Skip to main content
Glama
116,804 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    C
    quality
    C
    maintenance
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    65
    702 npm
    7
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables automated review and analysis of network security controls (AWS Security Groups, Network ACLs) using natural language queries. Supports NSC configuration reviews, network segmentation testing, and identifying security gaps through conversational LLM interaction.
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    An AI-powered security agent that utilizes MCP tools and Groq LLMs to analyze Azure infrastructure, audit security groups, and identify storage misconfigurations. It enables users to perform natural language security assessments and ensure compliance with CIS Azure best practices.
    -
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to run read-only AWS security audits and receive normalized, severity-ranked findings about account posture, such as stale access keys, missing MFA, public buckets, open security groups, and CloudTrail coverage.
    11
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Orchestrates multiple AWS security services to provide comprehensive security assessments, threat analysis, and multi-framework compliance monitoring. It enables users to perform automated remediation recommendations and incident investigations through a unified Model Context Protocol interface.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.
    5
    4 npm
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to assess AWS environments against the AWS Security Reference Architecture (SRA) by providing tools to discover, describe, and run security checks across AWS services and accounts.
    5
    29 PyPI
    3
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that enables LLMs to search, fetch, and act on Google Workspace (Drive, Gmail, Docs, Sheets, etc.) with rich, one-call results and file deposits to disk, reducing context usage.
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Google Workspace security-audit MCP server — read-only visibility into account locks, suspicious logins, and external file sharing, built on the Admin SDK Reports API (audit activities).
    21
    93 PyPI
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables MCP clients to inspect and operate Kubernetes clusters across multiple contexts, with read-only/read-write/admin access modes and security flags controlling namespaces, contexts, deletes, applies, and exec.
    10
    386 npm
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to analyze AWS IAM policies and CloudFormation templates for security risks.
    2
    34 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-capable agents to operate PostgreSQL and PgBouncer clusters on Kubernetes—covering discovery, pooling, tuning, backups/PITR, DR, and lifecycle—with safe-by-default read-only mode and granular opt-in security controls.
    9
    123 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A local-first AWS security tool that uses graph theory to discover attack paths (e.g., Internet → Role → DB) and prioritize remediations. It allows agents to perform read-only security audits and generate Terraform fixes without data exfiltration.
    15
    17 PyPI
    4
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enterprise-grade Azure security assessment toolkit with multi-location scanning, IMDS exploitation, attack path analysis, and compliance reporting. Enables authorized penetration testing and compliance audits across all Azure regions.
    43
    14 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A Model Context Protocol server that enables interaction with Helm charts on Artifacthub, providing tools for retrieving chart information, default values, and templates through natural language queries.
    5
    15
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI coding assistants to scaffold, build, validate, and deploy Zalo Mini Apps through cloud APIs. It supports QR authentication, asset synchronization, bundle size checks, and chunked uploads for testing deployments.
    11
    1
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    MCP server for Huawei Cloud GaussDB database, offering 24 tools for connection testing, queries, transactions, metadata, diagnostics, and user management, plus schema resources.
    24
    -
  • A
    license
    B
    quality
    D
    maintenance
    A Model Context Protocol server for Microsoft SQL Server and Azure SQL Database with permission-based access modes (read-only, DML, full) and security features like SQL classification and connection locking.
    7
    14 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Exposes Cloudflare DNS, security, redirects and zone-settings functionality as structured tools that AI assistants like Claude Desktop can invoke directly.
    18
    23 npm
    MIT