Secure Model Context Protocol (MCP) servers with automated security validation, vulnerability scanning, and tool poisoning detection. Browse 16+ vetted MCP servers for building secure agentic AI systems.
Find secure MCP servers for your agentic AI applications with confidence. Model Context Protocol is the USB-C of building agentic systems - providing standardized, secure connections between AI agents and external tools. Each server undergoes automated security scanning including dependency vulnerability checks, static analysis, and MCP-specific threat detection (tool poisoning, cross-origin attacks).
- Browse servers by category below
- Check security status - look for 🛡️ Verified Secure or
⚠️ Conditional ratings - Review scores - higher scores indicate better security posture
- Follow repository links for installation instructions
- 🛡️ Verified Secure (85-100): Comprehensive validation passed
⚠️ Conditional (70-84): Secure with specific configuration requirements- ⏳ Awaiting Scan: Repository currently inaccessible for scanning
- ❌ Not Recommended (0-49): Known security issues
- 🏢 Official Servers - Anthropic-maintained MCP servers
- 🏭 Enterprise Servers - Company-backed integrations
- 🛡️ Security Tools - Cybersecurity & vulnerability scanning
- 👥 Community Servers - Open source community projects
- 🔄 Under Review - Servers currently being assessed
- 📖 About This Project - Methodology & contributing
Last Updated: 2025-07-28 06:03 UTC
Total Servers: 16
| Server | Version | Security Status | Description |
|---|---|---|---|
| Everything (Reference Server) | 0.5.0 | Reference server demonstrating all MCP features | |
| Fetch Server | 0.3.2 | Web content fetching and conversion for efficient LLM usage | |
| Filesystem Server | 0.4.1 | Secure file operations with configurable access controls | |
| Git Server | 0.2.1 | Tools to read, search, and manipulate Git repositories | |
| Memory Server | 0.1.3 | Persistent memory using a local knowledge graph | |
| Sequential Thinking Server | 0.1.0 | Dynamic and reflective problem-solving through thought sequences | |
| Time Server | 0.1.2 | Time and timezone conversion capabilities |
| Server | Version | Security Status | Description |
|---|---|---|---|
| AWS MCP Server | 1.2.0 | 🛡️ Verified Secure (📊 Score: 89/100) | AWS service integration with IAM controls |
| Docker Server | 1.5.2 | 🛡️ Verified Secure (📊 Score: 91/100) | Docker container management with security controls |
| GitHub MCP Server | 1.0.0 | GitHub's official MCP Server for repository management | |
| Notion MCP Server | 0.3.1 | Notion official MCP server for workspace integration | |
| Stripe MCP Server | 0.2.0 | 🛡️ Verified Secure (📊 Score: 91/100) | Interact with Stripe API for payments and financial data |
| Server | Version | Security Status | Description |
|---|---|---|---|
| Nuclei Security Scanner | 0.2.0 | 🛡️ Verified Secure (📊 Score: 92/100) | Template-based vulnerability scanner with extensive security checks |
| Server | Version | Security Status | Description |
|---|---|---|---|
| PostgreSQL MCP Server | 0.4.2 | 🛡️ Verified Secure (📊 Score: 86/100) | PostgreSQL database operations and query execution |
| Slack MCP Server | 1.0.3 | Slack workspace integration for messaging and collaboration |
| Server | Version | Security Status | Description |
|---|---|---|---|
| Anthropic Computer Use | 0.1.0 | ⏳ Awaiting Scan | Desktop automation with screen capture and input control |
Click on server scores above to jump to detailed security breakdowns:
AWS MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 70/100
- Bandit completed but output could not be parsed
Docker Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 85/100
- Found 1 critical security issue(s)
Everything (Reference Server) Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Fetch Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Filesystem Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Git Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
GitHub MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 50/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- Go dependency scanning not yet implemented
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Memory Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Notion MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 40/100 ❌ Scans package.json, requirements.txt, etc. for known CVEs
❌ 4 critical issues found
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
Nuclei Security Scanner Security Assessment
🔍 MCP-Specific Security: 95/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- MCP-scan found no security issues in 2 configuration file(s)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
PostgreSQL MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 50/100 ❌ Static analysis for common security vulnerabilities in source code
❌ 9 critical issues found
- Found 9 critical security issue(s)
Sequential Thinking Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found
Slack MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 50/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- Go dependency scanning not yet implemented
🐛 Code Security Analysis: 70/100 ➖ Static analysis for common security vulnerabilities in source code
➖ Not applicable
- ESLint security scanning not available
Stripe MCP Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 100/100 ➖ Scans package.json, requirements.txt, etc. for known CVEs
➖ Not applicable
- No recognized dependency files found
🐛 Code Security Analysis: 85/100
- Found 1 critical security issue(s)
Time Server Security Assessment
🔍 MCP-Specific Security: 90/100 ✅ Scans for MCP-specific threats like tool poisoning attacks
✅ No issues found
- No tool poisoning indicators found (basic check)
📦 Third-Party Dependencies: 60/100
- Found 4 vulnerability/vulnerabilities in dependencies
🐛 Code Security Analysis: 100/100 ✅ Static analysis for common security vulnerabilities in source code
✅ No issues found
- No critical security vulnerabilities found