🔌 Socketlist

2026 年最佳安全研究 MCP 服务器

以下是 30 个最受欢迎的安全研究开源 MCP 服务器，按 GitHub 星标数排序。每个条目都链接到详情页，包含仓库信息、安装配置（如 README 中提供）以及相关服务器。

  1. mcp-for-beginners ★17446 – This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-langua
  2. ida-pro-mcp ★12875 – AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
  3. hexstrike-ai ★12794 – HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+
  4. lamda ★8607 – Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MIT
  5. ghidra-mcp ★5632 – Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading,
  6. js-reverse-mcp ★2951 – AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。
  7. jadx-ai-mcp ★2901 – Plugin for JADX to integrate MCP server
  8. Qu1cksc0pe ★2084 – All-in-One malware analysis tool.
  9. jshookmcp ★2045 – A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP serve
  10. OpenOSINT ★1753 – AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models.
  11. cheatengine-mcp-bridge ★1643 – Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and me
  12. LitterBox ★1550 – A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an
  13. reverify ★1288 – Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth w
  14. open-reverselab ★1263 – Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/
  15. wassette ★965 – Wassette: A security-oriented runtime that runs WebAssembly Components via MCP
  16. reverse-engineering-assistant ★874 – MCP server for reverse engineering tasks in Ghidra 👩‍💻
  17. MCP-Kali-Server ★847 – MCP configuration to connect AI agent to a Linux machine.
  18. jadx-mcp-server ★802 – MCP server for JADX-AI Plugin
  19. unbrowse ★791 – Unbrowse - Reverse engineer any website so that your agents can access its APIs directly
  20. GhidrAssistMCP ★773 – An native MCP server extension for Ghidra
  21. mcpcan ★728 – MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment m
  22. apktool-mcp-server ★672 – A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)
  23. sonarqube-mcp-server ★664 – Official SonarQube MCP Server for code quality and security in AI agents
  24. rustunnel ★659 – Self-hosted, secure tunnel server in Rust. Expose local HTTP/HTTPS/TCP/UDP services to the public internet via TLS-encry
  25. cti-expert ★611 – CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79
  26. agent-opfor ★583 – Open-source adversary emulation for AI agents and MCP servers.
  27. mcp-security ★532 –
  28. blitzstrike ★508 – Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before re
  29. lunar ★504 – lunar.dev: Agent native MCP Gateway for governance and security
  30. iam-policy-autopilot ★493 – IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies

常见问题

什么是安全研究 MCP 服务器？

MCP（Model Context Protocol）服务器用于把 Claude、Cursor、VS Code 中的 GitHub Copilot 等 AI 助手连接到外部工具和数据。本页收录的服务器专注于安全研究。

这个榜单如何排序？

依据 GitHub 星标数和近期活跃度，数据来自 2026年10月15日 更新的公开仓库信息。

如何安装？

大多数服务器只需在客户端的 MCP 配置文件中添加一条 npx、uvx 或 Docker 命令。我们的 Claude Desktop、Cursor 和 VS Code 指南会一步步说明。

相关指南

MCP 每周精选 – 把最新、最热门的 MCP 服务器发送到你的邮箱。