Skip to main content
Glama
116,863 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    A
    maintenance
    . A good description should be concise and describe what the server enables users to do, e.g. * Enables to interact with WordPress sites...' Then a huge block? Actually the user message includes the README content inside tags, then after the readme, there is a large block of text starting with '{
    7,061 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.
    MIT
  • -
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables automated testing and coverage reporting for MCP services with test execution, file generation, and mock service creation. Provides comprehensive testing infrastructure including Jest integration, coverage reports, and health checks for the MCP ecosystem.
    -
  • A
    license
    A
    quality
    D
    maintenance
    Security auditor for CI ecosystems that detects supply-chain and injection flaws in CI/CD configuration files across seven CI platforms, providing taint analysis, remediation, and compliance scoring.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Record an agent's MCP tool-call workflow once, replay it deterministically for zero tokens, and get a receipt — a snapshot-testing and deterministic-execution layer for Agent Skills.
    5
    120 npm
    3
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    An MCP server that enables AI assistants to discover and execute Nox sessions for project automation tasks like testing, linting, and building. It provides tools to list available sessions and run them using specific Python versions, tags, or keyword expressions.
    2
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to interact with Appcircle mobile CI/CD platform for build management, signing identities, testing distribution, and reporting.
    25
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Uptime monitoring your AI agent can set up: create HTTP, SSL, ping, TCP and DNS monitors checked from multiple regions, run checks on demand, read and acknowledge incidents, manage cron heartbeats, maintenance windows and status page updates.
    56
    1,193 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Before you move to Python 3.15 (or 3.15t), find every dependency with no wheel for it on your platforms — and the bump that fixes it. CLI, GitHub Action, MCP server.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to interact with TrafficMorph for load-testing and CI-failure triage, including run management, profile lifecycle, and domain verification through natural language.
    25
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables reviewing GitHub Actions workflows for outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.
    3
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    30
    147 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to manage website deployments over SFTP/FTPS by listing sites, testing connections, comparing files, previewing changes with approval tokens, creating SHA-256 verified backups, and executing authorized uploads.
    7
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A production-ready MCP server for Jenkins that enables managing jobs, pipelines, builds, and nodes through natural language, with configurable security and guardrails.
    24
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP security trust layer. Continuously monitors 800+ MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift, and publisher posture. Ships a GitHub Action policy gate for PR-level allow/warn/block decisions. 5 MCP tools, no API key required.
    8
    107 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables offline auditing of GitHub Actions workflows through MCP, surfacing security and correctness findings with exact file/line locations and fixes, explaining cron schedules, visualizing job dependencies, reviewing token permissions, planning commit-SHA pins, and previewing safe patches proven by re-linting.
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI coding agents to deploy and manage full multi-service applications on Constructor from a single request, covering image builds, service configuration, start/stop lifecycle, logs, and file syncing on research desks. It handles browser-based sign-in and token renewal automatically so agents can inspect deployments and report results without manual setup.
    14
    1,098 npm
    MIT