Skip to main content
Glama
116,817 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    Local-first supply-chain CVE scanner. Scans project deps, system packages (Homebrew/apt), and IDE extensions (VS Code, JetBrains) via OSV, NVD, GHSA, EPSS, and CISA KEV. Listed in the official MCP Registry as io.github.DevInder1/tridentchain-security.
    3
    26 PyPI
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    On-chain delivery receipts for x402 AI-agent payments on Solana: anchors SHA-256 digests of delivered content to a PDA after settlement; buyers verify proof of delivery offline with zero trust in the seller. Live MCP endpoint + npm bridge.
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.
    5
    4 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local security layer for coding agents: keeps secret values out of what Claude Code, Codex CLI, Cursor and OpenCode send to their model, and checks untrusted text for prompt injection. MIT, runs on your machine, no account.
    4
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables calculation of the 2025-2028 federal overtime, tips, and senior deductions — applying IRS caps, MAGI phase-outs, and bracket tables — plus eligibility explanations and estimated federal tax savings.
    5
    340 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Vulnerability intelligence for AI agents that enables CVE lookup, package vulnerability checks, and dependency auditing without API keys.
    5
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables auditing a Supabase project's security beyond the dashboard's Security Advisor, checking anonymous access, RLS policies, and cross-tenant data leaks via read-only probes and a two-account test.
    4
    33 npm
    MIT
  • -
    license
    A
    quality
    Not graded
    maintenance
    A server that provides AI assistants programmatic control of Safari browser on macOS for web automation, testing, and debugging.
    16
    1
    -
  • A
    license
    B
    quality
    B
    maintenance
    Zero-trust safety & settlement rail for autonomous AI agents. Sub-10ms deterministic guardrails, secret leak defense, bounded wallet controls, and on-chain Proof-of-Safety attestations via x402.
    15
    273 PyPI
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables users to audit personal reading streams by quantifying category diversity with Shannon entropy, detecting lexical redundancy and echo chambers via Jaccard similarity, and ranking content sources by decibel signal-to-noise ratio for pruning recommendations.
    7
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to retrieve Social Security COLA and yearly limits, calculate benefit increases and earnings-test withholding, and determine full retirement ages and claiming-age benefits from SSA-sourced data.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    A lightweight MCP server for security reviews that injects security requirements before code generation, scans dependencies for CVEs, and verifies generated code without disrupting workflow.
    73
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Zero-key security toolkit for your AI assistant: grade any website's security A+ to F, check if CVEs are actively exploited via CISA KEV and EPSS, and get MITRE ATT&CK defenses explained in plain English. No API keys, no signup.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Official Model Context Protocol server exposing static AST security tools (audit_mcp_repository, audit_local_directory) to scan MCP tools for vulnerabilities before connecting them to Claude or Cursor.
    MIT