Skip to main content
Glama
116,578 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    Read-only MCP server for self-hosted SonarQube Community Build 26.4+: lets AI agents (Claude Code, Cursor, Copilot) read issues, security hotspots, rules and code snippets to fix findings locally
    13
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for secure, just-in-time secret retrieval from 1claw vault and malicious content inspection, enabling AI agents to access secrets and security analysis.
    1
    1,515 npm
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Gives AI assistants and research code read-only, normalized access to trusted humanitarian datasets — 75 years of UNHCR displacement statistics, World Bank indicators, HDX crisis data on conflict, food security, funding and internal displacement, and ReliefWeb situation reports — through the Model Context Protocol. Unifies country codes to ISO3 with fuzzy English and Arabic name resolution, applies each dataset's correct aggregation semantics, and attaches a citable source and reproducible extraction manifest to every payload.
    24
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
    21
    68
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enterprise-grade Azure security assessment toolkit with multi-location scanning, IMDS exploitation, attack path analysis, and compliance reporting. Enables authorized penetration testing and compliance audits across all Azure regions.
    43
    14 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables agents to discover, understand, and plan native Bitcoin staking on Stacks through a read-only interface combining live PoX state, bond manifests, yield scenarios, security guidance, and compatibility checks. It includes a goal-first concierge workflow and explicitly separates live, published, derived, and demo data.
    14
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    53
    44
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    An open-source MCP server that gives AI assistants comprehensive tools to read, write, run, and verify Godot projects, featuring a three-layer architecture (headless, editor, game bridge) with systematic security protections.
    26
    659 npm
    103
    MIT