Skip to main content
Glama
120,548 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    F
    maintenance
    A Model Context Protocol server that integrates with Nutrient Document Web Service, allowing AI assistants to perform advanced PDF operations including digital signing, document generation, editing, OCR, watermarking, and redaction.
    7
    138 npm
    71
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Read-only MCP server that exposes a design system's tokens, components, conventions, and deprecations as queryable tools, enabling agents to look up canonical values, assess change impact, and detect hardcoded value drift.
    8
    3 npm
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    40
    52
    Apache 2.0
  • F
    license
    A
    quality
    B
    maintenance
    Exposes the AKIJ Resources Document Management System to MCP clients, enabling search, listing, and retrieval of documents across risk databases, Google Drive, and legal sources via stdio JSON-RPC 2.0. Provides read-only access to 14,500+ indexed files and folders with tools for risk lookups and Bangladesh law references.
    13
    -
  • A
    license
    A
    quality
    D
    maintenance
    Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.
    4
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Exposes seven MCP tools that let an AI coding agent detect a project's stack, fetch the priority security checks for that platform, search 2,057 OWASP-derived check cards with file-and-commit provenance, and record evidence-backed pass/fail results in a report.
    7
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Provides real-time access to AWS security best practices, incident response playbooks, and preventive security measures from the official AWS Customer Playbook Framework repository. Enables users to query AWS security guidance for services like S3, IAM, EC2, and RDS through natural language.
    3
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Provides access to date-fns documentation and utilities through MCP. Enables users to query and interact with the comprehensive date manipulation library's documentation and functions.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables searching and browsing public vendor trust center records, looking up vendors by domain, and auditing project dependencies against vendor security documentation.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Read-only, authless MCP server over the Sigistry registry: a security-verified catalog of Claude Code plugins and portable skills. Search plugins and skills, fetch install commands, and read MCP-server security scorecards.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    An MCP server that parses South Korean document formats like HWP, HWPX, and PDF into Markdown. It features specialized table reconstruction and security-hardened extraction optimized for administrative and public institution files.
    68,829 npm
    2,975
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes search, passage retrieval, and document listing tools over streamable HTTP so MCP clients can query a security-questionnaire knowledge base and receive results with document, version, and heading provenance.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A remote MCP server that serves versioned Enterprise & Architecture guidelines (security, architecture, compliance) to LLM clients via Streamable HTTP with Bearer-token authentication.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    MCP server for the NS UI React component registry. Search components, inspect source and details, list categories, get install commands, and retrieve design-token conventions.
    4 npm
    43
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides AI agents with access to DFNS documentation, API reference, and SDK code through full-text search and type intelligence.
    33 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables users to look up, search, and browse NIST 800-53 and 800-171 security controls, including full control text, guidance, and related controls. Supports natural-language queries and control-family exploration for compliance and security research.
    303 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Efficiently delivers project documentation to AI agents like Claude on-demand, optimizing token usage by loading context only when needed. Supports document retrieval, listing, and keyword search with security features.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Analyzes security compliance documents (ISMS-P, NIST, CIS Benchmark) in PDF/TXT format, extracts requirements, recommends AWS services, and evaluates implementation difficulty and timelines through structured JSON output.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for the comprehensive analysis of Swagger 2.0 and OpenAPI 3.x contracts. It allows users to extract detailed information about endpoints, request/response schemas, parameters, and security configurations from API documentation.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Security analysis for Python codebases through the guard-core engine: SecurityConfig validation that catches keys pydantic silently drops, docs search over the vendored corpus, live detection probing, and verified setup guidance for Python, Typescript, Rust, PHP and Go adapters.
    9
    58 PyPI
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A self-hosted MCP server that fetches live documentation and performs code audits using real-time authoritative references to prevent AI hallucinations. It provides tools for searching documentation across 330+ libraries and scanning local source code for security, performance, and accessibility issues.
    14
    179 npm
    7
    Elastic 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to perform fast, offline full-text search and section-level retrieval over the HackTricks offensive-security wiki, including ranked snippets, page/section extraction, code-only payloads, and category navigation.
    3
    81 npm
    4
    MIT