Skip to main content
Glama
116,662 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    A comprehensive implementation of Model Context Protocol servers enabling natural language interactions with security platforms including Splunk SIEM, CrowdStrike EDR, and Microsoft MISP for threat intelligence querying and analysis.
    27 npm
    22
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Enables AI models to dynamically create and execute their own custom tools through a meta-function architecture, supporting JavaScript, Python, and Shell runtimes with sandboxed security and human approval flows.
    5
    10
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    IMCP - Insecure Model Context Protocol The DVWA for AI Security! Welcome to IMCP – a deliberately vulnerable framework that exposes 16 critical security weaknesses in AI/ML systems. Whether you're a security researcher, developer, or educator, IMCP is your playground for hands-on learning about real
    15
    4
    JavaScript
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables agents and MCP clients to safely execute and verify multi-language code in a deterministic sandbox, using AST security analysis to block dangerous system calls and capture isolated execution telemetry.
    7
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to execute arbitrary Python code securely in a sandboxed environment with resource limits and security constraints via MCP protocol.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A proof-of-concept tool that integrates AI into security operations, allowing users to perform offensive security tasks like network scanning and reconnaissance through natural language commands to GitHub Copilot.
    5
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to safely execute Python code and shell commands in an ephemeral, isolated scratchpad with pre-execution AST security checks, timeout enforcement, token-shielded output, and file diff tracking. It also exposes static code-security inspection to flag forbidden imports and reflective escape attempts before execution.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables deterministic headless operations on AutoCAD 2021 (English) drawings, including inspection, mutation, parametric drawing, topology auditing, preview capture, and validated AutoLISP execution with rollback and security safeguards.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    MCP server for security bug-finding that proves every finding by running exploits, enabling agents to verify changes and find bugs with execution-based evidence.
    9
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables running ephemeral Kubernetes Jobs/pods with caller-chosen images and commands, returning results and artifacts while automating cleanup. Supports synchronous and background execution, repository cloning, and strict security controls.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Connects Claude Code to local Jupyter kernels for code execution, kernel management, and notebook execution, with security gating and output capture.
    PolyForm Noncommercial 1.0.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables LLMs to safely execute code in isolated Docker containers with resource limits and security controls, supporting session management and automatic dependency installation.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Governed execution cells for AI agents via MCP; provides shell, code, file, and browser tools inside isolated, policy-enforced Citadels with deny-by-default security, human-in-the-loop approvals, and tamper-evident audit trails.
    6
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A demonstration tool that showcases potential security attack vectors against Model Control Protocol, illustrating how malicious plugins can exploit weaknesses in MCP architecture.
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables agents and MCP-compliant clients to run multi-language code in a deterministic, zero-dependency sandbox where AST security analysis blocks dangerous syscalls and isolated execution telemetry is captured. It exposes this through JSON-RPC 2.0 stdio, letting frameworks like LangGraph, CrewAI, Cursor, and Claude Desktop validate and execute agent-generated code safely.
    7
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    A sandbox-first MCP server that enables AI agents to safely perform reverse-engineering tasks in fully isolated Docker containers, featuring zero-trust security, declarative YAML-based skills, and white-hat ethical safeguards.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A comprehensive Model Context Protocol (MCP) server that provides 37+ intelligent development tools across JavaScript/TypeScript, Rust, and Python with security-first design and high-performance features.
    9 npm
    1
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol server that provides secure curl command execution capabilities, allowing AI assistants to make HTTP requests with configurable parameters and built-in security protections.
    4
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides isolated Docker environments for code execution, enabling users to create and manage containers, execute multi-language code, save and reproduce development environments, ensuring security and isolation.
    16
    -