Die besten MCP-Server für Sicherheitsforschung (2026)
Das sind die 30 beliebtesten Open-Source-MCP-Server für Sicherheitsforschung, sortiert nach GitHub-Sternen. Jeder Eintrag verlinkt auf eine Seite mit Repository-Details, Installationskonfiguration (falls vorhanden) und ähnlichen Servern.
- mcp-for-beginners ★17444 – This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-langua
- ida-pro-mcp ★12870 – AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
- hexstrike-ai ★12793 – HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+
- lamda ★8607 – Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MIT
- ghidra-mcp ★5626 – Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading,
- js-reverse-mcp ★2951 – AI Agent-first JS 逆向 MCP Server:有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测,可选 CloakBrowser。
- jadx-ai-mcp ★2900 – Plugin for JADX to integrate MCP server
- Qu1cksc0pe ★2084 – All-in-One malware analysis tool.
- jshookmcp ★2046 – A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP serve
- OpenOSINT ★1753 – AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models.
- cheatengine-mcp-bridge ★1644 – Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and me
- LitterBox ★1550 – A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an
- reverify ★1288 – Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth w
- open-reverselab ★1262 – Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/
- wassette ★965 – Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
- reverse-engineering-assistant ★874 – MCP server for reverse engineering tasks in Ghidra 👩💻
- MCP-Kali-Server ★847 – MCP configuration to connect AI agent to a Linux machine.
- jadx-mcp-server ★802 – MCP server for JADX-AI Plugin
- unbrowse ★791 – Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
- GhidrAssistMCP ★773 – An native MCP server extension for Ghidra
- mcpcan ★728 – MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment m
- apktool-mcp-server ★672 – A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
- sonarqube-mcp-server ★664 – Official SonarQube MCP Server for code quality and security in AI agents
- rustunnel ★659 – Self-hosted, secure tunnel server in Rust. Expose local HTTP/HTTPS/TCP/UDP services to the public internet via TLS-encry
- cti-expert ★611 – CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79
- agent-opfor ★583 – Open-source adversary emulation for AI agents and MCP servers.
- mcp-security ★532 –
- blitzstrike ★508 – Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before re
- lunar ★504 – lunar.dev: Agent native MCP Gateway for governance and security
- iam-policy-autopilot ★493 – IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies
Häufige Fragen
Was ist ein MCP-Server für Sicherheitsforschung?
Ein MCP-Server (Model Context Protocol) verbindet KI-Assistenten wie Claude, Cursor oder GitHub Copilot in VS Code mit externen Tools und Daten. Die Server auf dieser Seite sind auf Sicherheitsforschung ausgerichtet.
Wie wird diese Liste sortiert?
Nach GitHub-Sternen und aktueller Aktivität, auf Basis öffentlicher Repository-Daten vom 15. Oktober 2026.
Wie installiere ich einen Server?
Die meisten Server trägst du als npx-, uvx- oder Docker-Befehl in die MCP-Konfigurationsdatei deines Clients ein. Unsere Anleitungen für Claude Desktop, Cursor und VS Code zeigen das Schritt für Schritt.
Passende Anleitungen
- MCP-Server in Claude Desktop installieren (Schritt für Schritt)
- MCP-Server in Cursor installieren (Anleitung zu mcp.json)
- MCP-Server in VS Code mit GitHub Copilot nutzen