Skip to main content
Glama
116,804 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    Enables LLM agents to programmatically inspect, debug, and test other MCP servers by wrapping the MCP Inspector CLI. Supports listing and calling tools, reading resources, and testing prompts on both local and remote MCP servers.
    6
    5 npm
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to register prompts for security verification, checking for hidden injections, data exfiltration patterns, and jailbreak attempts, then generate embed codes for displaying security badges on websites.
    4
    -
  • A
    license
    A
    quality
    D
    maintenance
    A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.
    42
    103 npm
    13
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that enables automating Capture One Pro on macOS, providing tools for reading and editing images, managing layers/masks, recipes, and processing with risk-tiered write gating.
    18
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform automated web testing by controlling a Chrome browser to navigate, interact with pages, capture screenshots, extract console logs, and simulate mobile devices for responsive design testing.
    7
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables users to manage equity holdings, execute trades, and track market data on Groww using natural language. It supports mutual fund investments and SIP management, including a mock mode for risk-free testing.
    23
    26 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    MCP server that enables browser automation and web testing on ARM64 devices like Raspberry Pi, allowing users to navigate websites, take screenshots, execute JavaScript, and perform UI testing via Claude.
    22
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI clients to access modular tools for file and data handling, statistical analysis, local NLP, automation, and system information over stdio or HTTP, with automatic module discovery and built-in sandboxing and security controls.
    31
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables natural language interaction with the QIT CLI for testing WordPress/WooCommerce plugins. Supports running security, e2e, and activation tests, managing test environments, and accessing test results through conversational commands.
    22
    1
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Enables cryptocurrency trading on Bybit exchange through comprehensive market data access, account management, and automated trading operations. Features smart position validation, trailing stop losses, and risk management tools with demo mode support for safe testing.
    21
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.
    40
    2
    MIT
  • A
    license
    C
    quality
    A
    maintenance
    A lightweight bridge enabling AI agents to perform real-world tasks on Android devices such as app navigation, UI interaction, and automated QA testing without requiring computer-vision pipelines or preprogrammed scripts.
    14
    915
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Forked from https://github.com/epaproditus/google-workspace-mcp-server The deletion and updates on Google Calendar were removed since there were no scope to prevent deletion whilst maintaining creation capabilities.
    7
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Maestro is the simplest and most effective UI testing framework for Mobile and Web. Maestro MCP allows you to control emulators, interact with apps, write and automatically debug UI tests on Claude Code, Cursor or Windsurf.
    16,335
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables natural language-driven automation of e-commerce data analysis, allowing users to query products, analyze orders, and generate business insights for Pinduoduo and Douyin shops. Supports offline testing with mock data across MCP-compatible clients.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Converts VSCode into an MCP server that enables external clients to remotely execute VSCode internal commands, query workspace information, and interact with the editor through HTTP streaming. Built on the FastMCP framework with security controls and real-time monitoring.
    63
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Integrates SOAR (Security Orchestration, Automation and Response) capabilities into AI clients, enabling security playbook execution, event management, and threat intelligence queries. Provides a complete security incident response platform through natural language interactions.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Integrates Security Orchestration, Automation and Response (SOAR) platform capabilities into AI clients like Claude Desktop and Cherry Studio. Enables users to execute security playbooks, manage security events, and perform automated threat response through natural language interactions.
    17
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to create, update, and organize short links, read click statistics, run pre-campaign launch checks, and check link health and URL safety. Also supports generating QR codes, building bio pages, and managing campaigns, UTM presets, and A/B tests.
    369 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to control real iPhones and simulators on macOS, allowing for UI interaction, testing, and automation.
    65 npm
    95
    MIT
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Provides access to 13+ penetration testing and security audit tools through a unified MCP interface. Enables security professionals to perform vulnerability scanning, web fuzzing, network reconnaissance, and other security assessments through containerized tools like Nuclei, Nmap, SQLMap, and FFUF.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables automated end-to-end testing powered by Playwright where test cases are defined in natural language and executed by AI. Uses lightweight snapshot analysis with vision mode fallback for sophisticated testing scenarios.
    3
    Apache 2.0
  • -
    license
    Not graded
    quality
    Not graded
    maintenance
    A custom MCP server that provides high-level tools for controlling Shopmium and Quoty apps on Android emulators, allowing for automated app navigation, interaction, and testing without needing to handle low-level implementation details.
    -