Best security MCP servers (October 2026)
Scanning, threat intel and identity tools for security work.
Updated 2026-10-18 · live checks of 45,084 servers · How we rank
Top picks
| # | Server | Status | Sign-in | Tools | Trust | |
|---|---|---|---|---|---|---|
| 1 | Snyk Snyk · Official | Local install | No auth | — | A | All Snyk servers |
| 2 | VirusTotal VirusTotal · Official | Live · sign-in | OAuth sign-in | — | A | All VirusTotal servers |
| 3 | Shodan Internetdb Shodan · Community | Live | No auth | — | B | All Shodan servers |
| 4 | 1Password 1Password · Community | Local install | API key | — | C | All 1Password servers |
| 5 | Auth0 MCP Server Auth0 · Official | Local install | No auth | — | A | All Auth0 servers |
| 6 | GitHub GitHub · Official | Live · sign-in | OAuth sign-in | — | A | All GitHub servers |
More live servers, ranked by trust
| Server | Status | Sign-in | Tools | Trust |
|---|---|---|---|---|
| OpenWork MCP Gateway | Live · sign-in | OAuth sign-in | — | A |
| Surf | Live | No auth | 1 | A |
| Vaaya | Live | No auth | 14 | B |
| WorkOS | Live · sign-in | OAuth sign-in | — | B |
| TracePass DPP Compliance Assistant | Live | API key | 9 | B |
| Microsoft Sentinel Data Exploration | Live · sign-in | OAuth sign-in | — | B |
| Dechonet | Live | No auth | 30 | B |
| emisar | Live · sign-in | OAuth sign-in | — | B |
| Tailscale MCP by usefulapi | Live | No auth | 22 | B |
| Castle MCP by usefulapi | Live | No auth | 14 | B |
| Basis Theory MCP by usefulapi | Live | No auth | 17 | B |
| Compliance Check | Live | No auth | 8 | B |
| Agent Broker | Live | API key | 23 | B |
| Retro Diffusion Pixel Art | Live | API key | 33 | B |
| Decionis | Live · sign-in | OAuth sign-in | — | B |
| US compliance and books health | Live | No auth | 12 | B |
| SentinelX MCP | Live · sign-in | OAuth sign-in | — | B |
| WHOOP — MissingMCP | Live · sign-in | API key | — | B |
| Thoughtspot | Live · sign-in | OAuth sign-in | — | B |
| Sputnik X — AI-Agent-Native Intelligence | Live | No auth | 17 | B |
| MAC Address Lookup | Live | No auth | 1 | B |
| VPSnet | Live · sign-in | OAuth sign-in | — | B |
| TehProf Support | Live · sign-in | OAuth sign-in | — | B |
| Moltline Agent Governance | Live | No auth | 8 | B |
| Acp MCP Server | Live · sign-in | OAuth sign-in | — | B |
| VITNA – Containment for rogue AI agents | Live | API key | 23 | B |
| APICK Business | Live | API key | — | B |
| Catalyst Edge MCP | Live | No auth | 7 | B |
| Odoo | Live · sign-in | OAuth sign-in | — | B |
| Booking | Live | No auth | 10 | B |
What are the best security mcp servers?
Snyk, VirusTotal, Shodan Internetdb, based on search demand and canmyaiuse live checks on 2026-10-18.
How is this list ranked?
Our picks follow real search demand for each app's MCP server, then we choose the best live server for that app (official first). The second list ranks every other live server by trust score: uptime, verified publisher, maintenance, adoption and transparency.
Can I pay to be on this list?
No. Rankings and grades can't be bought. Sponsored slots are always labeled Featured and sit outside the ranking.
Build one of these? Add the free live badge or get featured.