Skip to main content
Glama
116,662 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    A read-only MCP server that gives coding agents structured, read-only access to sibling repositories, ensuring security by design with zero write tools.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI harnesses to run iterative loops on code repositories with built-in quality evaluations, security gates, and approval workflows for tasks like fixing tests or implementing features.
    21 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A MCP server that enables Claude Code to delegate coding tasks to Codex via the MCP protocol, with task management, security checks, and result verification.
    60 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to launch, supervise, inspect, cancel, and clean up autonomous coding jobs executed by the Google Antigravity CLI in isolated git worktrees and branches, with optional verification, review, and security auditing.
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Provides GitHub Copilot with 160+ AI agent personas and 1,400+ specialized skills, enabling developers to activate expert roles like backend architect or security engineer through natural language.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    An autonomous AI development agent that enables full-stack coding, automated verification, RAG-powered code search, and quality assurance through MCP tools. Supports Gemini CLI, Claude Code CLI, with features like parallel verification, security scanning, and spec-driven development.
    41 PyPI
    5
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables ISLI agents and MCP clients to dispatch natural-language coding and terminal tasks to a locally-installed Claude Code CLI, supporting both one-shot execution and persistent sessions with workspace and security controls.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Provides a persistent memory and governance layer that allows AI coding agents to query documented architecture rules and validate code against team standards. It enables agents to verify compliance across categories like security and testing before suggesting changes to ensure consistency across development sessions.
    3
    17
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    GhostLink is a security-hardened MCP server that gives AI coding agents safe, deterministic access to local repositories through sandboxed, policy-gated tools for searching, reading, patching, and running curated commands.
    6
    44 npm
    ISC
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-capable clients to query the tool registry, check install status, get tool recommendations for CTF or bug-bounty work, and run installed security tools through a governed execution path.
    15
    87
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    A bridge between Gemini and GLM-4.5 models that provides 25 tools for automating complex coding tasks, file management, and system operations. It features a security-hardened architecture with sandboxing, persistent memory, and automatic file backups.
    25
    1
    MIT
  • A
    license
    C
    quality
    B
    maintenance
    MCP server that provides 160 specialist AI agents as parallel sub-agents and MCP tools for tasks like security auditing, API design, DB schema design, and more. It is local-first with BYOK support and integrates with 12+ IDEs.
    161
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Bridges the ChatGPT web UI to a local development environment over MCP, letting the model read and patch files, run real shell commands and terminals, execute tests, and control the desktop (screen, mouse, keyboard, clipboard) within user-approved folders. It adds parallel workers, goal/loop long-task control, plugin tools, and a security-hardening layer with risk-tiered shell policy, audit logging, and credential sanitization.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A hosted AI software engineer that writes code, opens PRs, reviews code, generates tests, runs security scans, and answers codebase questions. Connect from any MCP client (Claude Code, Cursor, Windsurf, or your own agents) and delegate engineering tasks.
    67 npm
    MIT