Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.
    -
  • A
    license
    C
    quality
    D
    maintenance
    Enables AI agents to orchestrate 25+ security tools for penetration testing through natural language, automating scans, vulnerability detection, and report generation.
    31
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to perform autonomous penetration testing on any Linux distribution via SSH with persistent tmux sessions, supporting interactive tools like Metasploit, reverse shells, and complex multi-step security workflows.
    18
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Autonomous pentests from one command: real security tools, working PoCs, and audit-ready reports, all driven via MCP.
    451 PyPI
    1,807
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Bridges the ChatGPT web UI to a local development environment over MCP, letting the model read and patch files, run real shell commands and terminals, execute tests, and control the desktop (screen, mouse, keyboard, clipboard) within user-approved folders. It adds parallel workers, goal/loop long-task control, plugin tools, and a security-hardening layer with risk-tiered shell policy, audit logging, and credential sanitization.
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Exposes browser-testing capabilities—including navigation, clicking, typing, form submission, verification, and screenshots—so clients can discover the supported Playwright actions. It also builds structured testing requirements from a supplied website and task description, ready for plan generation and execution.
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to run bounded security reconnaissance tools against a local OWASP Juice Shop target via MCP, including HTTP checks, header inspection, Nmap scanning, and web enumeration, without granting arbitrary shell access.
    ISC
  • F
    license
    Not graded
    quality
    D
    maintenance
    AI-powered autonomous penetration testing framework with 80+ professional security tools across reconnaissance, web application testing, exploitation, and forensics. Integrates with LM Studio for intelligent vulnerability assessment and automated security testing workflows.
    3
    -
  • A
    license
    B
    quality
    B
    maintenance
    On Board is a local MCP server that gives multiple AI agents and IDEs a shared project memory, ticket queue, and handoff history, so agents can seamlessly continue each other's work. It supports agent-to-agent wake events, enabling autonomous workflows like reject-fix-resubmit cycles without human relay.
    30
    4
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    fomox402 broker + MCP server for last-bidder-wins games on Solana. Drop one URL into Claude / Cursor / Goose / Cline and the agent auto-registers a Privy-managed Solana wallet (faucet-funded with ~0.0024 SOL + $fomox402), bids via x402 micropayments, claims dividends, and plays autonomously. 14 tools wired up — register_agent, place_bid, claim_winnings, claim_dividend, list_games, get_me, etc. Str
    17
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP-capable agents to locate and interact with Android and Windows GUI elements semantically—tapping, typing, waiting, and asserting—without hard-coded coordinates or model-based element localization.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables any MCP client to operate DeepSeek Harness sessions, execute tasks, and manage workspaces through an MCP server running inside the dsh process.
    566 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
    1
    1
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    An AI-powered penetration testing reasoning engine that provides automated attack path planning, step-by-step guidance for CTFs/HTB challenges, and tool recommendations using Beam Search and MCTS algorithms.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to request physical-world tasks such as 3D printing, CNC fabrication, assembly, measurement, testing, on-site verification, and receive-repack-ship services from a human operator, with fixed-price quotes, status tracking, and evidence packages.
    MIT