🔌 Socketlist

セキュリティ調査向けおすすめMCPサーバー（2026年）

セキュリティ調査向けに人気のオープンソースMCPサーバー30件を、GitHubのスター数順に並べました。各サーバーのページでは、リポジトリ情報、（README に記載がある場合は）インストール設定、関連サーバーを確認できます。

  1. mcp-for-beginners ★17444 – This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-langua
  2. ida-pro-mcp ★12870 – AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
  3. hexstrike-ai ★12793 – HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+
  4. lamda ★8607 – Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MIT
  5. ghidra-mcp ★5626 – Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading,
  6. js-reverse-mcp ★2951 – AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。
  7. jadx-ai-mcp ★2900 – Plugin for JADX to integrate MCP server
  8. Qu1cksc0pe ★2084 – All-in-One malware analysis tool.
  9. jshookmcp ★2046 – A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP serve
  10. OpenOSINT ★1753 – AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models.
  11. cheatengine-mcp-bridge ★1644 – Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and me
  12. LitterBox ★1550 – A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an
  13. reverify ★1288 – Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth w
  14. open-reverselab ★1262 – Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/
  15. wassette ★965 – Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
  16. reverse-engineering-assistant ★874 – MCP server for reverse engineering tasks in Ghidra 👩‍💻
  17. MCP-Kali-Server ★847 – MCP configuration to connect AI agent to a Linux machine.
  18. jadx-mcp-server ★802 – MCP server for JADX-AI Plugin
  19. unbrowse ★791 – Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
  20. GhidrAssistMCP ★773 – An native MCP server extension for Ghidra
  21. mcpcan ★728 – MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment m
  22. apktool-mcp-server ★672 – A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
  23. sonarqube-mcp-server ★664 – Official SonarQube MCP Server for code quality and security in AI agents
  24. rustunnel ★659 – Self-hosted, secure tunnel server in Rust. Expose local HTTP/HTTPS/TCP/UDP services to the public internet via TLS-encry
  25. cti-expert ★611 – CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79
  26. agent-opfor ★583 – Open-source adversary emulation for AI agents and MCP servers.
  27. mcp-security ★532 –
  28. blitzstrike ★508 – Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before re
  29. lunar ★504 – lunar.dev: Agent native MCP Gateway for governance and security
  30. iam-policy-autopilot ★493 – IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies

よくある質問

セキュリティ調査向けのMCPサーバーとは？

MCP（Model Context Protocol）サーバーは、Claude、Cursor、VS CodeのGitHub CopilotなどのAIアシスタントを外部のツールやデータにつなぐプログラムです。このページではセキュリティ調査に特化したサーバーを紹介しています。

ランキングの基準は？

GitHubのスター数と最近の更新状況です。2026年10月15日に更新した公開リポジトリのデータを使っています。

インストール方法は？

多くのサーバーは、クライアントのMCP設定ファイルにnpx・uvx・Dockerのコマンドを追加するだけで使えます。Claude Desktop、Cursor、VS Code向けのガイドで手順を詳しく説明しています。

関連ガイド

週刊MCPダイジェスト – 新着・話題のMCPサーバーをメールでお届けします。