MCP server starters · Rank #92
mcp-security-hub
Grade D: derived only from the two verdicts below. How grades work
A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.
Why this verdict
How we check →- No commits in 90 days; last commit 187 days ago. receipt ↗
Snapshot: commit b680074 on master, checked 2026-10-12 07:03 UTC. Receipts link to files at this exact commit.
- Manifest not found: package.json
What the README says you get
- DeployProduction Hardened Containers
Production Hardened - Non-root containers, minimal images, Trivy-scanned
- DeployDocker Compose Orchestration
Docker Compose orchestration for multi-tool workflows
- Other38 MCP Servers
38 MCP Servers covering reconnaissance, web security, binary analysis
- Other300+ Security Tools
300+ Security Tools accessible via natural language
- OtherReconnaissance Servers
Reconnaissance (8 servers)
- OtherWeb Security Servers
Web Security (6 servers)
- OtherBinary Analysis Servers
Binary Analysis (6 servers)
- OtherBlockchain Security Servers
Blockchain Security (3 servers)
- OtherCloud Security Servers
Cloud Security (3 servers)
- OtherSecrets Detection Server
Secrets Detection (1 server)
- OtherExploitation Server
Exploitation (1 server)
- OtherFuzzing Servers
Fuzzing (2 servers)
- OtherOSINT Servers
OSINT (2 servers)
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 1 unverifiable item was discarded. A README claim is the maker's description, not something we tested.
Watch mcp-security-hub
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 12, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 12, 2026 | Dormant | Deps unknown | 0 |
| Sep 29, 2026 | Slowing | Deps unknown | 0 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (master) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit b680074)
- README ↗ quoted features at the checked commit