Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    Unified penetration testing MCP server for Claude Desktop providing 34 security tools for reconnaissance, web scanning, code analysis, and authenticated testing.
    1
    -
  • A
    license
    A
    quality
    B
    maintenance
    Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.
    9
    Apache 2.0
  • F
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol server for automated security vulnerability assessment, combining OWASP Dependency-Check dependency scanning with custom code vulnerability detection, and generating detailed HTML and JSON reports.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server that extends kali-mcp with cloud (AWS/Azure/GCP), API/GraphQL/JWT, OSINT, container/K8s, IaC/SAST, mobile, binary analysis, and reporting tools, all accessible via an HTTP MCP endpoint.
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    A universal AI-powered testing server built on the Model Context Protocol (MCP). Allows AI agents to inspect, execute, test, monitor, debug, and report on software projects.
    3
    GNU Lesser General Public v2.1 only
  • A
    license
    A
    quality
    A
    maintenance
    Enables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.
    9
    43 npm
    5
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.
    14
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that scans codebases to extract structural information (classes, functions, etc.) with flexible filtering options and outputs in LLM-friendly formats.
    1
    2
    GPL 3.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables testing, explaining, debugging, and generating regular expressions directly within editors like Claude Code, Cursor, and VS Code Copilot, without leaving the editor.
    6
    5 npm
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Developer-focused MCP server for code analysis and local engineering workflows. Provides tools for JSON repair, encoding fixes, import organization, format conversion, diff inspection, and regex testing.
    23
    352 npm
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A Model Context Protocol server that generates and runs mock API servers from API documentation like OpenAPI/Swagger specs, enabling developers and AI assistants to quickly spin up mock backends for development and testing.
    24 PyPI
    17
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables coding agents to navigate and query source code by providing context, symbols, and call graph information through a graph index.
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server that performs mutation testing and diff scoping to score how trustworthy tests are for detecting regressions in changed code.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to query TypeScript and JavaScript code intelligence—type diagnostics after edits, go-to-definition, references, hover information, and document symbols—through MCP tools.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Model Context Protocol server for security research automation, integrating multiple security testing tools into LLM-driven workflows for secret scanning, static analysis, and vulnerability discovery.
    57
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides instant access to MCP development documentation, best practices, production checklists, common mistakes, architecture patterns, and testing strategies to help developers build production-ready MCP servers.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Multi-system MCP server for reading and writing ABAP source via SAP ADT, with a local web admin, browser-based login, and tools for source navigation, editing, activation, testing, and debugging.
    1
    MIT