Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.
    42
    103 npm
    13
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP-capable agents to locate and interact with Android and Windows GUI elements semantically—tapping, typing, waiting, and asserting—without hard-coded coordinates or model-based element localization.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables LLM agents to programmatically inspect, debug, and test other MCP servers by wrapping the MCP Inspector CLI. Supports listing and calling tools, reading resources, and testing prompts on both local and remote MCP servers.
    6
    5 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform automated web testing by controlling a Chrome browser to navigate, interact with pages, capture screenshots, extract console logs, and simulate mobile devices for responsive design testing.
    7
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables users to manage equity holdings, execute trades, and track market data on Groww using natural language. It supports mutual fund investments and SIP management, including a mock mode for risk-free testing.
    23
    26 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    MCP server that enables browser automation and web testing on ARM64 devices like Raspberry Pi, allowing users to navigate websites, take screenshots, execute JavaScript, and perform UI testing via Claude.
    22
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Enables cryptocurrency trading on Bybit exchange through comprehensive market data access, account management, and automated trading operations. Features smart position validation, trailing stop losses, and risk management tools with demo mode support for safe testing.
    21
    MIT
  • A
    license
    C
    quality
    B
    maintenance
    A lightweight bridge enabling AI agents to perform real-world tasks on Android devices such as app navigation, UI interaction, and automated QA testing without requiring computer-vision pipelines or preprogrammed scripts.
    14
    915
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Maestro is the simplest and most effective UI testing framework for Mobile and Web. Maestro MCP allows you to control emulators, interact with apps, write and automatically debug UI tests on Claude Code, Cursor or Windsurf.
    16,347
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to control real iPhones and simulators on macOS, allowing for UI interaction, testing, and automation.
    65 npm
    95
    MIT
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Provides access to 13+ penetration testing and security audit tools through a unified MCP interface. Enables security professionals to perform vulnerability scanning, web fuzzing, network reconnaissance, and other security assessments through containerized tools like Nuclei, Nmap, SQLMap, and FFUF.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables automated end-to-end testing powered by Playwright where test cases are defined in natural language and executed by AI. Uses lightweight snapshot analysis with vision mode fallback for sophisticated testing scenarios.
    3
    Apache 2.0
  • -
    license
    Not graded
    quality
    Not graded
    maintenance
    A custom MCP server that provides high-level tools for controlling Shopmium and Quoty apps on Android emulators, allowing for automated app navigation, interaction, and testing without needing to handle low-level implementation details.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to automate product listing on Shopee via the Shopee Open Platform API, including OAuth2 authentication, product creation, image upload, and category lookup, with a mock mode for testing.
    -
  • -
    license
    Not graded
    quality
    Not graded
    maintenance
    A Flask-based MCP server designed for testing deployment on Google App Engine. Provides a deeplink checking endpoint that accepts flattened JSON parameters and forwards them as nested objects to external APIs.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Lets an AI agent ask its owner first, on their phone, before doing something irreversible: ask_approval blocks until a person answers and distinguishes DENIED from NO ANSWER, so a timeout is never read as consent. send_notification covers one-way alerts with priorities and quiet hours.
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Remote MCP server for the allover.art print-on-demand store: search 30,000+ all-over-print 100% cotton tees, build and edit a cart, apply promo codes and prepare checkout.
    2
    22
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to search BilkaToGo's catalogue and weekly offers, manage a shopping cart, choose delivery or pickup slots, and reorder past purchases, while leaving checkout and payment on the website.
    16
    647 npm
    7
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to drive the 1C:Enterprise test client directly, opening forms, reading and modifying data, working with tables, and recording or replaying action scenarios. Connects to local or remote test clients over their network protocol without a testing manager.
    11
    80
    AGPL 3.0