5 published servers

Best Security & Reverse Engineering MCP Servers

Security and reverse engineering servers bring specialized inspection tools into an assistant's workflow. They may help examine software artifacts, navigate analysis results, or interact with a security application. Their presence in this directory does not imply that every operation is safe or appropriate for every target. Use these integrations only on systems and materials you are authorized to assess, with a clearly defined scope.

Evaluate the server in an isolated environment using known test artifacts. Check whether it launches external processes, executes supplied code, or communicates with remote services. Analysis outputs can include secrets, proprietary code, or attacker controlled content, so consider both disclosure risks and prompt injection. Prefer restricted credentials and explicit target selection over ambient access to a workstation or network. Read installation instructions carefully for application versions and plugin requirements. When comparing projects, look for clear tool boundaries and outputs that a practitioner can verify independently. An assistant can help organize evidence and suggest investigative steps, but conclusions still need expert review and a reproducible record of how the analysis was performed.

Compare Security & Reverse Engineering servers

# / ServerWhy pick itStarsLast commitRuntimeRemote
Choose it for IDA-native binary analysis with explicit database sessions and persistent headless workers.12,951Sep 26, 2026pythonNo
Choose it to bring Ghidra decompilation and renaming into an assistant workflow through a plugin bridge.11,310Oct 10, 2026javaNo
Choose it for assistant-assisted Android reverse engineering inside an active JADX session.2,909Sep 23, 2026javaNo
Choose it to pair assistant explanations with direct WinDbg/CDB control for Windows investigations.1,620Oct 10, 2026pythonNo
Pick it for an Apktool-backed MCP workflow spanning manifest review, smali edits, and APK rebuilding.672Jul 2, 2026pythonNo

Ordered by featured status, editorial order, then repository stars. Stars may cover an entire monorepo and are a dated snapshot, not a quality or security guarantee.

Frequently asked questions

Start with the exact tools your task needs, then compare runtime requirements, supported transports, permissions, and recent project activity. Test with nonsensitive data before connecting a production account. A high star count is a discovery signal, not a security audit.

The directory is free to browse. A server’s code license and any connected provider’s charges are separate matters. Check the upstream license, API pricing, and account requirements before installing.

Compatibility depends on the server’s transport and the client’s supported configuration. Local stdio commands and remote HTTP or SSE endpoints are not interchangeable. Follow the client guides and verify the current upstream documentation.