使用说明
Awesome Secure MCP Servers
Secure Model Context Protocol (MCP) servers with automated security validation, vulnerability scanning, and tool poisoning detection. Browse 16+ vetted MCP servers for building secure agentic AI systems.
🛡️ Security-First MCP Server Directory
Find secure MCP servers for your agentic AI applications with confidence. Model Context Protocol is the USB-C of building agentic systems - providing standardized, secure connections between AI agents and external tools. Each server undergoes automated security scanning including dependency vulnerability checks, static analysis, and MCP-specific threat detection (tool poisoning, cross-origin attacks).
🚀 Quick Start
- Browse servers by category below
- Check security status - look for 🛡️ Verified Secure or ⚠️ Conditional ratings
- Review scores - higher scores indicate better security posture
- Follow repository links for installation instructions
📊 Security Status Legend
- 🛡️ Verified Secure (85-100): Comprehensive validation passed
- ⚠️ Conditional (70-84): Secure with specific configuration requirements
- ⏳ Awaiting Scan: Repository currently inaccessible for scanning
- ❌ Not Recommended (0-49): Known security issues
📚 Table of Contents
- 🏢 Official Servers - Anthropic-maintained MCP servers
- 🏭 Enterprise Servers - Company-backed integrations
- 🛡️ Security Tools - Cybersecurity & vulnerability scanning
- 👥 Community Servers - Open source community projects
- 🔄 Under Review - Servers currently being assessed
- 📖 About This Project - Methodology & contributing
Security Status by Category
Last Updated: 2026-10-26 06:03 UTC
Total Servers: 16
Official Servers
| Server | Version | Security Status | Description |
|---|---|---|---|
| Everything (Reference Server) | 0.5.0 | 🛡️ Verified Secure (📊 Score: 94/100) | Reference server demonstrating all MCP features |
| Fetch Server | 0.3.2 | 🛡️ Verified Secure (📊 Score: 94/100) | Web content fetching and conversion for efficient LLM usage |
| Filesystem Server | 0.4.1 | 🛡️ Verified Secure (📊 Score: 94/100) | Secure file operations with configurable access controls |
| Git Server | 0.2.1 | 🛡️ Verified Secure (📊 Score: 94/100) | Tools to read, search, and manipulate Git repositories |
| Memory Server | 0.1.3 | 🛡️ Verified Secure (📊 Score: 94/100) | Persistent memory using a local knowledge graph |
| Sequential Thinking Server | 0.1.0 | 🛡️ Verified Secure (📊 Score: 94/100) | Dynamic and reflective problem-solving through thought sequences |
| Time Server | 0.1.2 | 🛡️ Verified Secure (📊 Score: 94/100) | Time and timezone conversion capabilities |
Enterprise Servers
| Server | Version | Security Status | Description |
|---|---|---|---|
| AWS MCP Server | 1.2.0 | 🛡️ Verified Secure (📊 Score: 92/100) | AWS service integration with IAM controls |
| Docker Server | 1.5.2 | 🛡️ Verified Secure (📊 Score: 91/100) | Docker container management with security controls |
| GitHub MCP Server | 1.0.0 | ⚠️ Conditional (📊 Score: 80/100) | GitHub's official MCP Server for repository management |
| Notion MCP Server | 0.3.1 | ⚠️ Conditional (📊 Score: 74/100) | Notion official MCP server for workspace integration |
| Stripe MCP Server | 0.2.0 | 🛡️ Verified Secure (📊 Score: 89/100) | Interact with Stripe API for payments and financial data |
Security Tools
| Server | Version | Security Status | Description |
|---|---|---|---|
| Nuclei Security Scanner | 0.2.0 | 🛡️ Verified Secure (📊 Score: 92/100) | Template-based vulnerability scanner with extensive security checks |
Community Servers
| Server | Version | Security Status | Description |
|---|---|---|---|
| PostgreSQL MCP Server | 0.4.2 | 🛡️ Verified Secure (📊 Score: 86/100) | PostgreSQL database operations and query execution |
| Slack MCP Server | 1.0.3 | ⚠️ Conditional (📊 Score: 77/100) | Slack workspace integration for messaging and collaboration |
Under Review
| Server | Version | Security Status | Description |
|---|---|---|---|
| Anthropic Computer Use | 0.1.0 | ⏳ Awaiting Scan | Desktop automation with screen capture and input control |
📊 Detailed Security Assessments
Click on server scores above to jump to detailed security breakdowns:
AWS MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 6 configuration file(s)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 70/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 0 potential issues found
- Bandit completed but output could not be parsed
Docker Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Everything (Reference Server) Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Fetch Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Filesystem Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Git Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
GitHub MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 1 configuration file(s)
📦 Third-Party Dependencies: 50/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- Go dependency scanning not yet implemented
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
Memory Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Notion MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 40/100 ❌ Scans package.json, requirements.txt, etc. for known CVEs
❌ 36 critical issues found
- Found 36 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
Nuclei Security Scanner Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 1 configuration file(s)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
PostgreSQL MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 50/100 ❌ Static analysis for common security vulnerabilities in source code
❌ 11 critical issues found
- Found 11 critical security issue(s)
Sequential Thinking Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
Slack MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 50/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- Go dependency scanning not yet implemented
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
Stripe MCP Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 5 configuration file(s)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 50/100 ❌ Static analysis for common security vulnerabilities in source code
❌ 5 critical issues found
- Found 5 critical security issue(s)
Time Server Security Assessment
Security Assessment: 2026-10-26
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ✅ Scans package.json, requirements.txt, etc. for known CVEs
✅ No issues found
- No vulnerabilities found in NPM dependencies
🐛 Code Security Analysis: 85/100 ⚠️ Static analysis for common security vulnerabilities in source code
⚠️ 1 potential issues found
- Found 1 critical security issue(s)
