---
title: "security MCP servers"
description: "20 MCP servers tagged security."
---

> Documentation Index
> Fetch the complete documentation index at: https://nimbus-mcptools.labs.steitblog.com/llms.txt
> Use this file to discover all available pages before exploring further.

# security MCP servers

20 servers tagged **security**. See [all categories](/categories/).

| Server | Description | Stars | Last push |
| --- | --- | --- | --- |
| [REA](/servers/rea/) | Reverse engineer binaries, apps, and runtime behavior from one CLI and MCP server. | 250k | 2026-10-15 |
| [IDA Pro](/servers/ida-pro/) | Bridge IDA Pro with LLMs for AI-assisted reverse engineering via MCP. | 13k | 2026-09-26 |
| [Ghidra](/servers/ghidra/) | MCP server that lets LLMs decompile and analyze binaries through Ghidra. | 11k | 2026-10-10 |
| [JADX AI](/servers/jadx-ai/) | JADX decompiler plugin that exposes Android APK reverse-engineering to MCP clients. | 2.9k | 2026-09-23 |
| [JSHook](/servers/jshook/) | Search-first JavaScript reverse-engineering workspace with browser and debugging tools. | 2k | 2026-10-10 |
| [OpenOSINT](/servers/openosint/) | OSINT toolkit: email, breach, IP, WHOIS, DNS, Shodan, and GitHub lookups for agents. | 1.8k | 2026-10-14 |
| [Burp Suite](/servers/burp-suite/) | Official PortSwigger MCP server that connects Burp Suite to AI clients for web security testing. | 1.2k | 2026-10-02 |
| [GhidrAssistMCP](/servers/ghidrassistmcp/) | Native Ghidra extension exposing reverse-engineering analysis tools over MCP. | 773 | 2026-10-09 |
| [SonarQube](/servers/sonarqube/) | Official SonarQube MCP server for code quality and security findings. | 664 | 2026-10-14 |
| [Google Security Operations](/servers/google-security-operations/) | Official Google SecOps, SOAR, Threat Intelligence, and Security Command Center servers. | 532 | 2026-10-06 |
| [Bitwarden](/servers/bitwarden/) | Official Bitwarden MCP server for vault access via the CLI and org admin via the Public API. | 278 | 2026-10-13 |
| [Socket](/servers/socket/) | Official Socket server: dependency security scores across npm, PyPI, cargo, Maven, Go, and more. | 140 | 2026-10-14 |
| [JFrog](/servers/jfrog/) | Official JFrog MCP server for repositories, builds, artifacts, and security scans. | 118 | 2026-07-05 |
| [HashiCorp Vault](/servers/hashicorp-vault/) | Official HashiCorp Vault MCP server for managing secrets and secret mounts. | 64 | 2026-10-14 |
| [Trivy](/servers/trivy/) | Official Trivy MCP plugin that lets agents scan projects for vulnerabilities and misconfigurations. | 53 | 2025-12-17 |
| [OSV](/servers/osv/) | MCP server for querying the Open Source Vulnerabilities database. | 42 | 2026-10-14 |
| [GitGuardian](/servers/gitguardian/) | Official GitGuardian MCP server to find and remediate hardcoded secrets across 600+ secret types. | 39 | 2026-10-14 |
| [AWS CloudTrail](/servers/aws-cloudtrail/) | Official MCP server for querying CloudTrail events and CloudTrail Lake in security investigations. | — | 2026-10-15 |
| [AWS IAM](/servers/aws-iam/) | Official MCP server for managing AWS IAM users, roles, policies, and permissions. | — | 2026-10-15 |
| [Semgrep](/servers/semgrep/) | Official Semgrep MCP server for scanning code for security issues. | 686 | archived |

Source: https://nimbus-mcptools.labs.steitblog.com/categories/security/index.mdx