Security & Testing MCP Servers
Compare the best open-source MCP servers for security & testing. Scanners, pentest helpers and test automation. Ranked by GitHub stars, with install commands, what each one can touch and scan reports where available.
MCPSecBench
MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols
Claude Security Skills
25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.
Mcpflo
A visual testing tool for MCP (Model Context Protocol) servers — connect, browse capabilities, and inspect tools, resources, and prompts. Think Bruno, but for MCP.
Platform
The approval and accountability layer for agentic AI. Identity → Policy → Approval → Trace. Try: npx sidclaw-demo
MCP Box
Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.
Agentleak
Open-source privacy testing for AI agents. Python SDK, CLI and MCP tools to detect data leaks across tool calls, memory, inter-agent messages and logs, with redacted reports and CI gates.
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
MCP Scribe
Point it at an OpenAPI schema. Get an MCP server.
ToolMesh
Self-hosted MCP gateway with authorization, credential injection, audit logging, and output policies. Includes DADL — describe REST APIs as MCP tools in YAML.
List refreshed November 15, 2026. Data comes from public GitHub repositories.