Skip to main content
Glama
121,110 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    C
    maintenance
    Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Security auditor for CI ecosystems that detects supply-chain and injection flaws in CI/CD configuration files across seven CI platforms, providing taint analysis, remediation, and compliance scoring.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Uptime monitoring your AI agent can set up: create HTTP, SSL, ping, TCP and DNS monitors checked from multiple regions, run checks on demand, read and acknowledge incidents, manage cron heartbeats, maintenance windows and status page updates.
    56
    1,795 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables reviewing GitHub Actions workflows for outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.
    3
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.
    30
    120 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    A production-ready MCP server for Jenkins that enables managing jobs, pipelines, builds, and nodes through natural language, with configurable security and guardrails.
    24
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP security trust layer. Continuously monitors 800+ MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift, and publisher posture. Ships a GitHub Action policy gate for PR-level allow/warn/block decisions. 5 MCP tools, no API key required.
    8
    99 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables offline auditing of GitHub Actions workflows through MCP, surfacing security and correctness findings with exact file/line locations and fixes, explaining cron schedules, visualizing job dependencies, reviewing token permissions, planning commit-SHA pins, and previewing safe patches proven by re-linting.
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI coding agents to run fast, sandboxed pre-flight validation—tests, type-checking, linting, security audits, Git safety scans, and fix suggestions—before committing or pushing code, with instant caching and optional Docker isolation.
    10
    12 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD integration.
    27
    44 PyPI
    4
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Safety-first GitOps operations for ArgoCD via the Model Context Protocol. Enables listing, diagnosing, syncing, and managing ArgoCD applications with progressive disclosure and defense-in-depth security.
    15
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Connects AI assistants to GitHub repositories, pull requests, issues, commits, and code search while enabling repository visibility controls, CI/CD monitoring, sandboxed local filesystem access, and code quality/security analysis.
    13
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A specialized MCP server for QA engineering. It provides tools for user story analysis, test strategy, BDD/Gherkin scenarios, contract testing, integration tests, performance plans, security checklists, and CI/CD pipeline generation, accessible from any MCP-compatible IDE or client.
    11
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to administer GitHub Enterprise (Cloud & Server) — organizations, members, teams, repositories, rulesets, security alerts, and Actions — through guarded MCP tools that are read-only, org-scoped, audited, and human-confirmed by default. It also ships an opinionated security-posture baseline that scores a live organization and can apply hardening fixes.
    23
    457 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A local-first AWS security tool that uses graph theory to discover attack paths (e.g., Internet → Role → DB) and prioritize remediations. It allows agents to perform read-only security audits and generate Terraform fixes without data exfiltration.
    15
    21 PyPI
    4
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to interact with devpipe, a local pipeline runner, allowing them to list tasks, run pipelines, validate configurations, debug failures, analyze security findings, and generate CI/CD configs through natural language.
    13
    10 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables Codex or Claude users to deploy applications and Compose services, inspect logs/databases/backups, patch environment variables, and manage Cloudflare DNS records and HTTPS domains through natural-language conversations, running locally with user-supplied credentials and preview/read-only safeguards.
    9
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Static security review of Electron apps and binaries: compares two builds and reports changed IPC channels, preload bridge members, window settings, fuses and network hosts with file and line, plus a CI policy gate, without executing the target.
    16
    10
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Enables Claude to operate a Hetzner estate end to end — Cloud servers, Cloudflare and Hetzner DNS, SSH hosts, and Coolify deployments, plus multi-step recipes — through 53 tools. Writes are dry-run until confirmed, protected servers refuse destructive calls, and every call is audited with secrets masked.
    6
    173 npm
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    The Model Context Protocol (MCP) Jenkins integration is an open-source implementation that bridges Jenkins with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with Jenkins tools while maintaining data privacy and security.
    36
    158
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Security scanner and MCP server that catches dangerous patterns in MCP servers and AI agent projects, such as leaked secrets, shell execution, and prompt-injection text. Runs as both a CLI and MCP server with CI-friendly severity gates.
    2
    1
    MIT
  • A
    license
    C
    quality
    C
    maintenance
    Enables AI assistants to control and automate cPanel hosting through its UAPI and API2 engines, supporting natural-language management of files, databases, DNS, email, SSL, Git deployment, Node.js, Python, Laravel, and GitHub CI/CD with built-in safety guardrails.
    214
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    MCP server for ArmorCode security platform enabling finding triage, scans, exceptions, risk scores, and release gate checks via natural language.
    37
    242 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Audits infrastructure configurations (Dockerfiles, GitHub Actions, Kubernetes, Terraform/Compose) against 14 deterministic security rules, returning BLOCK/REVIEW/PASS verdicts and signing attestations. Helps agents verify deployment configs before applying them.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to scan projects for leaked secrets and manage security incidents using GitGuardian's comprehensive API. It supports automated secret detection, honeytoken creation, and remediation workflows to secure codebases without context switching.
    43
    MIT