Skip to main content
Glama
116,913 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    B
    quality
    B
    maintenance
    Enables vision-capable AI clients to read and adjust Capture One on macOS through local MCP stdio or JSON CLI, including curves, color tools, film grain, masks, reference matching, and real previews of rendered edits.
    6
    1
    MIT
  • A
    license
    C
    quality
    B
    maintenance
    Enables vision-capable AI clients to read and adjust Capture One on Windows through an MCP stdio server (plus a JSON CLI), applying exposure, curves, color, layer and mask edits and returning real Capture One-rendered previews. It runs a local bridge to C1's native parameters with no presets, screenshots or synthetic input.
    6
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables deterministic headless operations on AutoCAD 2021 (English) drawings, including inspection, mutation, parametric drawing, topology auditing, preview capture, and validated AutoLISP execution with rollback and security safeguards.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Connects LLM assistants to Autodesk Revit BIM models, enabling reading metadata, listing elements, creating geometry, batch parameter updates, and exporting schedules. Supports fake mode for testing without Revit and pyRevit mode for live integration.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to manage routes on the Design Canvas infinite canvas app, including adding, removing, listing routes, and capturing screenshots of the canvas.
    4
    97 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Zero-dependency Python MCP server for coding agents (Antigravity, Claude Code, Cursor, Windsurf). Unfreezes 915+ skills on-demand, injects 74 brand design tokens (Linear, Stripe, Apple), and validates WCAG contrast.
    30
    9
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Manages design tokens (colors, spacing, fonts) in a JSON file and enables agents to read, write, export, and detect drift between tokens and CSS via MCP.
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables inspecting, creating and modifying MakeHuman characters inside Blender — phenotypes, rigs, assets, skins, faces, expressions and saved presets — through 34 named tools served by a companion Blender bridge add-on that dispatches a closed command vocabulary instead of executing code. It also exposes read-only introspection, catalogue and documentation lookups that always answer, even when Blender is unreachable.
    34
    2
    GPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Exposes surface-bound annotations placed on a Blender model to AI agents, letting them read pending change requests with stable IDs, revisions, positions and visibility, then submit completion summaries by marker ID after editing. This enables batch, review-oriented workflows where the user approves or rejects each agent change in Blender, without requiring object selection, screenshots, or a fixed port bridge.
    2
    2
    GPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Give your AI assistant the ability to inspect, measure, and compare 3D CAD models by dropping in a STEP file and asking engineering questions. Runs entirely on your machine with no cloud, no CAD license, and no setup.
    5
    207 npm
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables an AI assistant to conversationally control Autodesk AutoCAD, drawing, inspecting, and editing plans, and includes a cross-platform DXF engine that runs without AutoCAD on macOS and Linux. It exposes tools for rendering views as images, batching geometry, blocks, and structures, measuring and checking plans, and undoing whole batches.
    12
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Bidirectional MCP bridge enabling AI assistants to draw UI on Figma canvas and read designs back as structured data or code tokens via localhost, requiring Figma Desktop.
    5
    697 npm
    265
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables MCP clients to read design structure, take screenshots, create nodes, and edit UI directly on Figma canvas via a bridge between MCP and Figma Desktop.
    10
    697 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Lets Claude Code, Cursor, VS Code and other AI agents draw and edit draw.io diagrams from your project's files, on a live browser canvas you can also edit by hand. Includes version history, undo, cloud shape libraries (AWS, Azure, GCP) and PNG or SVG export.
    16
    40 npm
    36,744
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    The Figma desktop app as an MCP server. Gives AI agents the full Figma Plugin API on your open file: read, write, tokens, components, exports, undo. Runs locally with no cloud API, no token and no quota.
    10
    76 npm
    2
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables high-craft web design and engineering through OKLCH color systems, fluid typography, Three.js 3D scenes, frontend security audits, multi-viewport capture, and Python-backed design verification.
    11
    17 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI clients to control a running Blender instance through the Model Context Protocol, allowing scene inspection, object creation and editing, rendering, and execution of Blender Python. It works locally via a WebSocket bridge between the MCP server and a Blender add-on.
    15
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for the coss ui design system, enabling AI agents to fetch components, props, and design tokens on demand for accurate, low-cost code generation.
    6
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local design engine for AI Agents. Create, edit and export real, editable designs — social posts, flyers, print-ready PDFs — with your brand applied. Every design opens in a built-in editor, so you can click the text and fix it yourself instead of re-prompting. Bring in what you already have: InDesign, PSD, PPX and PDF files come in as editable designs. Runs on your machine, no account needed.
    19
    43
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    figmcp gives your coding agent the Figma file you have open in Figma Desktop. A development plugin streams the file to a server on your machine over localhost, so reads never touch the Figma REST API: no access token, no quota and no rate limits, on any Figma plan. * Design to code: Flutter widgets for Flutter projects, React + Tailwind for everything else, with assets and a scree
    2
    15
    77 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables MCP hosts to render OpenUI artifacts (inline or sidecar) for agent-generated UI components such as cards, dashboards, forms, and charts, with validation, versioning, and security controls.
    2
    215 npm
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables coding agents to read ground truth about a React design system — components, props, cva variants, tokens and docs — over MCP so they write UI that matches it. It also exposes a check_ui linter agents run on their own output, returning rule ids, locations and concrete fixes before review.
    5
    1,327 npm
    26
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables agents to create and edit Figma text using fonts installed locally on the user's computer, without uploading font files, through a local MCP bridge and companion Figma Desktop plugin.
    5
    16 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    This MCP server enables AI assistants to search the Google Fonts catalogue, retrieve detailed font metadata, generate live HTML text previews, and obtain embed code for use on web pages.
    4
    320 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Deterministic motion compiler + validator for AI-generated web apps: validated MotionSpec JSON compiles to reduced-motion-safe GSAP/CSS. Reports WCAG 2.2.2 pause-path candidates; missing reduced-motion guards flagged as 2.3.3/AAA best practice. Keyless read-only MCP tools: motion_catalog + motion_validate; compile/audit/stats need a key (full toolset free locally: npx motionspec). MIT core on npm.
    5
    628 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables Codex to draw pixel art and edit layers, animations, tilemaps, and palettes in an open Aseprite document on macOS, then export GIFs, PNG spritesheets, and editable Aseprite copies for game development.
    9
    MIT
  • F
    license
    A
    quality
    B
    maintenance
    Read-only MCP bridge for Archicad using the Tapir Add-On, enabling discovery, context binding, and safe read operations on Archicad projects.
    8
    -