Skip to main content
Glama
116,817 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.
    4
    23 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local security layer for coding agents: keeps secret values out of what Claude Code, Codex CLI, Cursor and OpenCode send to their model, and checks untrusted text for prompt injection. MIT, runs on your machine, no account.
    4
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    30
    147 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    F
    maintenance
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    51
    95 npm
    27
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    11
    9 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3
    MIT
  • A
    license
    C
    quality
    C
    maintenance
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    65
    702 npm
    7
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables users to audit personal reading streams by quantifying category diversity with Shannon entropy, detecting lexical redundancy and echo chambers via Jaccard similarity, and ranking content sources by decibel signal-to-noise ratio for pruning recommendations.
    7
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI applications to access HUMAN Security's cybersecurity intelligence for threat detection, attack analysis, and security monitoring.
    359 npm
    12
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables unified security workflows with secret scanning, dependency CVE auditing, TLS/SSL inspection, and DNS/SPF/DMARC checks through a single MCP server.
    911 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables transparent security for any MCP server by intercepting tool calls, blocking prompt injection attempts, masking PII in responses, and writing immutable audit logs.
    2,302 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server exposing every documented Email on Acid API v5 request as a tool — 24 tools across authentication, email client lists, email rendering testing, and spam testing.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI to perform real-browser QA testing on websites via Playwright, finding bugs, accessibility, SEO, and performance issues through natural language conversations.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides access to NFTGo's Developer API for retrieving NFT collection details, asset information, market data, wallet information, and search capabilities on the Ethereum blockchain.
    2 npm
    5
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A security layer for AI agents that monitors, checks, and records every action, providing a trust light, timeline, rewind, and ghost mode for testing without consequences.
    2
    AGPL 3.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Exposes Keysight CyPerf network performance and security testing as 100 tools across 15 categories, enabling AI assistants to orchestrate tests, manage agents, and analyze results through natural language.
    1
    MIT