Skip to main content
Glama
116,804 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    A
    maintenance
    . A good description should be concise and describe what the server enables users to do, e.g. * Enables to interact with WordPress sites...' Then a huge block? Actually the user message includes the README content inside tags, then after the readme, there is a large block of text starting with '{
    7,061 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Local-first supply-chain CVE scanner. Scans project deps, system packages (Homebrew/apt), and IDE extensions (VS Code, JetBrains) via OSV, NVD, GHSA, EPSS, and CISA KEV. Listed in the official MCP Registry as io.github.DevInder1/tridentchain-security.
    3
    26 PyPI
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A Model Context Protocol (MCP) server for Socket integration, allowing AI assistants to efficiently check dependency vulnerability scores and security information.
    1
    17,795 npm
    138
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local security layer for coding agents: keeps secret values out of what Claude Code, Codex CLI, Cursor and OpenCode send to their model, and checks untrusted text for prompt injection. MIT, runs on your machine, no account.
    4
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A demonstration MCP server for local development and testing with Claude Desktop on WSL. Provides basic utility tools including greeting messages, echo functionality, and server information retrieval.
    3
    MIT
  • A
    license
    A
    quality
    Not graded
    maintenance
    Provides comprehensive system diagnostics and hardware analysis through 10 specialized tools for troubleshooting and environment monitoring. Offers targeted information gathering for CPU, memory, network, storage, processes, and security analysis across Windows, macOS, and Linux platforms.
    10
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Lets an MCP client triage a local project for leaked secrets, missing Supabase row-level security, unauthenticated data-changing API routes, insecure browser-exposed environment variables, and other common web-app security mistakes without network access. It returns severity-ordered findings or a plain-English go/no-go summary with what to fix first.
    2
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A specialized MCP server for QA engineering. It provides tools for user story analysis, test strategy, BDD/Gherkin scenarios, contract testing, integration tests, performance plans, security checklists, and CI/CD pipeline generation, accessible from any MCP-compatible IDE or client.
    11
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.
    42
    103 npm
    13
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to check software end-of-life dates and support status using the endoflife.date API, providing accurate information on software lifecycle, security status, and upgrade recommendations in real-time.
    5
    8
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    A multi-agent orchestration system that enables multiple Claude instances to collaborate through a centralized hub with a shared workspace and real-time communication. It features integrated task management, role assignment, and persistent memory to facilitate complex, synchronized agent workflows.
    12
    5 npm
    4
    MIT
  • F
    license
    B
    quality
    C
    maintenance
    A security research MCP server for testing tool call safety with deterministic policies like allowlists, path boundary enforcement, SSRF prevention, output redaction, and prompt injection detection, without requiring external LLMs or API keys.
    6
    -
  • A
    license
    B
    quality
    D
    maintenance
    Provides comprehensive React Native development assistance with expert-level automated code remediation, security vulnerability fixes, performance optimization, and production-ready code generation. Includes testing suite generation, dependency management, and accessibility compliance tools.
    13
    98 npm
    66
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    A Best Practices Oracle that provides dynamic advice, checklists, and architectural patterns for various software technologies. Helps developers with refactoring, testing guidelines, security checklists, and deployment principles through technology-aware recommendations.
    2
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Enables natural language interaction with the QIT CLI for testing WordPress/WooCommerce plugins. Supports running security, e2e, and activation tests, managing test environments, and accessing test results through conversational commands.
    22
    1
    MIT