Awesome Mcp Security
Description
Security scores for 800+ MCP servers. 9 analyzers scan for prompt injection, toxic flows, and attack surface risks. Updated daily. 🛡️
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
🛡️ Awesome MCP Security [](https://awesome.re)
[](README.md) [](README.zh.md) [](README.ja.md) [](README.ko.md)
[](https://github.com/AgentSeal/awesome-mcp-security) [](https://x.com/agentseal_org) [](https://agentseal.org/mcp)
**800+ MCP servers** scanned and analyzed for AI agent security risks. Scores reflect how safely an AI agent can use each server, not the code quality of the server itself. Updated daily. Powered by [AgentSeal](https://agentseal.org).
Quick Stats
| Metric | Count |
|---|---|
| Total servers scanned | 800 |
| ✅ Safe (score >= 80) | 631 |
| ⚠️ Review (score 50-79) | 169 |
| Total security findings | 6237 |
| Last updated | March 14, 2026 |
How We Score
Every server is tested through **9 security analyzers**:
- Schema Analysis - validates tool parameter types and constraints
- Static Pattern Detection - finds command injection, SSRF, path traversal patterns
- Prompt Injection Scanning - detects hidden instructions in tool descriptions
- Toxic Flow Mapping - identifies dangerous tool chains
- Unicode Detection - catches invisible character attacks
- Deep Autopsy - active probing with 45+ MCP-specific attack patterns
- Annotations & Instructions - checks for behavior-modifying metadata
- Resource Analysis - evaluates exposed resources and templates
- LLM Classification - Claude-powered semantic analysis of tool intent
**Trust Score:** 0-100 measures how safely an AI agent can use this serve
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Google Workspace Model Armor
Filter user-generated content for safety
