Skip to main content
Glama
121,083 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables unified security workflows with secret scanning, dependency CVE auditing, TLS/SSL inspection, and DNS/SPF/DMARC checks through a single MCP server.
    999 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Checks and fixes a domain's email authentication (SPF, DKIM, DMARC), DNS health, propagation, blacklists and domain/SSL expiry, returning copy-paste fix records from a validating engine, never a model guess. Local stdio server (npx -y @dnsdoctor/mcp) with the same 27 tools as the hosted https://dnsdoctor.dev/mcp.
    29
    411 npm
    2
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Website audits for AI agents: cookie consent and tracking, Core Web Vitals and lost revenue, WCAG 2.2, email/DNS security (SPF, DMARC) and AI-search readiness, merged into one prioritised fix plan.
    11
    44 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI coding agents to scan smart contracts and code for vulnerabilities, check against 12 famous-hack patterns, and return public security receipts directly in the IDE.
    4
    24 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    30
    120 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    17 PyPI
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to look up data breaches and leaked passwords, search NVD CVEs and the CISA KEV catalogue, and generate passive attack-surface reports for a domain covering security headers, TLS, email/DNS security, and CT-log subdomains. All checks are read-only and passive, using only public third-party data sources.
    10
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3
    MIT
  • A
    license
    C
    quality
    C
    maintenance
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    65
    215 npm
    7
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI applications to access HUMAN Security's cybersecurity intelligence for threat detection, attack analysis, and security monitoring.
    334 npm
    12
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables transparent security for any MCP server by intercepting tool calls, blocking prompt injection attempts, masking PII in responses, and writing immutable audit logs.
    1,098 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    This server provides comprehensive website diagnostics, allowing AI agents and clients to perform detailed HTTP, DNS, SSL/TLS, security header, SEO, and AI-readiness checks on any public website. It covers a wide range of tools including WHOIS, email checks, and network analysis.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Connects compatible AI clients to registered Windows or macOS computers, allowing users to inspect systems, work with files, run supported commands, and automate workflows through authorized remote access.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Brings interactive blue-team security operations into AI hosts, enabling alert triage, attack discovery, case management, detection rules, threat hunting, and sample data generation with rich inline UIs.
    25
    Elastic 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    DNS and email security checks for AI agents: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and more, with a fix for every finding. Pay per call in USDC on Base via x402, with dry run by default and a per-session spending cap.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides a zero-install security baseline for AI coding agents, with tools to retrieve curated security rules and check actions against them for self-correction.
    1
    Apache 2.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    Provides deterministic, standards-based calculations for data center critical power infrastructure. Enables site selection, generator sizing, UPS sizing, NFPA 110 compliance, and more via 50+ AI agents and 8 compound chains.
    -
  • A
    license
    A
    quality
    C
    maintenance
    8 standalone MCP servers for SMBs — Guardrails (prompt injection, PII, secrets detection), FinOps (AI cost tracking and budgets), Observability (agent tracing), Smart Router (17+ models, 9 providers), Trust Score (governance scoring 0-100), Memory (persistent agent memory), ThinkSecure (runtime security + SOC2/GDPR audit), and A2A Lite (agent-to-agent protocol). 37 tools total, TNC credits
    4
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables agents to inspect PDF, Microsoft Office, and Apple iWork documents without rendering them, providing page/slide counts, metadata, security signals, structure, and integrity as deterministic JSON via typed tools and batch operations.
    4
    46 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Self-hostable MCP server for WhisperGraph — a graph of 7.39B nodes / 39B edges mapping DNS, BGP, GeoIP, WHOIS, and threat intelligence. Six read-only tools (Cypher query + schema introspection + threat assessment), six resources, eight investigation prompts. stdio and Streamable HTTP transports.
    8
    71 npm
    1
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Provides a persistent memory and governance layer that allows AI coding agents to query documented architecture rules and validate code against team standards. It enables agents to verify compliance across categories like security and testing before suggesting changes to ensure consistency across development sessions.
    3
    17
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Provides Web3 founders with tools for project scoring, portfolio matching, fund matching, hackathon discovery, jurisdiction analysis, Twitter audit, and smart contract security review. Works with MCP-compatible assistants without transmitting file contents.
    8
    100 npm
    7
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for AgentMinds collective intelligence platform, enabling AI agents to scan websites for security/SEO/performance issues, pull personalized recommendations, and share findings across the network.
    7
    54 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to interact with security data pipelines and map data to the Open Cybersecurity Schema Framework (OCSF) through Tenzir. Provides seamless integration for processing and analyzing cybersecurity data using natural language.
    15
    42 PyPI
    8
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI assistants to search read-only used-car listings from Encar, Che168, Copart, and IAAI across South Korea, China, and US auctions, returning structured JSON for queries, vehicle details, price changes, brands, models, and market metadata. It runs locally over stdio and calls the apiauto.space API with quota-aware, security-filtered results.
    8
    635 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Uptime monitoring from your AI agent: create and diagnose checks (40 types: HTTP, TCP, DNS, SSL, ICMP, databases, message queues and more), read results and incidents, and manage status pages and maintenance windows. Built into the self-hostable SolidPing server, served over streamable HTTP at /api/v1/mcp.
    23
    33
    AGPL 3.0
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for https://oathe.ai security audits. Runtime behavioral analysis and security scanner for Ai systems. Check trust scores before installing MCP servers, plugins, or AI agent skills.
    5
    14 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Free Industry 4.0 / IIoT tools, no API key or account: lint MQTT Sparkplug B topics, check a Unified Namespace (UNS) for naming and hierarchy problems, and run an industrial AI-readiness diagnostic for manufacturing digital transformation and smart-factory projects. Works in Claude Code, Codex and any MCP client.
    3
    196 npm
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.
    10
    8
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A Model Context Protocol server for Conan package manager integration, enabling dependency management, project creation, and security scanning via natural language.
    7
    11
    MIT