional per-tool authentication using WorkOS AuthKit and Vercel MCP adapter. | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | scopeblindmcp · other | MCP security gateway enforcing per-tool policies, rate limits, and approval gates with signed audit receipts. | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | n0zer0d4y-vulcan-file-opsmcp · other | Security-centric filesystem operations with enterprise-grade access controls and CVE protection | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | keyshade-mcpmcp · back-end | MCP server for interacting with Keyshade's secrets management platform, enabling secure retrieval and management of secrets via natural language. | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | dingtalkmcp · comms | Integrates with DingTalk messaging platform through webhook connections to send text messages, markdown content, and link cards with @mentions and… | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | firetix-vulnerability-intelligencemcp · database | Provides security professionals with comprehensive vulnerability intelligence tools for CVE lookup, CVSS calculation, exploit checking, and timeline… | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | peakmojo-zoom-noauthmcp · auth | Provides headless access to Zoom's API functionality for retrieving cloud recordings, meeting details, and transcripts without requiring direct user… | 9 stars · 4 forks | No one-command install · Source | |
| 502 | 66.871 | container-incmcp · devops | Enables seamless deployment of containerized applications directly from code editors through a three-step workflow of GitHub authentication… | 9 stars · 4 forks | No one-command install · Source | |
| 510 | 66.576 | ryanmac-twitter-clientmcp · back-end | Provides a TypeScript-based server for interacting with Twitter, enabling tweet operations, user profile management, and Grok AI integration through… | 29 stars | No commit datelisted | No one-command install · Source |
| 511 | 66.528 | mopanc-depguardmcp · database | Pre-install guardian for npm packages with static code analysis, supply-chain attack detection, vulnerability audit (npm + GitHub Advisory Database)… | 15 stars · 1 fork | No one-command install · Source | |
| 511 | 66.528 | gh-anthony-marcovecchio-prodlintmcp · otheralso listed as prodlint | Production readiness checks for vibe-coded apps with 52 security and performance rules. | 15 stars · 1 fork | No one-command install · Source | |
| 511 | 66.528 | serverless-mcp-servers-cdkmcp · back-end | Deploys a stateless MCP server on AWS Lambda and API Gateway using CDK, supporting Express.js or Hono implementations with bearer token authentication… | 15 stars · 1 fork | No one-command install · Source | |
| 515 | 66.258 | blackveil-dnsmcp · commsalso listed as madaburns-blackveil-dns | A DNS and email security scanner with 77 MCP tools for assessing SPF, DMARC, DKIM, DNSSEC, SSL/TLS, and more, providing guided remediation and attack… | 8 stars · 5 forks | No one-command install · Source | |
| 515 | 66.258 | tocharianou-elasticsearchmcp · observability | Integrates with Elasticsearch clusters (versions 5.x-9.x) for security-focused threat detection, anomaly analysis, incident investigation, and… | 8 stars · 5 forks | No one-command install · Source | |
| 515 | 66.258 | tenzirmcp · other | Integrates with Tenzir data pipelines and OCSF schema framework to execute cybersecurity data processing workflows and retrieve structured security… | 8 stars · 5 forks | No one-command install · Source | |
| 519 | 66.172 | trainual-tiptap-collaborationmcp · observability | Integrates with Tiptap Collaboration services to manage collaborative documents through CRUD operations, real-time statistics monitoring, content… | 11 stars · 2 forks | No one-command install · Source | |
| 519 | 66.172 | trxo-ldapmcp · search | Integrates with LDAP directories to enable search, retrieval, and management operations including user provisioning, entry modification, and automated… | 11 stars · 2 forks | No one-command install · Source | |
| 519 | 66.172 | kali-linux-mcp-servermcp · back-end | Provides Claude Desktop with access to Kali Linux penetration testing tools via a privileged Docker container, enabling network scanning (nmap), web… | 11 stars · 2 forks | No one-command install · Source | |
| 519 | 66.172 | sokratisvidros-clerk-authenticationmcp · back-end | Integrates with Clerk authentication to enable secure interactions with protected API routes and server actions for AI-driven operations. | 11 stars · 2 forks | No one-command install · Source | |
| 523 | 66.032 | agentgraph-co-agentgraphmcp · ai-agents | Trust verification and security scanning for AI agents. Checks security posture of third-party MCP servers and tools with signed attestations… | 4 stars · 6 forks | No one-command install · Source | |
| 523 | 66.032 | hello-adminmcp · auth | Create and manage Hellō authentication applications | 4 stars · 6 forks | No one-command install · Source | |
| 525 | 65.784 | gmail-multi-inbox-mcp-servermcp · auth | Enables AI assistants to manage multiple Gmail accounts simultaneously with built-in OAuth authentication, supporting email reading, sending, drafts… | 2 stars · 7 forks | No one-command install · Source | |
| 526 | 65.698 | mergenmcp · ai-agents | AI-Powered Red Team MCP Server enabling autonomous penetration testing via Model Context Protocol with 44+ security tools for AI agents. | 14 stars · 1 fork | No one-command install · Source | |
| 526 | 65.698 | threat-zonemcp · back-end | Integrates with the Threat.Zone API to provide malware analysis capabilities including static analysis, dynamic sandbox execution across multiple… | 14 stars · 1 fork | No one-command install · Source | |
| 526 | 65.698 | zukai-workosmcp · auth | Bridges AI models with the WorkOS API for enterprise-grade user management, organization control, and identity services through a clean interface that… | 14 stars · 1 fork | No one-command install · Source | |
| 529 | 65.543 | at-protocol-mcp-servermcp · back-end | Enables LLMs to interact with the AT Protocol ecosystem, including Bluesky, through natural language. Supports public data access without… | 9 stars · 3 forks | No one-command install · Source | |
| 529 | 65.543 | xplo8e-hacktricksmcp · search | Search and query HackTricks pentesting documentation with quick lookup and section extraction. | 9 stars · 3 forks | No one-command install · Source | |
| 529 | 65.543 | zazencodes-public-apismcp · back-end | Provides semantic search across a curated catalog of free public APIs using embedding-based natural language queries to help developers discover APIs… | 9 stars · 3 forks | No one-command install · Source | |
| 529 | 65.543 | secureannex-mcp-servermcp · back-end | A Model Context Protocol (MCP) server for analyzing browser extension security, providing tools for vulnerability detection, signature checking, code… | 9 stars · 3 forks | No one-command install · Source | |
| 533 | 65.223 | brucedh-aws-irevealmcp · devops | Integrates with AWS security services to enable incident response and investigation through CloudTrail logs, Athena queries, CloudWatch events… | 8 stars · 4 forks | No one-command install · Source | |
| 533 | 65.223 | prathamesh0901-zoommcp · back-end | Provides a bridge between Zoom API and virtual meeting management, enabling creation, updating, deletion, and fetching of meetings without navigating… | 8 stars · 4 forks | No one-command install · Source | |
| 533 | 65.223 | medsaad-mysql-db-navigatormcp · database | Enables direct access to MySQL/MariaDB databases for querying, schema exploration, and database management with comprehensive security measures… | 8 stars · 4 forks | No one-command install · Source | |
| 536 | 65.138 | binalyze-airmcp · back-end | Bridges to the Binalyze AIR digital forensics platform, enabling security teams to query endpoint data, monitor status, and manage investigations… | 7 stars · 5 forks | No one-command install · Source | |
| 536 | 65.138 | jikime-ko-weathermcp · back-end | Provides access to Korean weather data through asynchronous HTTP requests with coordinate conversion and API authentication capabilities. | 7 stars · 5 forks | No one-command install · Source | |
| 538 | 65.043 | geotab-ace-mcp-servermcp · back-end | Enables Claude to ask questions about your fleet data via the Geotab ACE AI service, with support for multi-account authentication, async queries, and… | 10 stars · 2 forks | No one-command install · Source | |
| 538 | 65.043 | usa-spending-mcp-servermcp · back-end | An MCP server for interacting with the USAspending.gov API, supporting local use with Claude Desktop and cloud deployment with login.gov… | 10 stars · 2 forks | No one-command install · Source | |
| 538 | 65.043 | sarkarsaurabh27-deskmatemcp · other | Enables remote control of your Mac through natural language commands, executing shell commands, managing files, and performing system operations with… | 10 stars · 2 forks | No one-command install · Source | |
| 538 | 65.043 | circl-cve-search-mcp-servermcp · back-end | A Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API, providing comprehensive vulnerability and security information. | 10 stars · 2 forks | No one-command install · Source | |
| 542 | 64.883 | eresussecurity-sentinelmcp · ai-agents | Security scanning platform for AI and LLM ecosystems with MCP proxy, schema validation, and 48+ security probes. | 13 stars · 1 fork | No one-command install · Source | |
| 542 | 64.883 | argus-mcpmcp · github-vcs | Enables AI-powered, zero-trust code review with multiple models, supporting single files, git diffs, and multiple files, with security, performance… | 13 stars · 1 fork | No one-command install · Source | |
| 542 | 64.883 | ilertmcp · back-end | Integrates with ilert's alerting and incident management platform to provide direct access to alerting workflows, incident data, and on-call… | 13 stars · 1 fork | No one-command install · Source | |
| 545 | 64.707 | nkcc-apk-mobsfmcp · other | Integrates with MobSF (Mobile Security Framework) to provide automated mobile application security analysis for APK, IPA, and APPX files with… | 23 stars | No commit datelisted | No one-command install · Source |
| 546 | 64.619 | fulcradynamics-fulcra-contextmcp · auth | Integrates with Fulcra Context personal data through OAuth2 authentication to retrieve health metrics, workout data, sleep cycles, location… | 6 stars · 5 forks | No one-command install · Source | |
| 546 | 64.619 | rad-security-mcp-servermcp · back-end | MCP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the… | 6 stars · 5 forks | No one-command install · Source | |
| 546 | 64.619 | ericrollei-download-toolsmcp · auth | Integrates gallery-dl, yt-dlp, and custom web scraping into ComfyUI workflows for downloading media from 1000+ platforms with browser authentication… | 6 stars · 5 forks | No one-command install · Source | |
| 546 | 64.619 | pinata-ipfsmcp · search | Integrates with Pinata's IPFS storage services for uploading, searching, organizing, and retrieving files on both public and private decentralized… | 6 stars · 5 forks | No one-command install · Source | |
| 546 | 64.619 | raistlin82-sap-odata-btpmcp · auth | Enterprise-enhanced SAP OData integration with modular authentication and Cloud Foundry deployment | 6 stars · 5 forks | No one-command install · Source | |
| 551 | 64.294 | web-security-scannermcp · browser | Enables automated web security testing for XSS and SQL injection vulnerabilities through Playwright-powered browser automation with screenshot capture… | 22 stars | No commit datelisted | No one-command install · Source |
| 552 | 64.192 | apk-security-guard-mcp-suitemcp · back-end | Integrates multiple Android APK security analysis tools into MCP standard APIs for automated static and dynamic analysis and vulnerability detection. | 11 forks | No one-command install · Source | |
| 552 | 64.192 | files-mcp-servermcp · auth | An MCP server for local testing that enables file management operations, requiring authentication via Microsoft identity platform credentials. | 11 forks | No one-command install · Source | |
| 554 | 64.134 | wrxck-redditmcp · auth | Java-based Reddit integration with OAuth authentication for browsing subreddits, searching posts, reading threads, submitting content, voting, and… | 12 stars · 1 fork | No one-command install · Source | |
| 554 | 64.134 | f-open-meteo-weathermcp · auth | Integrates with Open-Meteo API to provide current weather data retrieval with GitHub OAuth 2.0 authentication, location management for saving custom… | 12 stars · 1 fork | No one-command install · Source | |
| 556 | 63.952 | zendesk-mcp-servermcp · back-end | Enables AI-powered ticket analysis and comprehensive Zendesk API integration via the Model Context Protocol, supporting both API token (CLI) and OAuth… | 5 stars · 5 forks | No one-command install · Source | |
| 556 | 63.952 | deshartman-twilio-messagingmcp · auth | Enables sending SMS messages through the Twilio API with a simple tool that handles authentication and message delivery using provided Twilio… | 5 stars · 5 forks | No one-command install · Source | |
| 558 | 63.896 | schue-moqui-frameworkmcp · auth | Integrates with Moqui Framework business applications to provide entity operations, service execution, and search capabilities with session-based… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | ecosyste-msmcp · database | Queries package ecosystem data from ecosyste.ms across 30+ ecosystems including npm, PyPI, Maven, and Cargo, combining local SQLite database for fast… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | uni-mcp-gatewaymcp · back-end | A unified MCP gateway that aggregates multiple MCP servers and API plugins behind a single endpoint with authentication, rate limiting, audit logging… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | mrexodia-binary-refinerymcp · other | Provides access to Binary Refinery's malware analysis and reverse engineering toolkit for processing binary data, extracting artifacts from suspicious… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | yezere-codeql-n1ghtmcp · database | Integrates with CodeQL N1ght tool to provide automated Java application security analysis through environment setup, database creation from… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | cyber-sentinelmcp · devops | Aggregates threat intelligence from VirusTotal, AbuseIPDB, URLhaus, Shodan, ThreatFox, and MalwareBazaar to analyze security indicators, scan code and… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | ramuzes-jena-sparqlmcp · back-end | Provides a bridge between AI agents and Apache Jena for executing SPARQL queries, performing updates, and accessing RDF data stored in Jena Fuseki… | 8 stars · 3 forks | No one-command install · Source | |
| 558 | 63.896 | ajbrown-gmailmcp · auth | Integrates Gmail functionality to enable secure access, search, and analysis of email contents using OAuth2 authentication and the Gmail API. | 8 stars · 3 forks | No one-command install · Source | |
| 566 | 63.694 | ruslanmv-webclonemcp · auth | Website cloning engine with intelligent crawling, asset downloading, PDF generation, authentication support, and dynamic content rendering for website… | 9 stars · 2 forks | No one-command install · Source | |
| 566 | 63.694 | angr-mcpmcp · other | Exposes angr binary-analysis capabilities (symbolic execution, taint analysis, CFG recovery) as MCP tools for vulnerability exploration and exploit… | 9 stars · 2 forks | No one-command install · Source | |
| 566 | 63.694 | openfga-modeling-mcp-servermcp · back-end | A specialized MCP server that provides expert-level OpenFGA authorization modeling guidance, enabling users to create and manage authorization models… | 9 stars · 2 forks | No one-command install · Source | |
| 566 | 63.694 | mintmcp-gmailmcp · auth | Enterprise-grade Gmail integration with governance controls and OAuth authentication | 9 stars · 2 forks | No one-command install · Source | |
| 566 | 63.694 | secure-embedding-mcp-servermcp · back-end | Provides secure text embeddings with privacy-preserving features using the Mirror SDK, supporting operations like embedding, masking, and analysis… | 9 stars · 2 forks | No one-command install · Source | |
| 571 | 63.439 | kevinrabun-judgesmcp · other | Evaluates AI-generated code for security, cost, and quality with AST analysis. | 7 stars · 4 forks | No one-command install · Source | |
| 571 | 63.439 | ansible-mcp-servermcp · devops | Enables AI assistants to manage infrastructure using Ansible and Terraform with 58 tools for playbooks, provisioning, security scanning, and more. | 7 stars · 4 forks | No one-command install · Source | |
| 571 | 63.439 | normal-coder-giteemcp · github-vcs | Integrates with Gitee repositories to enable repository creation, code management, issue tracking, and pull request workflows using a simple… | 7 stars · 4 forks | No one-command install · Source | |
| 574 | 63.429 | bishopfox-otto-supportmcp · back-end | Deliberately vulnerable customer support MCP server for security research and MCP penetration testing practice. | 20 stars | No one-command install · Source | |
| 575 | 63.269 | mcp-gcloud-adc-proxymcp · back-end | An auth proxy that forwards requests to remote MCP servers, attaching Google Cloud ADC tokens for authentication. It enables secure access to… | 2 stars · 6 forks | No one-command install · Source | |
| 576 | 63.155 | codeatlas-ai-mcp-servermcp · back-end | Transforms codebases into a living knowledge graph with AI-powered code analysis, security scanning, and persistent semantic memory, leveraging Oracle… | 11 stars · 1 fork | No one-command install · Source | |
| 576 | 63.155 | hs-sql-agentmcp · ai-agents | C# SQL Agent MCP server featuring raw SQL input, strict AST validation, and an embedded Admin UI. Eliminates LLM hallucinations and security risks… | 11 stars · 1 fork | No one-command install · Source | |
| 576 | 63.155 | neverinfamous-dbmcp · database | Provides secure database access across SQLite, PostgreSQL, MySQL, MongoDB, Redis, and SQL Server with OAuth 2.0 authentication and granular… | 11 stars · 1 fork | No one-command install · Source | |
| 576 | 63.155 | memorygatemcp · auth | Provides durable memory for AI agents with structured storage, semantic search, OAuth authentication, and lifecycle controls. | 11 stars · 1 fork | No one-command install · Source | |
| 576 | 63.155 | ida-pro-mcp-multimcp · other | Extends IDA Pro with multi-instance support and vulnerability scanning for AI-assisted reverse engineering. | 11 stars · 1 fork | No one-command install · Source | |
| 581 | 63.003 | you922-telegrammcp · auth | Integrates with Telegram through multiple authentication methods including QR code, phone number, and web-based login flows to enable comprehensive… | 19 stars | No commit datelisted | No one-command install · Source |
| 582 | 62.857 | speclock-ai-constraint-enginemcp · ai-agents | AI Constraint Engine with AI Patch Firewall. 42 MCP tools. Patch Gateway (ALLOW/WARN/BLOCK verdicts), diff-native review (10 scored signals, hard… | 3,558 installs | No commit datelisted | No one-command install · Source |
| 583 | 62.111 | jignesh-ponamwar-skillsmcp · ai-agents | Self-hostable MCP server providing a semantically-searchable agent skills registry with progressive disclosure and security scanning. | 7 stars · 3 forks | No one-command install · Source | |
| 583 | 62.111 | web-auditmcp · back-end | Provides web-based security audit capabilities for Node.js projects by scanning package.json files, running npm audit commands, and generating… | 7 stars · 3 forks | No one-command install · Source | |
| 583 | 62.111 | keyfactor-research-commandmcp · search | Integrates with Keyfactor Command PKI platform to enable certificate enrollment, revocation, and search operations while combining Risk Intelligence… | 7 stars · 3 forks | No one-command install · Source | |
| 583 | 62.111 | gabbo01-zeekmcp · observability | Provides a bridge between Zeek network security monitor and language models for executing PCAP file analysis, log parsing, and converting tabular… | 7 stars · 3 forks | No one-command install · Source | |
| 583 | 62.111 | ch1nhpd-pentest-toolsmcp · database | Enables AI to perform comprehensive penetration testing and security assessments on web applications and networks using tools like Nmap, SQLMap, and… | 7 stars · 3 forks | No one-command install · Source | |
| 588 | 62.046 | halo-gemma-by-googlemcp · back-end | An MCP server providing AI-powered cybersecurity, penetration testing, reconnaissance, vulnerability assessment, and security automation tools through… | 8 stars · 2 forks | No one-command install · Source | |
| 588 | 62.046 | cobuterman-eclass-uoamcp · auth | Integrates with Open eClass platform to enable course access and management through UoA's SSO authentication system, providing tools for login, course… | 8 stars · 2 forks | No one-command install · Source | |
| 588 | 62.046 | cyberedumcp · devops | Integrates with the CyberEdu CTF platform to provide access to cybersecurity challenges, contests, file downloads, service deployment, flag… | 8 stars · 2 forks | No one-command install · Source | |
| 588 | 62.046 | chrome-mcp-server-security-hardenedmcp · back-endalso listed as pantheon-security-chrome-secure | Enterprise-grade Chrome automation for AI agents with compliance-ready logging, post-quantum encryption, and SIEM integration. | 8 stars · 2 forks | No one-command install · Source | |
| 588 | 62.046 | ducthinh993-endoflifemcp · back-end | Integrates with the endoflife.date API to provide software end-of-life status checks for dependency management, security auditing, and upgrade… | 8 stars · 2 forks | No one-command install · Source | |
| 588 | 62.046 | nist-nvd-mcp-servermcp · back-end | Enables AI agents to search, retrieve, and analyze vulnerability data from the NIST National Vulnerability Database through a comprehensive Model… | 8 stars · 2 forks | No one-command install · Source | |
| 595 | 62.026 | gitlab-apimcp · back-end | MCP server for interacting with GitLab API, supporting dynamic tool selection and enterprise-grade security. | 10 stars · 1 fork | No one-command install · Source | |
| 595 | 62.026 | mag-cie-microsoft-todomcp · auth | Unofficial Microsoft To Do integration via Microsoft Graph with MSAL device code authentication. | 10 stars · 1 fork | No one-command install · Source | |
| 595 | 62.026 | dida-mcp-servermcp · auth | Enables AI assistants to manage TickTick/Dida365 tasks, projects, and tags through the MCP protocol, with features for GTD-based task organization and… | 10 stars · 1 fork | No one-command install · Source | |
| 598 | 61.891 | thales-ciphertrust-data-security-platform-cakm-mcp-servermcp · database | Enables AI assistants to manage database encryption key operations and Transparent Data Encryption (TDE) for SQL Server and Oracle databases via… | 3 stars · 5 forks | No one-command install · Source | |
| 599 | 61.482 | fabric-admin-mcp-servermcp · back-end | Provides MCP tools to manage Microsoft Fabric capacities, including listing, creating, updating, and deleting them, using Azure authentication. | 9 forks | No one-command install · Source | |
| 600 | 61.362 | microsoft-github-advisory-mcp-servermcp · back-end | Enables querying GitHub Security Advisories from a local cloned advisory database using tools like list_advisories and get_advisory. | 6 stars · 4 forks | No one-command install · Source |
Score colour shows how many signals stand behind it, never how good it is: amber, three or more; dimmer amber, two; grey, one. The Evidence column names them.
Stars, forks and last commit are as GitHub reported them when Armory last read each repository: for most, or later. A repository may have changed since.