Best MCP Servers for Security & Reverse Engineering (2026)
Security tooling for AI-assisted analysis: IDA Pro, IDA headless, Ghidra, and Binary Ninja servers for reverse engineering, Skylos and the MCP security-audit tools for code scanning, SecOps MCP for security operations, Wireshark for packet analysis, and Palisade for email-authentication hardening.
This page collects the 11 MCP servers in our directory that genuinely cover security & reverse engineering — together they have 9,636 GitHub stars, and 0 of them run as hosted services you can connect to without installing anything. The highest-rated options are mrexodia/ida-pro-mcp, duriantaco/skylos, fosdickio/binary_ninja_mcp.
How to choose
Start with GhidraMCP for free reverse engineering, IDA if you already own a license, Skylos for application-security scanning of your own code, and Dandan if you want to secure the MCP servers themselves.
mrexodia/ida-pro-mcp
by mrexodia
MCP server that allows AI assistants to perform binary analysis and reverse engineering inside IDA Pro. Its tools include lookup_funcs and list_funcs for finding functions, decompile for decompiling a function at an address, and set_comments for annotating disassembly and decompiler views; it requires IDA Pro 8.3 or higher (IDA Free is not supported) and Python 3.11+, and the author now recommends the official Hex-Rays IDA MCP server instead.
npx -y -y @modelcontextprotocol/inspectorduriantaco/skylos
by duriantaco
](https://glama.ai/mcp/servers/@duriantaco/mcp-skylos) 🐍 🏠 🍎 🪟 🐧 - Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false p
npx -y duriantaco-skylosfosdickio/binary_ninja_mcp
by fosdickio
🐍 🏠 🍎 🪟 🐧 - A Binary Ninja plugin, MCP server, and bridge that seamlessly integrates with your favorite MCP client. It enables you to automate the process of performing binary analysis and reve
npx -y -y binary-ninja-mcpsecurityfortech/secops-mcp
by securityfortech
🐍 🏠 - All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty huntin
npx -y securityfortech-secops-mcpzboralski/ida-headless-mcp
by zboralski
🏎️ 🐍 🏠 🍎 🪟 🐧 - Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutt
npx -y zboralski-ida-headless-mcp13bm/GhidraMCP
by 13bm
🐍 ☕ 🏠 - MCP server for integrating Ghidra with AI assistants. This plugin enables binary analysis, providing tools for function inspection, decompilation, memory exploration, and import/export analy
npx -y 13bm-ghidramcpbx33661/Wireshark-MCP
by bx33661
](https://glama.ai/mcp/servers/bx33661/Wireshark-MCP) 🐍 🏠 - Wireshark network packet analysis MCP Server with capture, protocol stats, field extraction, and security analysis capabilities.
npx -y -y @modelcontextprotocol/inspector82ch/MCP-Dandan
by 82ch
🐍 📇 🏠 🍎 🪟 🐧 - Real-time security framework for MCP servers that detects and blocks malicious AI agent behavior by analyzing tool call patterns and intent across multiple threat detection engines
npx -y 82chqianniuspace/mcp-security-audit
by qianniuspace
MCP server that audits npm package dependencies for security vulnerabilities, using remote npm registry integration for real-time checks. It produces vulnerability reports with severity levels (critical, high, moderate, low), CVSS scores, and CVE references, along with automatic fix recommendations, and is compatible with npm, pnpm, and yarn package managers.
npx -y -y @smithery/cliPalisade DMARC Agent
by powder_blower
AI-powered DMARC, SPF, DKIM, BIMI, MTA-STS, DNS, and email-authentication management for AI agents.
npx -y @palisadeemail/mcpPalisade MCP
by powder_blower
Secure email authentication for AI agents. Palisade exposes 32 tools to inspect domains, diagnose SPF, DKIM, and DMARC, generate exact DNS records, and prepare approval-based changes through an OAuth-protected remote MCP server.
npx -y @palisadeemail/mcpFrequently asked questions
What is the most popular MCP server for Security & Reverse Engineering?
mrexodia/ida-pro-mcp leads this list with 8,227 GitHub stars. MCP server that allows AI assistants to perform binary analysis and reverse engineering inside IDA Pro. Its tools include lookup_funcs and list_funcs for finding functions, decompile for decompiling…
Are these Security & Reverse Engineering MCP servers free to use?
9 of the 11 servers here publish a license in the directory (MIT, Apache-2.0, GPL-3.0). 0 of them run as hosted services you can connect to remotely; the rest you install and run yourself. Hosted services may have their own pricing.
How do I choose an MCP server for Security & Reverse Engineering?
Start with GhidraMCP for free reverse engineering, IDA if you already own a license, Skylos for application-security scanning of your own code, and Dandan if you want to secure the MCP servers themselves.