Skip to main content
Glama
116,557 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.
    5
    4 npm
    1
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.
    -
  • F
    license
    Not graded
    quality
    Not graded
    maintenance
    Provides structured access to OCSF-normalized security data stored in Amazon Security Lake, enabling AI assistants to search for IP addresses, GuardDuty findings, and explore available data sources.
    2
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to manage database encryption key operations and Transparent Data Encryption (TDE) for SQL Server and Oracle databases via CipherTrust Application Key Management (CAKM).
    4
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides read-only access to PostgreSQL databases via MCP, enforcing least-privilege roles, row-level security, masked views, and SQL AST guardrails to prevent data leakage and unauthorized operations, enabling AI agents to safely query sensitive production data.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A read-only DuckDB MCP server offering context-efficient analytics tools (list_datasets, describe_table, profile_column, explain, query) with a semantic layer for business rules, security guards, and disclosed truncation to help LLMs produce correct answers while minimizing token usage.
    5
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A read-only MCP server for querying SQL Server Analysis Services (multidimensional cubes via MDX and tabular models via DAX) using Windows Integrated Security.
    3
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    DBeast MCP is a robust, security-first Model Context Protocol server designed to empower AI coding assistants (like Claude Desktop) with deep PostgreSQL database insights. Instead of just running basic SQL queries, DBeast equips your AI agent with tools to inspect active locks, audit slow queries, analyze table schemas, and safely generate index recommendations in real-time. Built specifically for
    21
    9
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    Security-hardened, read-only MySQL MCP server that enables safe, read-only access to MySQL databases for running SELECT queries, exploring schemas, and sampling data via MCP clients.
    9
    -
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI to execute SQL queries (SELECT, DML, DDL) on MySQL/MariaDB databases with strong security: connection credentials never exposed to AI, write queries require user approval, read-only connections enforced, and query results limited to 50 rows.
    6
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    Exports vulnerability and asset data from Rapid7 Command Platform via the Bulk Export API into a local DuckDB database, enabling AI assistants to run natural language queries and SQL analysis with sandboxed security.
    9
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI assistants to search and retrieve threat-intelligence collections—including leaks, malware, attacks, suspicious IPs, threats, and group profiles—through indicator queries, filtered pagination, update tracking, and WHOIS enrichment.
    9
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Full-featured MCP server that exposes 36 tools for interacting with PostgreSQL databases, covering schema introspection, query execution, data exploration, performance monitoring, security auditing, and maintenance.
    36
    6 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server enabling text-to-SQL on PostgreSQL databases using a CrewAI multi-agent system. It generates and executes read-only SQL queries from natural language, with security layers against prompt injection.
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables natural language interactions with Salesforce data and metadata, allowing users to query records, manage custom objects, and manipulate Apex code. It provides comprehensive tools for schema exploration, aggregate queries, and field-level security management.
    15
    2,258 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Security-first, read-only MCP server for Microsoft SQL Server, enabling safe natural-language querying of databases.
    5
    6 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Audits PostgreSQL/Supabase schemas for security issues like missing RLS, permissive policies, and sensitive data exposure during AI conversations.
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for Bubble.io that provides 28 tools for querying data, auditing schemas, seeding test records, and more, with three security layers and configurable modes.
    20
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    7 SQL tools (validate, format, parse, lint, security scan, metadata extraction, full analysis) over Streamable HTTP. Supports 6 SQL dialects with 1.25M+ ops/sec.
    7
    124
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A lightweight, multi-environment MySQL MCP server that provides secure, policy-gated database access through simplified query and execution tools. It enables AI agents to interact with multiple database environments safely using environment-based routing and strict security constraints.
    2
    8 npm
    ISC
  • F
    license
    A
    quality
    D
    maintenance
    This server connects to MySQL databases, enabling listing databases and tables, describing table schemas, and executing read-only SQL queries with optional write support and SSL security.
    4
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables querying package ecosystem data from ecosyste.ms, including package metadata, versions, security advisories, dependencies, and repository information across 40+ package registries with fast local SQLite lookups and API fallback.
    10
    15 npm
    9
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables answering natural-language questions in Spanish about a PostgreSQL auto parts inventory — which parts fit a vehicle, prices, stock per branch and sales movements — through four read-only tools exposed over stdio to an MCP client such as Claude Code. Writes are prevented by multiple independent security layers, including a read-only database role.
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A read-only, audited, and SQL-guarded Model Context Protocol server for Oracle Database that lets MCP clients query Oracle databases safely with multi-layer security guards.
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables Claude Desktop to execute read-only SQL queries on MySQL databases via natural language, with dynamic connection switching and built-in security.
    3
    219 npm
    7
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A read-only Model Context Protocol server that lets an AI agent answer questions about unit balances, overdue fees and common-area bookings for the signed-in user. Row Level Security and a read-only database role scope every answer to that person's building and unit, so staff, residents and other tenants see only what they are allowed to see.
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A security-hardened Postgres MCP server that enables LLM agents to run safe, read-only SQL queries with enforcement via SQL-AST inspection and read-only transactions.
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Build and run a complete backend from your agent: relational data with row-/field-level security, full-text + semantic + geo search, RBAC and BYOK, a workflow/automation engine, a growth & retention engine (email, push, promotions, per-user referral codes, rewards and points), payments and marketplace billing, and a growing catalog of integrations – the whole Anythink platform as one CLI-backed MC
    175
    6
    MIT