Skip to main content
Glama
117,328 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Search for known security vulnerabilities on the NSIS website" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    C
    maintenance
    Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    30
    147 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Checks the outcome after an agent handoff, when a request, 200 or ack only shows the handoff. Reads one field of one exact public HTTPS JSON record, with a same-site known-good control, for 20-120 s. Returns PROVED, DISPROVED or INCONCLUSIVE with a signed receipt you can verify. 5 free checks, then USD 1 per completed check, by card (Stripe Checkout) or existing Link wallet. INCONCLUSIVE is free.
    10
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol server implementation that allows AI models to interact with and manage Spinnaker deployments, pipelines, and applications through a standardized interface.
    5 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server wrapping the full VitoDeploy REST API to manage projects, servers, sites, databases, services, workers, SSL, DNS, and more through any MCP-compatible agent, with 108 tools covering every endpoint.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    . A good description should be concise and describe what the server enables users to do, e.g. * Enables to interact with WordPress sites...' Then a huge block? Actually the user message includes the README content inside tags, then after the readme, there is a large block of text starting with '{
    7,447 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive GitHub workflow automation including Actions monitoring, PR management, code search, file operations, and repository management through a code-first architecture that reduces token usage by 98%.
    429 PyPI
    5
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to interact with Argo CD applications, managing clusters, applications, and resources through natural language.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables an AI to statically audit GitHub Actions workflow files, parsing YAML with accurate line numbers and reporting findings about on: key quirks, expression injection risks, unpinned actions, effective token permissions, and cron scheduling.
    MIT
  • F
    license
    Not graded
    quality
    Not graded
    maintenance
    A remote MCP server that provides AI agents access to the Rootly API for incident management, allowing users to query and manage incidents, alerts, teams, services, and other incident management resources through natural language.
    -
  • F
    license
    A
    quality
    A
    maintenance
    AI code review against your team's own rules from your repository, before the pull request: two tools, review_changes and get_team_rules. Closed-source binary distributed via GitHub Releases; published in the official MCP Registry as dev.reviewgate/reviewgate.
    2
    -
  • A
    license
    A
    quality
    D
    maintenance
    Security auditor for CI ecosystems that detects supply-chain and injection flaws in CI/CD configuration files across seven CI platforms, providing taint analysis, remediation, and compliance scoring.
    2
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Generates a daily standup note from GitLab merge request or GitHub pull request state: what is ready to merge, what is blocked, what is stale, and what is waiting on your review. When CI is red it opens the failed job's log and reports the error lines, so the note says why the pipeline failed rather than just that it did.
    3
    135 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to audit Kubernetes manifests for configuration traps that pass linters but silently break production, via read-only tools to audit YAML, list known traps, and explain trap details.
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Record an agent's MCP tool-call workflow once, replay it deterministically for zero tokens, and get a receipt — a snapshot-testing and deterministic-execution layer for Agent Skills.
    5
    125 npm
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Provides disposable email inboxes for AI agents to automatically receive and extract OTPs and magic links, enabling seamless email verification during autonomous workflows.
    3
    345 npm
    MIT