Skip to main content
Glama
121,131 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
    7
    2,211 npm
    189
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Read-only MCP server for self-hosted SonarQube Community Build 26.4+: lets AI agents (Claude Code, Cursor, Copilot) read issues, security hotspots, rules and code snippets to fix findings locally
    13
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to access and utilize GovBR Design System documentation, including component details, accessibility guidance, and search functionality via Model Context Protocol.
    3
    7 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for secure, just-in-time secret retrieval from 1claw vault and malicious content inspection, enabling AI agents to access secrets and security analysis.
    1
    443 npm
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables natural-language management of Spaceship domains, DNS records, contacts, and marketplace listings through any MCP-compatible AI client. It adds TXT records without clobbering existing ones, restores records when a save fails, and can read API credentials from 1Password references.
    48
    100 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Gives AI assistants and research code read-only, normalized access to trusted humanitarian datasets — 75 years of UNHCR displacement statistics, World Bank indicators, HDX crisis data on conflict, food security, funding and internal displacement, and ReliefWeb situation reports — through the Model Context Protocol. Unifies country codes to ISO3 with fuzzy English and Arabic name resolution, applies each dataset's correct aggregation semantics, and attaches a citable source and reproducible extraction manifest to every payload.
    24
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
    21
    69
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enterprise-grade Azure security assessment toolkit with multi-location scanning, IMDS exploitation, attack path analysis, and compliance reporting. Enables authorized penetration testing and compliance audits across all Azure regions.
    43
    11 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables agents to discover, understand, and plan native Bitcoin staking on Stacks through a read-only interface combining live PoX state, bond manifests, yield scenarios, security guidance, and compatibility checks. It includes a goal-first concierge workflow and explicitly separates live, published, derived, and demo data.
    14
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    53
    43
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    An open-source MCP server that gives AI assistants comprehensive tools to read, write, run, and verify Godot projects, featuring a three-layer architecture (headless, editor, game bridge) with systematic security protections.
    26
    212 npm
    104
    MIT