Les meilleurs serveurs MCP pour la recherche en sécurité (2026)

Voici les 30 serveurs MCP open source les plus populaires pour la recherche en sécurité, classés par étoiles GitHub. Chacun renvoie vers une page avec les détails du dépôt, la configuration d’installation lorsqu’elle existe et des serveurs similaires.

mcp-for-beginners ★17444 – This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-langua
ida-pro-mcp ★12870 – AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
hexstrike-ai ★12793 – HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+
lamda ★8607 – Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MIT
ghidra-mcp ★5626 – Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading,
js-reverse-mcp ★2951 – AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。
jadx-ai-mcp ★2900 – Plugin for JADX to integrate MCP server
Qu1cksc0pe ★2084 – All-in-One malware analysis tool.
jshookmcp ★2046 – A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP serve
OpenOSINT ★1753 – AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models.
cheatengine-mcp-bridge ★1644 – Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and me
LitterBox ★1550 – A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an
reverify ★1288 – Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth w
open-reverselab ★1262 – Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/
wassette ★965 – Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
reverse-engineering-assistant ★874 – MCP server for reverse engineering tasks in Ghidra 👩‍💻
MCP-Kali-Server ★847 – MCP configuration to connect AI agent to a Linux machine.
jadx-mcp-server ★802 – MCP server for JADX-AI Plugin
unbrowse ★791 – Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
GhidrAssistMCP ★773 – An native MCP server extension for Ghidra
mcpcan ★728 – MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment m
apktool-mcp-server ★672 – A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
sonarqube-mcp-server ★664 – Official SonarQube MCP Server for code quality and security in AI agents
rustunnel ★659 – Self-hosted, secure tunnel server in Rust. Expose local HTTP/HTTPS/TCP/UDP services to the public internet via TLS-encry
cti-expert ★611 – CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79
agent-opfor ★583 – Open-source adversary emulation for AI agents and MCP servers.
mcp-security ★532 –
blitzstrike ★508 – Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before re
lunar ★504 – lunar.dev: Agent native MCP Gateway for governance and security
iam-policy-autopilot ★493 – IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies

Questions fréquentes

Qu’est-ce qu’un serveur MCP pour la recherche en sécurité ?

Un serveur MCP (Model Context Protocol) relie des assistants IA comme Claude, Cursor ou GitHub Copilot dans VS Code à des outils et des données externes. Les serveurs de cette page sont consacrés à la recherche en sécurité.

Comment ce classement est-il établi ?

D’après les étoiles GitHub et l’activité récente, à partir des données publiques des dépôts mises à jour le 15 octobre 2026.

Comment en installer un ?

La plupart s’ajoutent au fichier de configuration MCP de votre client sous forme de commande npx, uvx ou Docker. Nos guides pour Claude Desktop, Cursor et VS Code détaillent chaque étape.

Guides associés

La lettre MCP hebdomadaire – les nouveaux serveurs MCP et les tendances dans votre boîte mail.