Skip to main content
Glama
120,548 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for scanning smart contracts for security vulnerabilities. It detects issues like reentrancy, overflow, access control, and provides security scores with NEAR-specific recommendations.
    3
    40 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables LLMs to make HTTP requests with OAuth2, session cookies, retry logic, and cURL command generation, while providing security features like SSRF protection and TLS enforcement.
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Security intelligence API for AI models. CVE lookup with EPSS/KEV, domain recon (DNS, WHOIS, SSL, subdomains, WAF), and code security checks (secrets, injection, headers). 16 tools, no API key required.
    55
    37
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to interact with Fastly's CDN API through the Model Context Protocol, allowing secure management of CDN services, caching, security settings, and performance monitoring without exposing API keys.
    2
    26 npm
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables interaction with Webhook.site to create, manage, and monitor endpoints for capturing HTTP requests, emails, and DNS lookups. It provides 16 tools for testing webhooks and inspecting incoming data through the Model Context Protocol.
    24
    41 PyPI
    12
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables local analysis of OpenAPI 3 and Swagger 2 JSON/YAML spec files on disk, with no remote fetching of specs or credentials. It groups endpoints by tag, flags operations that appear to lack security, lists deprecated operations, and produces short markdown cheat sheets for agents.
    4
    MIT
  • F
    license
    A
    quality
    B
    maintenance
    Enables LLMs to dereference and query OpenAPI/Swagger specifications, search endpoints and schemas, validate payloads, extract security schemes, and generate production-ready integration code in multiple languages.
    8
    -
  • A
    license
    A
    quality
    D
    maintenance
    A comprehensive suite of HTTP and API testing tools that enables AI agents to perform requests, check endpoint health, and decode JWTs. It also provides utilities for URL parsing and detailed security analysis of HTTP response headers.
    5
    61 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for API test case generation from Swagger/OpenAPI specs. Parses Swagger 2.0 and OpenAPI 3.x, generates test cases across 8 categories (positive, negative, boundary, auth, security, idempotency, pagination, business logic), and exports to Postman, TestRail, Allure, k6, pytest, Gherkin, and CSV. Supports internal corporate APIs with auth headers. Auto-saves export files to your working di
    10
    10 npm
    2
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Exposes Burp Suite's REST API to AI assistants, enabling users to trigger vulnerability scans, monitor progress, and manage security tasks through natural language. It also provides programmatic access to Burp's security knowledge base for querying vulnerability definitions and remediation advice.
    8
    1
    -
  • F
    license
    A
    quality
    Not graded
    maintenance
    Enables management of penetration testing reports and vulnerabilities through a REST API, supporting CVSS 3.1 scoring, HTML formatting, and secure JWT authentication for comprehensive security assessment documentation.
    9
    3 npm
    -
  • A
    license
    B
    quality
    C
    maintenance
    Enables AI agents to explore any OpenAPI 3 spec, inspect endpoints and schemas, generate TypeScript types, and make authenticated API calls using credentials mapped to the spec's security schemes.
    7
    10 npm
    MIT
  • F
    license
    B
    quality
    D
    maintenance
    An MCP server for checking OWASP Top 10 vulnerabilities during API development testing. It analyzes API information and returns security assessment results to help developers identify potential security issues.
    2
    1
    -
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI coding agents to list, inspect, triage, and bulk-update security findings and issue groups from Sourcery's public security API, with aggregate counts, cursor pagination, and generated minimal-change fix prompts. It exposes 12 tools wired to a pinned OpenAPI snapshot, running over stdio or Streamable HTTP.
    12
    76 npm
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.
    11
    1
    MIT
  • -
    license
    B
    quality
    Not graded
    maintenance
    MCP server for Akamai APIs. 198 tools covering Property Manager, Edge DNS, CPS, WAF, and reporting. Built with TypeScript, featuring modular architecture, comprehensive testing, and multi-account support. Make Akamai accessible to AI assistants.
    1
    9 npm
    10
    -
  • A
    license
    C
    quality
    D
    maintenance
    An MCP server providing complete access to the RequestRepo toolset for managing HTTP requests, DNS configurations, files, and pings. It enables users to capture, inspect, and share web requests and DNS records directly through AI clients.
    16
    15
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    A Model Context Protocol server designed for testing backend APIs for security vulnerabilities like authentication bypass, injection attacks, and data leakage.
    14
    16
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    DreamFactory MCP Server enables AI assistants like Claude to directly query your databases through DreamFactory's auto-generated REST APIs. This Node.js server implements the Model Context Protocol (MCP), allowing natural language database interactions while maintaining enterprise-grade security.
    7
    Apache 2.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    Gorgon Scout is a Windows web-application and API security scanner (DAST). This connector exposes it as MCP tools, so your AI assistant can record a target you are authorised to test, run the scan, stream findings, and produce a report. Capture needs no proxy or certificate setup, and it intercepts HTTP/1.1, HTTP/2, and HTTP/3 (QUIC). Works with the free Claude Desktop plan.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables active, authorized security testing of remote MCP servers' OAuth authorization flows, reporting results as JSON, SARIF, and Markdown. It runs checks for refresh token rotation, redirect URI strictness, PKCE enforcement, token audience, throttling, and consent CSRF.
    274 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP Portico is an MCP server that turns OpenAPI descriptions or inspected backend source code into policy-controlled MCP connections, exposing multiple backend systems with tenant isolation and credential security.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Converts SOAP WSDL services into a REST interface and provides MCP tools to describe, invoke, and manage SOAP operations with caching and WS-Security support.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to run deterministic security reviews of OpenAPI and Swagger documents, including scanning specs, listing and explaining OWASP-mapped rules, checking authentication coverage, and generating sample audits.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Audits any MCP server (stdio or Streamable HTTP, legacy or modern era) with wire-level conformance, security, and behavior-regression checks, producing a fingerprinted delivery report and CI regression suite.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.
    55 npm
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables users to capture hidden Shadow APIs from websites, trace authentication token dependencies, audit security and PII issues, run offline mock servers, and export typed Python/TypeScript SDKs, OpenAPI 3.1 specs, and MCP tools.
    16 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Professional security testing server with 50+ integrated tools for web application vulnerability scanning, reconnaissance, fuzzing, and API testing. Enables comprehensive bug bounty hunting workflows including subdomain enumeration, XSS/SQLi detection, and automated security assessments.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes selected operations of an existing REST/OpenAPI app as MCP tools with generated schemas, permission annotations, and a risk class, requiring explicit opt-in before anything is listed and a second flag for destructive calls. Enforces security-first guardrails such as environment-injected auth, a single confined base URL, timeouts, response caps, rate limiting, and a local test console for trying tools.
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for the comprehensive analysis of Swagger 2.0 and OpenAPI 3.x contracts. It allows users to extract detailed information about endpoints, request/response schemas, parameters, and security configurations from API documentation.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    This MCP server enables interaction with Google's Verified Access API, allowing users to verify the security posture of Chrome OS and Chrome Browser devices through natural language commands.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for AI-powered API testing that enables automated positive, negative, and security testing directly from AI chat interfaces. It supports multiple AI providers and generates detailed security reports.
    22 npm
    -