Security · mcp · 16 picks

Security-reviewed MCP servers and agent tools

MCP and agent resources that deserve extra scrutiny for credentials, file access, network access, and operational trust.

Curated by @heyclaude-editors Updated 2026-07-18

MCP and agent resources that deserve extra scrutiny for credentials, file access, network access, and operational trust.

Compared at a glance

The top 5 picks side by side on trust, install, platform support, and disclosed notes — full rationale for each below.

3 trust signals differ across this comparison (Package trust, Source provenance, Submitter).

Next steps differ across picks — use the actions in the table below to copy install commands and source links per resource.

Field	Cloudflare MCP Server - MCP Servers Build applications, analyze traffic, and manage security settings through Cloudflare Open dossier	Socket MCP Server for Claude Security analysis and vulnerability scanning for dependencies Open dossier	Stytch MCP Server for Claude Configure and manage Stytch authentication services and workspace settings Open dossier	AWS CloudTrail MCP Server Official AWS Labs MCP server for AWS CloudTrail that lets AI assistants query account activity for security investigations, compliance auditing, and operational troubleshooting via Event History and CloudTrail Lake SQL. Open dossier	Dependency Security Audit A Stop hook that runs npm audit, pip-audit, safety, or bundler-audit automatically at the end of every Claude Code session, detecting CVEs and outdated packages across Node.js, Python, and Ruby projects. Open dossier
Next stepsDiffers	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM MCP feed Open source Newsletter Claim listing	Open dossier API JSON Open LLM Open source Newsletter Claim listing
Trust
Review status	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed	ReviewedMaintainer reviewed
Package trustDiffers	Package verified	Package verified	Package verified	Package not verified	Package not verified
Source provenanceDiffers	No submission link	No submission link	No submission link	Source-backed	Source-backed
SubmitterDiffers	—	—	—	jaso0n0818	—
Install risk	Low risk	Low risk	Low risk	Review first	Review first
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	Cloudflare	Socket	Stytch	AWS Labs	—
Category	mcp	mcp	mcp	mcp	hooks
Source	First-party	First-party	First-party	Source-backed	Source-backed
Author	Cloudflare	Socket	Stytch	AWS Labs	JSONbored
Added	2025-09-18	2025-09-18	2025-09-18	2026-06-21	2025-09-19
Platforms	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code
Harness	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code Claude Desktop	Claude Code
Source repo	—	—	—	—	—
Safety notes	✓Use a least-privilege Cloudflare token because DNS, security, Worker, and deployment actions can affect production services.	✓Treat dependency risk findings as triage input and verify impact before blocking releases or changing package policy.	✓Restrict Stytch workspace and admin permissions because auth configuration changes can affect sign-in and account security.	✓The provided tools are read-only — they look up CloudTrail events and run Lake queries, and do not modify infrastructure. Grant only the CloudTrail read permissions listed in the documentation (least privilege). This server reads audit data with your AWS credentials; scope the profile to the intended account and run it only on a trusted host. CloudTrail Lake SQL queries against large event data stores can incur AWS query/scan costs; review query scope before running broad analyses.	✓Runs automatically at session end and invokes local package-manager audit tools when dependency lockfiles are present. May contact package registries or vulnerability advisory services through npm, yarn, safety, pip, or bundler-audit. Writes a timestamped security-audit log in the current working directory.
Privacy notes	✓Zone settings, analytics, logs, account identifiers, deployment metadata, and security configuration may be sent through model context.	✓Package names, manifests, dependency graphs, repository context, and security findings may be sent through tool calls.	✓User identities, authentication logs, session details, workspace settings, and security configuration may be sent through tool calls.	✓CloudTrail events expose account activity: usernames, access key IDs, source IPs, ARNs, and API call details can be returned to the model. Keep account identifiers, credentials, and returned event contents out of public prompts, issues, and screenshots, since audit data is sensitive.	✓Reads dependency manifests and lockfiles to identify package managers and audit targets. The generated audit log may include package names, versions, vulnerability identifiers, and remediation output. External audit tools may send package metadata to their configured registries or advisory services.
Prerequisites	Cloudflare account with active zones Cloudflare API Token from https://dash.cloudflare.com/profile/api-tokens Cloudflare Account ID (found in Cloudflare dashboard) Node.js and npm/npx available for running the @cloudflare/mcp-server-cloudflare package	Socket account (free or paid plan) OAuth authentication setup (for mcp.socket.dev MCP connection) Socket API key (for Socket API access, available in Socket Dashboard) Network access to mcp.socket.dev (HTTPS required)	Stytch account (free or paid plan) Stytch API key authentication (for mcp.stytch.dev MCP connection) Stytch project_id and secret from Dashboard (test or live environment) Network access to mcp.stytch.dev (HTTP transport, not HTTPS)	An AWS account with CloudTrail enabled (Event History is on by default; CloudTrail Lake is needed for SQL queries). Python 3.10 or newer and `uv` / `uvx` installed (Astral) to run the package. AWS credentials configured locally (for example via `aws configure` or `AWS_PROFILE`) with CloudTrail read permissions (`cloudtrail:LookupEvents`, `cloudtrail:StartQuery`, `cloudtrail:GetQueryResults`, and related). An MCP client that supports stdio servers; the server runs locally on the same host as the client.	— none listed
Install	`claude mcp add cloudflare --env CLOUDFLARE_API_TOKEN=YOUR_TOKEN --env CLOUDFLARE_ACCOUNT_ID=YOUR_ACCOUNT_ID && claude mcp list`	`claude mcp add --transport http socket https://mcp.socket.dev/ && claude mcp list`	`claude mcp add --transport http stytch http://mcp.stytch.dev/mcp && claude mcp list`	`uvx awslabs.cloudtrail-mcp-server@latest`	`mkdir -p .claude/hooks && touch .claude/hooks/dependency-security-audit-on-stop.sh && chmod +x .claude/hooks/dependency-security-audit-on-stop.sh`
Config	`{ "mcpServers": { "cloudflare": { "env": { "CLOUDFLARE_API_TOKEN": "${CLOUDFLARE_API_TOKEN}", "CLOUDFLARE_ACCOUNT_ID": "${CLOUDFLARE_ACCOUNT_ID}" }, "args": [ "-y", "@cloudflare/mcp-server-cloudflare" ], "command": "npx", "type": "stdio" } } }`	`{ "mcpServers": { "socket": { "url": "https://mcp.socket.dev/", "type": "http" } } }`	`{ "mcpServers": { "stytch": { "url": "http://mcp.stytch.dev/mcp", "type": "http" } } }`	`{ "mcpServers": { "awslabs.cloudtrail-mcp-server": { "command": "uvx", "args": ["awslabs.cloudtrail-mcp-server@latest"], "env": { "AWS_PROFILE": "${AWS_PROFILE}", "FASTMCP_LOG_LEVEL": "ERROR" }, "type": "stdio" } } }`	`{ "hooks": { "stop": { "script": "./.claude/hooks/dependency-security-audit-on-stop.sh" } } }`
Citations	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdevelopers.cloudflare.com Package (SHA-256 pinned)/downloads/mcp/cloudflare-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Package (SHA-256 pinned)/downloads/mcp/socket-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationstytch.com Package (SHA-256 pinned)/downloads/mcp/stytch-mcp-server.mcpb Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationgithub.com Submitted by jaso0n08182026-06-21 Source methodology →	Source repositorygithub.com 2026-07-18T19:14:44+00:00 Documentationdocs.npmjs.com Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed	Unclaimed