Topic · updated 2026-10-05
Security-checked MCP servers
311 Security-checked MCP servers indexed on awesomemcp.in. Every entry links to a live GitHub repository with a known author, is de-duplicated across the official MCP registry and community lists, and carries an automated vulnerability-check badge. Built by @askalf, @IPGeolocation, @hashgraph-online, @msaad00, @medplum and 225 other authors.
Top 60 Security-checked MCP servers
Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only pinned tools.
Scan passed
★ 1
2026-10-05Official MCP server for IP geolocation, security, ASN, abuse, timezone, astronomy, and user-agent.
Scan passed
★ 4
2026-10-02Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
Scan passed
★ 780
2026-10-05Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.
Scan passed
★ 31
2026-10-05Securely access and manage FHIR healthcare data stored in Medplum.
Scan passed
★ 2,721
2026-10-05Official Arm MCP server for code migration, optimization, and Arm architecture guidance
Scan passed
★ 91
2026-10-05Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.
Scan passed
★ 25
2026-10-05AI cost tracking: 11 tools for spend, budgets, and Claude Code + Cursor + Cline costs
Scan passed
★ 16
2026-10-01Portkey Admin API control-plane MCP server with Prisma AIRS interoperability guidance.
Scan passed
★ 6
2026-10-05Step-through debugging for AI agents: breakpoints, stepping and live variables in nine languages
Scan passed
★ 171
2026-10-05MCP server for controlling HomeMatic smart home devices via the CCU JSON-RPC API
Scan passed
★ 9
2026-09-30Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.
Scan passed
★ 1,108
2026-10-05Verify AI answers and executions and seal signed, offline-verifiable evidence records.
Scan passed
★ 7
2026-10-03Manage Coder workspaces, templates, and cloud development environments
Scan passed
★ 16,852
2026-10-05Microsoft Teams messaging: read, post and mention, and list members and threads.
Scan passed
★ 410
2026-10-02Filesystem-direct Obsidian MCP server — search and edit your vault with low context-tax.
Scan passed
★ 30
2026-10-02Agent-safe structured edits: JSON/YAML/TOML/md/AST, dry-run, batch/tx. Not a filesystem MCP.
Scan passed
★ 18
2026-10-02Develop firmware on the real board behind a debug probe: flash, reset, UART and CAN, policy-gated.
Scan passed
★ 17
2026-10-05IKI-Gov AI governance assessment: score AI use cases, check quality gates G0-G5, map to EU AI Act.
Scan passed
★ 5
2026-10-04MCP server for DataHub data catalogs. Discover datasets, explore lineage, and access metadata.
Scan passed
★ 3
2026-09-23Suite of servers for integrating with AWS services and resources.
Scan passed
★ 9,755
2026-10-04Query Amazon Bedrock Knowledge Bases using natural language to retrieve relevant information from your data sources.
Scan passed
★ 9,755
2026-10-04Get prescriptive CDK advice, explain CDK Nag rules, check suppressions, generate Bedrock Agent schemas, and discover AWS Solutions Constructs patterns.
Scan passed
★ 9,755
2026-10-04Core AWS MCP server providing prompt understanding and server management capabilities.
Scan passed
★ 9,755
2026-10-04Analyze CDK projects to identify AWS services used and get pricing information from AWS pricing webpages and API.
Scan passed
★ 9,755
2026-10-04Fetch, convert, and search AWS documentation pages, with recommendations for related content.
Scan passed
★ 9,755
2026-10-04Generate images using Amazon Nova Canvas with text prompts and color guidance.
Scan passed
★ 9,755
2026-10-04Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.
Scan passed
★ 98
2026-10-05Read-only attack-path tools: reachable routes to sensitive assets, and what a fix would cut.
Scan passed
★ 9
2026-10-05Stop shipping agents on vibes. Score every agent output for quality, safety, and cost.
Scan passed
★ 9
2026-10-05Exposes recorded browser sessions (rrweb DOM, console, network) to AI coding agents, fully local
Scan passed
★ 7
2026-07-10Codebase intelligence MCP — index any repo into a property graph; 26 tools for agents.
Scan passed
★ 5
2026-10-04MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
Scan passed
★ 3
2026-10-04MCP server for SearXNG — privacy-respecting web search with pagination, URL reading
Scan passed
★ 1,281
2026-10-05Discover and publish AI agents via DNS using SVCB records (RFC 9460)
Scan passed
★ 70
2026-09-24MCP server for EasyEDA Pro: PCB inspection, BOM, exports, and hardware review.
Scan passed
★ 51
2026-10-05The Proxmox MCP you can hand the keys: VE/PBS/PMG/PDM. Plan, prove, undo, diagnose. MCP/A2A/API.
Scan passed
★ 50
2026-10-03Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit
Scan passed
★ 14
2026-10-05Your WHOOP recovery, sleep, strain and workouts in Claude, ChatGPT or other MCP apps. Self-hosted.
Scan passed
★ 14
2026-10-05Scan, enumerate, and risk-score every MCP server configured on your machine.
Scan passed
★ 4
2026-10-03Governed database access for AI assistants: masking, signed receipts, coverage reconciliation.
Scan passed
★ 3
2026-10-01X Twitter scraper & Twitter API alternative. Search, monitor, publish & manage X accounts.
Scan passed
★ 210
2026-10-05Non-UTF-8 files: CP1251, CP1252, KOI8, ISO-8859, UTF-16, GBK auto-detected and preserved
Scan passed
★ 24
2026-09-28Pre-payment safety gate for x402 agents: PII screening, spend policy, replay checks before signing.
Scan passed
★ 2
2026-09-29Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
Scan passed
★ 45,829
2026-10-05Kubernetes port forwarding for local development with automatic /etc/hosts entries.
Scan passed
★ 4,173
2026-10-03One MCP endpoint for Claude Code, Codex, Gemini, Grok and Mistral CLIs, with durable async jobs.
Scan passed
★ 17
2026-10-05Stateful SageMath MCP server with 40 tools and a sandboxed Sage session per client.
Scan passed
★ 16
2026-10-05MCP server for ISO 20022 camt.053 bank-to-customer statement parsing and reconciliation.
Scan passed
★ 2
2026-10-05Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
Scan passed
★ 207
2026-10-05Multi-agent orchestration with a race-condition-safe shared blackboard, agent spawning, FSM transitions, budget and token tracking, and audit logs.
Scan passed
★ 78
2026-09-29MCP server exposing rlg log streams to LLM agents via JSON-RPC 2.0 over stdio.
Scan passed
★ 6
2026-10-05MCP server to list, load, explain, and validate Agent Skills.
Scan passed
★ 1
2026-10-05Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
Scan passed
★ 1
2026-10-05Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.
Scan passed
★ 0
2026-10-05Your AI research assistant that cites real sources and stays honest
Scan passed
★ 64
2026-10-01Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
Scan passed
★ 19
2026-09-30Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.
Scan passed
★ 16
2026-10-05High-performance knowledge graph MCP server for AI coding agents with semantic search.
Scan passed
★ 9
2026-10-05Manage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.
Scan passed
★ 8
2026-10-01
Search all 311 in the interactive index →
Quick install
Add the most popular option to Claude Code:
claude mcp add truecopy -- npx -y @askalf/truecopy
FAQ
What is the best secure mcp servers?
By GitHub stars, the most popular is truecopy by @askalf (1 stars). awesomemcp.in lists 311 MCP servers for this topic, ranked by official status and popularity.
Are these MCP servers safe to install?
311 of 311 passed our automated vulnerability check (OSV.dev advisories for the published package, OpenSSF Scorecard, license, maintenance and provenance). The check is automated and does not guarantee 100% safety — review the code and permissions before installing.
How do I install truecopy?
With Claude Code: claude mcp add truecopy -- npx -y @askalf/truecopy. Every listing on awesomemcp.in includes an install command and, where available, an mcp.json snippet for Claude Desktop, Cursor and other MCP clients.
Can AI agents read this list?
Yes. The full catalog is available as JSON at https://awesomemcp.in/api/mcps.json and https://awesomemcp.in/api/skills.json, and as plain text at https://awesomemcp.in/llms.txt.