133 MCP ServersFree scan on submit

Security & Testing MCP Servers

Compare the best open-source MCP servers for security & testing. Scanners, pentest helpers and test automation. Ranked by GitHub stars, with install commands, what each one can touch and scan reports where available.

AllCoding AgentsDeveloper ToolsData Science & MLProductivity & WorkflowResearch & AnalysisBrowser AutomationWeb Scraping & DataDatabase ManagementSecurity & TestingDeployment & DevOpsCloud InfrastructureDesign & MediaContent & WritingMarketing AutomationFinance & TradingCommunicationSEO & AI SearchSocial MediaJob Search & CareersSales & CRME-commerceCrypto & Web3Gaming & Game DevSmart Home & IoTLearning ResourcesOther

Reverify

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.

Security & Testing Scanned 1.3k

Reticle

AI agents can generate code, but still struggle to understand what they build. Reticle brings Jev-style machine-native runtime perception to web & desktop applications.

Security & Testing Not scanned yet 1.3k

Intelligent Audit System

AuditPilot: auditable enterprise AI agents for evidence-grounded workflows, governed tools, evaluation harnesses, human review, and remediation delivery.

Security & Testing Not scanned yet 1.2k

Squadra

Coordinate Claude, Codex and Cursor windows with shared tasks, acknowledgements, prechecks, parallel tests, source-bound proofs and independent review. Built-in skills recall lessons, simplify code and forecast work. Track progress, decisions and evidence in a bilingual local dashboard, with MCP plugins. Browse skills and verified security audits.

Security & Testing Scanned 1.2k

MCP Scanner

Scan MCP servers for potential threats & security findings.

Security & Testing Scanned 1.1k

Agentic Radar

A security scanner for your LLM agentic workflows

Security & Testing Scanned 1.1k

Wassette

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Security & Testing Scanned 972

Ship Safe

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

Security & Testing Scanned 870

MCP Kali Server

MCP configuration to connect AI agent to a Linux machine.

Security & Testing Scanned 867

Numasec

The AI Agent for Cyber Security.

Security & Testing Scanned 827

Sonarqube MCP Server

Official SonarQube MCP Server for code quality and security in AI agents

Security & Testing Not scanned yet 677

Aletheore

Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

Security & Testing Scanned 664

Vestige

Think before doing, prove before saving. Vestige is the local-first cognitive operating system and deterministic safety kernel for autonomous AI agents. Powered by FSRS-6 causal graph memory, cryptographic Merkle-chained state ledgers, and out-of-band kernel gates bringing frontier PhD reasoning to local silicon with zero cloud token tax.

Security & Testing Scanned 659

Emilia Protocol

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

Security & Testing Scanned 602

Adrian

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

Security & Testing Scanned 589

Agent Opfor

Open-source adversary emulation for AI agents and MCP servers.

Security & Testing Not scanned yet 584

Mitsu

Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)

Security & Testing Scanned 537

MCP Ssh Manager

MCP server for SSH: let Claude Code, Codex and any MCP client run commands, transfer files and manage servers over SSH, with human approval, an encrypted vault and a live audit trail. Desktop app and CLI included.

Security & Testing Scanned 530

Darknet MCP Server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

Security & Testing Not scanned yet 523

Blitzstrike

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

Security & Testing Scanned 515

Cordum

The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.

Security & Testing Not scanned yet 510

Mcpmark

MCPMark is a comprehensive, stress-testing MCP benchmark designed to evaluate model and agent capabilities in real-world MCP use.

Security & Testing Scanned 470

AgentHound

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

Security & Testing Scanned 456

Laradashboard

⚡ Lara Dashboard - CMS by Laravel - All In One solution to start your Laravel Application from Basic to Enterprise. Manages Users, Roles, Permissions, Modules, Settings, Translations, Contents, Monitoring and every actions of your Laravel application. Complete solution for Laravel application with Tailwind, Livewire, Rest API, Unit-Tests and more.

Security & Testing Scanned 418

List refreshed November 15, 2026. Data comes from public GitHub repositories.