Security MCP servers

ida-pro-mcp

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

hexstrike-ai

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

ghidra-mcp

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.

mcp-router

MCP Router — development, support and security updates ended 2026-09-18. Historical source and final release for existing users.

OpenOSINT

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

reverify

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.

open-reverselab

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

wassette

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

reverse-engineering-assistant

MCP server for reverse engineering tasks in Ghidra 👩‍💻

ida-mcp-rs

Headless IDA Pro MCP Server

GhidrAssistMCP

An native MCP server extension for Ghidra

apktool-mcp-server

A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)

sonarqube-mcp-server

Official SonarQube MCP Server for code quality and security in AI agents

cti-expert

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

ai-security-tool

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

mcp-security

awesome-osint-mcp-servers

🔌 A curated list of OSINT MCP servers. Pull requests are welcomed!

blitzstrike

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

lunar

lunar.dev: Agent native MCP Gateway for governance and security

AIS CVE Priorities — daily exploit-ranked patch list for AI agents

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

ai.aliengiraffe/spotdb

Ephemeral data sandbox for AI workflows with guardrails and security

Arketo

Draw your app's architecture on a live canvas and flag the bottlenecks and security gaps.

Cybret findings

Validated API and app vulnerability findings with remediation guidance.

awesome-mcp-security

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

mcpcan

MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment method. The platform supports container monitoring and MCP service token verification, solving security risks and enabling rapid deployment of MCP services. It uses SSE, STDIO, and STREAMABLEHTTP access protocols to deploy MCP。

BloodHound-MCP-AI

BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.

Qu1cksc0pe

All-in-One malware analysis tool.