50 security MCP servers ranked by behavioral trust score — real runtime evidence (success rate, latency, uptime) with per-reporter influence capping, not GitHub stars or static scans. Servers with no runtime data are honestly UNRATED and excluded.
Before your agent invokes any of these, run a free pre-flight check: GET /v1/preflight?target={server_url} — it returns a verdict and a signed diligence receipt. Or gate calls automatically with the trust-check SDK (npm/PyPI: dominion-trust-check).
FAQ
What is the best security MCP server in 2026?
Based on independently measured runtime behavior, @tankpkg/mcp-server currently ranks #1 in the security category with a trust score of 75/100 across 0 tracked interactions.
How are security MCP servers ranked?
Rankings use Dominion Observatory's behavioral trust score: real agent-reported success rates, latency distributions, and uptime — with per-reporter influence capping so no single source can dominate a score. Servers with no runtime data are UNRATED and excluded, never given a fabricated score.
How many security MCP servers are tracked?
Dominion Observatory tracks 666 servers in the security category; the 50 with behavioral trust data are ranked here. Check any server before invoking it at /v1/preflight.