Skip to main content
Glama
116,913 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    C
    maintenance
    Provides AI agents with standardized security scanning capabilities for authorized assessments, including host detection, port scanning, service fingerprinting, web vulnerability scanning, CVE verification, and report generation, all with unified JSON output and strict compliance controls.
    -
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that gives coding agents hands and eyes on an Android device, providing 19 tools for building, testing, installing, UI inspection, input, logs, and toolchain diagnosis. It returns concise, structured results to make the build-debug loop efficient.
    19
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to understand lab topologies, follow operational principles, and interact with real network devices through observable terminals while keeping private access information hidden.
    7
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Lets Claude manage tmux sessions on Linux — start long-running ML training jobs, check their output, send keystrokes, and kill them.
    7
    29 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server exposing qbit_manage's Web API as tools, so an LLM can read and manage a qbit_manage instance: run maintenance commands on qBittorrent torrents, manage config files, scheduler, logs, security settings, and system state.
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A developer toolkit MCP server offering seven utilities: HTTP requests, JWT decoding, hashing, UUID generation, regex testing, cron explanation, and text encoding.
    7
    5 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that provides sandboxed shell command execution with configurable security policies, enabling safe AI-assisted command runs within a project repository.
    3
    6 npm
    2
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    A minimal MCP server that exposes a single tool to query local hardware information (OS, CPU, memory, architecture).
    1
    -
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to execute terminal commands on a host machine with configurable, granular permission controls and safety protections. It features multiple security modes, including allowlists and manual approval, to ensure safe command execution within specified directories.
    6
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables MCP clients to drive Kali Linux ethical hacking tools for authorized penetration testing, with enforced engagement scope, exploitation gating, and full audit logging.
    24
    1
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A credential-free MCP server offering developer utilities such as JSON formatting, regex testing, hashing, UUID generation, base64 transforms, and JWT inspection, with no network dependencies.
    6
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI assistants to execute malware analysis tools on a REMnux system via Docker, SSH, or local connections. It provides automated file-type analysis, structured tool discovery, and security guardrails for streamlined malware investigation.
    12
    973 npm
    139
    GPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to see and drive a real Android phone over plain ADB: screenshots and numbered UI trees, gestures, typing with accents and emoji, SMS/RCS reading and prepared replies, notifications, files, and settings, with no root and no app installed on the phone. Safeguards mask security codes and require explicit confirmation before sending, paying, deleting or confirming anything.
    18
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that intelligently filters and compresses tool outputs to reduce context window usage, saving up to 90% of tokens by removing noise such as passing tests and redundant information.
    5
    11 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A cross-platform MCP server providing secure, user-approved privilege escalation for Cursor agents, with tools for running commands as admin on Windows and root on Linux.
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to read tmux pane content on-demand, providing context-aware assistance during interactive terminal sessions.
    2
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables secure command-line interactions on Windows systems with support for PowerShell, CMD, Git Bash, and WSL shells, providing controlled file access, command execution, and configurable security restrictions.
    6
    23 npm
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables the execution of AppleScript and JavaScript for Automation (JXA) on macOS to control applications, system events, and shell commands. It provides native automation capabilities with a security layer that permits most operations while specifically blocking file deletion commands.
    1
    6
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A secure remote server management tool based on MCP protocol, supporting SSH connections, command execution, and SFTP file transfers.
    20
    17 npm
    6
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Enables dynamic management and execution of proxy chains on a remote Linux host via SSH, allowing AI assistants to route network traffic through proxies for privacy and security testing.
    10
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A sandboxed MCP tool for reverse engineering that provides a unified interface to various reverse engineering tools with security restrictions.
    8
    48 PyPI
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Lets AI coding agents read an outline of a large file or a digest of noisy command output instead of the full text, while every hidden line stays retrievable on disk through a run handle. Agents can request only the line ranges, slices, or grep matches they need and list recent runs, cutting token spend without losing information.
    5
    41 PyPI
    MIT