Skip to main content
Glama
116,913 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    A
    maintenance
    Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.
    9
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enterprise-grade Azure security assessment toolkit with multi-location scanning, IMDS exploitation, attack path analysis, and compliance reporting. Enables authorized penetration testing and compliance audits across all Azure regions.
    43
    14 npm
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    53
    44
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Deterministic encode, decode, hash and convert for agents, on the same pipeline engine as the String Utility Belt web app, CLI and editor extensions: a pipeline built and checked in the browser runs unchanged from its share link. Base64/hex/URL, JWT, hashes, JSON/YAML/CSV/XML, dates and regex; tools to search, describe and run utilities or whole pipelines, and to detect input formats. Runs locally
    12
    5
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Let AI agents search and read your mail: on-premises Microsoft Exchange (EWS, no cloud API or admin setup) and any IMAP mailbox, tested on Mail.ru and Gmail. Text inside PDF, Office and ZIP attachments is searchable in Russian and English. Runs from a local copy, and read-only is enforced at the protocol level.
    9
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Read-only MCP server for self-hosted SonarQube Community Build 26.4+: lets AI agents (Claude Code, Cursor, Copilot) read issues, security hotspots, rules and code snippets to fix findings locally
    13
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A full finance desk for your AI agent: 355 tools in one free server with no API key, reading SEC filings, earnings guidance, insider trades, options, rates and macro data from the source, plus quant analytics and backtest validation. The agent sees 5 tools and searches the rest, so it stays light on context.
    5
    3,392 npm
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Searches hotels and vacation rentals with nightly and total rates, ratings, amenities, and detailed property information through natural language in any MCP client.
    1
    138 npm
    19 PyPI
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Publish web games on Gamealia from your AI coding assistant: analyze the project, integrate the SDK (or migrate from Poki/CrazyGames), run a desktop and mobile browser autotest, write the listing and upload the build for review. Developers keep 60-70% of the ad revenue, no exclusivity.
    2
    26
    840 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local design engine for AI Agents. Create, edit and export real, editable designs — social posts, flyers, print-ready PDFs — with your brand applied. Every design opens in a built-in editor, so you can click the text and fix it yourself instead of re-prompting. Bring in what you already have: InDesign, PSD, PPX and PDF files come in as editable designs. Runs on your machine, no account needed.
    19
    43
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables Claude and any other MCP client to place and control voice calls, run conferences, stream call audio to AI agents, build IVRs, read call records and recordings, manage phone numbers, SIP trunks, applications, sub-accounts and billing, and send SMS/MMS/RCS on a Vobiz account. Calling, messaging and account changes stay off until explicitly enabled, with every write confirmed, rate-limited and idempotent.
    106
    104 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables coding agents to read ground truth about a React design system — components, props, cva variants, tokens and docs — over MCP so they write UI that matches it. It also exposes a check_ui linter agents run on their own output, returning rule ids, locations and concrete fixes before review.
    5
    1,327 npm
    26
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for secure, just-in-time secret retrieval from 1claw vault and malicious content inspection, enabling AI agents to access secrets and security analysis.
    1
    1,515 npm
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI assistants to perform web searches on Perplexity.ai using browser automation instead of an official API. It supports persistent authenticated sessions and returns search results along with cited sources directly to the client.
    3
    51 npm
    13
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI coding agents to make evidence-aware design-pattern decisions by analyzing cases, comparing options, detecting misuse, stress-testing assumptions, planning adoption, writing ADRs, and generating evidence plans with transparent scoring.
    8
    5 npm
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to discover and analyze prediction markets, execute trades, and manage positions on Polymarket via the Model Context Protocol.
    7
    84 npm
    20
    MIT
  • F
    license
    A
    quality
    B
    maintenance
    Enables searching Japanese scientific articles and journals on J-STAGE, with tools for article search, journal search, and volume listing, returning metadata and links to full text on publisher sites.
    4
    -
  • A
    license
    A
    quality
    A
    maintenance
    Gives AI assistants and research code read-only, normalized access to trusted humanitarian datasets — 75 years of UNHCR displacement statistics, World Bank indicators, HDX crisis data on conflict, food security, funding and internal displacement, and ReliefWeb situation reports — through the Model Context Protocol. Unifies country codes to ISO3 with fuzzy English and Arabic name resolution, applies each dataset's correct aggregation semantics, and attaches a citable source and reproducible extraction manifest to every payload.
    24
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Provides read-only access to live Hylo protocol data on Solana mainnet, including hyUSD/xSOL/eHYUSD mint supplies, pause flags, Earn Pool NAV and pool holdings, and an address's direct SPL token balances for those mints. It answers queries and explains the core mechanism without connecting a wallet, building transactions, or signing anything.
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Check a backtest before trusting it: deflated Sharpe, CSCV overfitting, minimum track record length, breadth ceiling and paper-evidence checks. Deflated Sharpe and track record are tested in CI against the papers' worked examples, CSCV against CRAN pbo. Runs hosted with no signup, or fully on your machine in private local mode. Also reads SEC-reported company financials by ticker.
    19
    751 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
    21
    68
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    AI job search and job application tracker. Search live jobs by title, location, salary, date posted, and remote or on-site, and see each one checked on real data: pay against market rates, ghost-job signals, visa sponsorship history, and how well it matches your resume. Check how hiring software reads your resume, track applications, set follow-up reminders, and get email alerts.
    1
    24
    443 npm
    ISC
  • A
    license
    A
    quality
    C
    maintenance
    Provides AI assistants with access to ShopSavvy's comprehensive product data, pricing information, and historical price tracking, enabling product lookup by barcode or ASIN, current offers, price history, and scheduling for automatic monitoring.
    9
    144 npm
    9
    MIT