Skip to main content
Glama
118,160 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

MCP tools

MCP Connectors

"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    A local MCP server that lets Hermes supervise Claude Code, delegating focused coding, research, or review tasks to the Claude Code CLI and managing worker sessions, background jobs, cancellations, and read-only reviews.
    3
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Lets a coding agent hand a plain-language app idea to a hosted AI software team that shapes, designs, builds, tests and deploys it, returning a one-time link into the full build workspace. Also lists your apps with their stage, pending approvals and live addresses after a standard OAuth sign-in.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enable Claude (or any other LLM) to interactively debug your code (set breakpoints and evaluate expressions in stack frame). It's language-agnostic, assuming debugger console support and valid launch.json for debugging in VSCode.
    16 npm
    514
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding agents to read and write a user's Figma file through the Figma Plugin API, offline and privately, without API tokens or rate limits.
    86 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    The most advanced MCP server for Godot Editor that lets AI assistants operate directly inside your running Godot project for scene creation, script generation, UI authoring, and more.
    49
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables Windows users to connect Antigravity CLI as an MCP subagent for coding tasks such as file reading, code execution, edits, and terminal commands, with model selection, conversation continuity, and streaming progress.
    3
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    A policy layer between ChatGPT and the official Codex MCP server, adding safety controls like read-only sessions, approval policies, and secret scanning for secure daily use.
    84 npm
    7
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Claude to hand scoped, implementation-only coding tasks to any model available in a local opencode install — including Kimi, GPT, Gemini and local models — and to run many of them in parallel. Claude stays the orchestrator: it briefs each worker, collects results and needs-flags, then reviews diffs and runs tests, lint and builds itself.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides token-efficient code retrieval for coding agents by indexing repositories and enabling ranked snippet search, symbol outlines, and surgical line reads.
    7 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables multiple AI agents to collaborate on the same git repository by coordinating work via a shared claims branch, detecting file conflicts before they happen.
    9
    29 PyPI
    PolyForm Noncommercial 1.0.0
  • F
    license
    A
    quality
    B
    maintenance
    AIContextBuilder (AICB): Roslyn MCP server for C#/.NET code intelligence. Gives coding agents semantic code analysis and navigation instead of text search: callers, change impact, implementations, dependency injection, covering tests, side effects, dead code and token-budgeted context. Installs as a dotnet tool and analyzes any csharp solution locally.
    54
    12
    -
  • A
    license
    B
    quality
    D
    maintenance
    Provides access to the Superpowers skills library - expert-crafted workflows and best practices that guide AI assistants through proven techniques for coding tasks. Supports both community skills and custom personal skills.
    2
    256 npm
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables coding agents to check human-stated assumptions against authoritative sources like AWS AppConfig, Sentry, and the repository, detecting when beliefs have drifted from reality. It provides tools to inspect belief history, list verifiable properties, review open drifts, and record verified understanding.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to search for and fetch pre-vetted, production-safe 3D and motion components (React Three Fiber & GSAP) for injection into Next.js apps via AST-safe edits.
    114 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Server that enhances the capabilities of the Cline coding agent. It provides intelligent code suggestions, reduces hallucinations, and documents the knowledge base by leveraging your project's documentation and detecting the technologies used in your codebase.
    14
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables autonomous coding agents to perform deterministic pre-flight inspection of large legacy repositories: pruning vendored, generated, minified, binary, and symlinked bloat; quarantining hardcoded secrets; detecting circular dependency knots; and partitioning the codebase into token-bounded, bottom-up wave-scheduled work slices. It also exports the dependency graph as Neo4j Cypher and accepts caller-supplied edges for dynamic or reflective dependencies.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A local MCP server that provides all 42 BMAD AI development skills to multiple AI tools (Claude Code, Cursor, etc.) with project context injection and a live web dashboard.
    19 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables coding agents to track cross-repo dependencies, surface affected consumers before changing shared artifacts, and monitor pinned versions for vulnerabilities.
    4
    MIT
  • -
    license
    Not graded
    quality
    Not graded
    maintenance
    A code understanding and generation system designed for Galacean Engine that helps LLMs comprehend the engine architecture and generate high-quality engine code based on user intent.
    -