Best MCP servers for security.
ahel's catalog files 146 MCP servers under Security. This list ranks 25 of them by GitHub stars, with the ones named for security first. The top three are agent-security-scanner-mcp, notebooklm-mcp-secure and android-security-analyzer. They come from 23 different publishers. 19 of the 25 have GitHub stars on record, and openwork has the most, 23,820. 8 of the 25 show weekly downloads, and mcp-ssh-manager leads with 3,075 a week. 6 are published by the vendor itself and 19 by the community. 13 of the 25 work through ahel today, so one connection brings them to Claude, ChatGPT and Ahel Desktop. 21 of the 25 had a commit in the last 90 days. Each row links to the item's own page, with its install steps and safety review.
25 results
| # | Name | Stars | Downloads a week | Publisher | Use in |
|---|---|---|---|---|---|
| 1 | agent-security-scanner-mcpLets your agent check AI inputs for prompt injection, flag fake packages, and scan for vulnerabilities. | 122 | 678 | Communitysinewaveai | Not served yet |
| 2 | notebooklm-mcp-secureLets your agent work with Google NotebookLM notebooks through an encrypted connection. | 85 | 106 | Communitypantheon-security | Not served yet |
| 3 | android-security-analyzerLets your agent scan Android app source code for security problems. | 2 | none | Communityako2345 | ClaudeChatGPTAhel Desktop |
| 4 | security-recipesGives your agent read-only access to security vulnerability info, fix playbooks, and setup guides. | 2 | none | Communitystevologic | ClaudeChatGPTAhel Desktop |
| 5 | cve-intelligenceLets your agent look up CVE vulnerabilities, exploitation likelihood, detection coverage, and fixed versions. | none | none | Official | ClaudeChatGPTAhel Desktop |
| 6 | cve-vulnerability-lookupLets your agent check software vulnerabilities by looking up CVEs and auditing project dependencies. | none | none | Officialdatakoot | ClaudeChatGPTAhel Desktop |
| 7 | Helixar SecurityScans installed agent tools for security problems and audits their updates. | none | none | Officialhelixar-ai | ClaudeChatGPTAhel Desktop |
| 8 | injection-detectorChecks text your agent receives for hidden prompt-injection attempts before acting on it. | none | none | Communityviridis-security | ClaudeChatGPTAhel Desktop |
| 9 | security-preflightStatic MCP, source-code and injection-indicator checks with redacted signed receipts. | none | none | Communityjdhart81 | ClaudeChatGPTAhel Desktop |
| 10 | SKUit Network & Security CatalogLets your agent compare and pick network and security products from vendors like Cisco, Arista and Juniper. | none | none | Official | ClaudeChatGPTAhel Desktop |
| 11 | openworkConnects your agent to an organization's shared skills, workflows, and connected apps. | 24k | none | Officialdifferent-ai | ClaudeChatGPTAhel Desktop |
| 12 | notfairLets your agent sign in securely to services like Google, Meta, X, LinkedIn and Reddit using OAuth. | 4k | none | Communitynowork-studio | ClaudeChatGPTAhel Desktop |
| 13 | skylosLets your agent scan Python, TypeScript, and Go code for dead code, security issues, and leaked secrets. | 841 | none | Communityduriantaco | Not served yet |
| 14 | hol-guardLets your agent record security evidence and request approvals locally before taking sensitive actions. | 675 | none | Communityhashgraph-online | Not served yet |
| 15 | sonarqube-mcp-serverLets your agent check code quality and find security issues using SonarQube. | 655 | none | Communitysonarsource | Not served yet |
| 16 | mcp-ssh-managerLets your agent connect to servers over SSH and run commands, with safety modes limiting each server to read-only access. | 495 | 3k | Communitybvisible | Not served yet |
| 17 | wireshark-mcpLets your agent capture and analyze network traffic to spot security issues. | 274 | none | Communitybx33661 | Not served yet |
| 18 | openclaw-mcpLets your agent connect to a self-hosted OpenClaw security platform using OAuth sign-in. | 185 | 201 | Communityfreema | Not served yet |
| 19 | Taskade MCPLets your agent create and manage projects, tasks, and notes in Taskade workspaces. | 166 | none | Communitytaskade | ClaudeChatGPTAhel Desktop |
| 20 | virustotalLets your agent check files, URLs, and IPs for malware and security threats using VirusTotal data. | 149 | 827 | Communityburtthecoder | Not served yet |
| 21 | mcp-observatoryLets your agent scan its tool connections for security issues, simulate attacks, and report results. | 140 | 2k | Communitykryptosai | Not served yet |
| 22 | shellwardLets your agent scan its own actions and data for prompt injection, personal info leaks, and unsafe commands. | 139 | 487 | Communityjnmetacode | Not served yet |
| 23 | dvalincodeLets your agent scan code for security issues and verify offline that a fix worked. | 120 | 85 | Communityarthurpanhku | Not served yet |
| 24 | vibeprospectingLets your agent look up B2B companies and contacts to build lead lists and enrich prospect data. | 96 | none | Communityexplorium-ai | ClaudeChatGPTAhel Desktop |
| 25 | coach-wattsLets your agent access your training, nutrition, wellness, and performance data securely. | 93 | none | Officialhdkiller | ClaudeChatGPTAhel Desktop |