Best MCP servers for security research (2026)

These are the 30 most popular open-source MCP servers for security research, ranked by GitHub stars. Each one links to a page with repository details, install configs where available, and related servers.

mcp-for-beginners ★17444 – This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-langua
ida-pro-mcp ★12870 – AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
hexstrike-ai ★12793 – HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+
lamda ★8607 – Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MIT
ghidra-mcp ★5626 – Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading,
js-reverse-mcp ★2951 – AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。
jadx-ai-mcp ★2900 – Plugin for JADX to integrate MCP server
Qu1cksc0pe ★2084 – All-in-One malware analysis tool.
jshookmcp ★2046 – A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP serve
OpenOSINT ★1753 – AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models.
cheatengine-mcp-bridge ★1644 – Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and me
LitterBox ★1550 – A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an
reverify ★1288 – Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth w
open-reverselab ★1262 – Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/
wassette ★965 – Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
reverse-engineering-assistant ★874 – MCP server for reverse engineering tasks in Ghidra 👩‍💻
MCP-Kali-Server ★847 – MCP configuration to connect AI agent to a Linux machine.
jadx-mcp-server ★802 – MCP server for JADX-AI Plugin
unbrowse ★791 – Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
GhidrAssistMCP ★773 – An native MCP server extension for Ghidra
mcpcan ★728 – MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment m
apktool-mcp-server ★672 – A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
sonarqube-mcp-server ★664 – Official SonarQube MCP Server for code quality and security in AI agents
rustunnel ★659 – Self-hosted, secure tunnel server in Rust. Expose local HTTP/HTTPS/TCP/UDP services to the public internet via TLS-encry
cti-expert ★611 – CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79
agent-opfor ★583 – Open-source adversary emulation for AI agents and MCP servers.
mcp-security ★532 –
blitzstrike ★508 – Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before re
lunar ★504 – lunar.dev: Agent native MCP Gateway for governance and security
iam-policy-autopilot ★493 – IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies

Frequently asked questions

What is an MCP server for security research?

An MCP (Model Context Protocol) server connects AI assistants such as Claude, Cursor or GitHub Copilot in VS Code to external tools and data. The servers on this page are focused on security research.

How is this list ranked?

By GitHub stars and recent activity, using public repository data refreshed on October 15, 2026.

How do I install one?

Most servers are added to your client’s MCP config file as an npx, uvx or Docker command. Our install guides for Claude Desktop, Cursor and VS Code walk through it step by step.

Related guides

Weekly MCP digest – new and trending MCP servers in your inbox.