best of · updated August 2026

The 15 best security MCP servers

The 15 security MCP servers worth your time, out of 1,056 we track - actively maintained, with real adoption, ranked on monthly installs, GitHub stars, and commit recency. Checked nightly.

Security MCP servers assist with scanning, secrets hygiene, or policy checks. Verify scope of write actions and that the project is actively maintained before granting access.

01 Snyk MCP Server ★ 54 · commit 2026-08-19 Easily find and fix security issues in your applications leveraging Snyk platform capabilities. 2,811,260 installs/mo · 10+ releases/90d · no env vars documented $ npx -y snyk 02 HOL Guard ★ 470 · commit 2026-08-25 HOL Guard brings antivirus-style runtime protection to AI agents. 82,400 installs/mo · no env vars documented $ uvx hol-guard 03 CrowdStrike Falcon MCP Server ★ 239 · commit 2026-08-24 falcon-mcp is a Model Context Protocol (MCP) server that connects AI agents with the CrowdStrike Falcon platform, powering intelligent security analysis in your agentic workflows. 41,675 installs/mo · 8 releases/90d · needs 3 env vars $ uvx falcon-mcp 04 Auth0 MCP Server ★ 113 · commit 2026-08-13 📚 Documentation • 🚀 Getting Started • 💻 Supported Tools • 💬 Feedback. 21,118 installs/mo · 24 tools documented · needs 1 env var $ npx -y @auth0/auth0-mcp-server 05 Observatory ★ 174 · commit 2026-08-24 MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF. 7,145 installs/mo · 10+ releases/90d · needs 2 env vars $ npx -y @kryptosai/mcp-observatory 06 Agent Security Scanner MCP ★ 121 · commit 2026-08-12 Security scanner for AI coding agents, MCP servers, prompts, and AI-suggested packages. 6,479 installs/mo · 3 releases/90d · no env vars documented $ npx -y agent-security-scanner-mcp 07 Decionis MCP Server ★ 533 · commit 2026-08-24 Fail-closed policy gate for AI agent actions, with local evaluation and native pre-tool hooks. 559 installs/mo · 3 releases/90d · no env vars documented $ npx -y @decionis/mcp 08 Wireshark MCP ★ 209 · commit 2026-08-16 Give your AI assistant a packet analyzer. 2,088 installs/mo · 1 release/90d · needs 1 env var $ uvx wireshark-mcp 09 Agent Bom ★ 31 · commit 2026-08-25 Security scanner and graph for agentic infrastructure - agents, MCP, runtime, and blast radius. 3,115 installs/mo · 10+ releases/90d · no env vars documented $ uvx agent-bom 10 Thumb Gate ★ 26 · commit 2026-08-23 Self-improving pre-action firewall for AI coding agents AI coding agents repeat mistakes - and one wrong tool call can wipe a directory, leak a key, or push broken code. 3,319 installs/mo · 10+ releases/90d · no env vars documented $ npx -y thumbgate 11 Stdio ★ 8 · commit 2026-08-23 Stdio-to-HTTP gateway - connects MCP clients to remote HTTP MCP servers 6,493 installs/mo · 10+ releases/90d · needs 2 env vars $ uvx mcp-stdio 12 Code Inspectus ★ 43 · commit 2026-08-25 A local-first, privacy-preserving security MCP server and CLI. 2,155 installs/mo · 7 tools documented · 10+ releases/90d · no env vars documented $ npx -y codeinspectus 13 Server Scf ★ 2 · commit 2026-08-22 Security compliance controls, frameworks, and risk management for AI agents. 5,762 installs/mo · 10+ releases/90d · needs 2 env vars $ npx -y mcp-server-scf 14 Conarium ★ 2 · commit 2026-08-24 Governed database access for AI assistants: masking, signed receipts, coverage reconciliation. 6,651 installs/mo · 10+ releases/90d · needs 4 env vars $ npx -y @conarium-ai/core 15 Sapiom MCP Server ★ 18 · commit 2026-08-24 TypeScript SDK for building, running, and operating AI agents on Sapiom. 1,898 installs/mo · 10+ releases/90d · no env vars documented $ npx -y @sapiom/mcp

How to choose between them

Snyk MCP Server tops the list - the most installs (2,811,260 last month) and actively maintained. 1 of these 15 offers a remote endpoint (no local process to run); the rest are local stdio servers. 8 document no required env vars - paste the config and go; the others need env vars set first (each page lists exactly which). Where we've compared two of these head-to-head, the comparison is linked on each one's page.

Quick answers

Which security MCP server is most installed?

Snyk MCP Server, with 2,811,260 installs in the last month (as of August 2026). By GitHub stars the leader is Decionis MCP Server (533).

How many security MCP servers exist?

We track 1,056 security MCP servers in the official registry. The 15 above are the actively-maintained ones with real adoption - ranked by monthly installs, GitHub stars, and commit recency.

All 176 security MCP servers

Ranked 16 onward, same order as above. Status checked last night.

How this list is ranked

Ranked from live registry + GitHub data: monthly installs (npm/PyPI), GitHub stars, and commit recency - recomputed nightly. No pay-to-rank, ever. The 15 above lead the full list of 176, all of which you can see on this page. The other 880 we track have stopped being maintained, or nobody is using them yet. Full recipe: how we verify.