Skip to main content
Glama
116,557 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    MCP server that provides a security gateway for AI agents, enforcing allow/confirm/deny policies on tool calls and requiring human approval for risky operations, with full audit logging.
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Standalone TypeScript MCP server for filesystem operations with robust security, encoding support, and cross-platform path handling.
    4 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A security-first, read-only MCP server that lets clients browse and read text, PDF, and XLSX files from an explicit allowlist of local folders, with strict path and secret protections.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server for performing Excel file operations including read, write, and manipulation, with enterprise security features and VS Code integration.
    23 npm
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables extraction of metadata from HWP and HWPX files (Korean word processor formats) without requiring HWP installation. Supports document info, statistics, security, and font details.
    BSD 3-Clause
  • A
    license
    Not graded
    quality
    F
    maintenance
    A Model Context Protocol server that provides intelligent file reading and semantic search capabilities across multiple document formats with security-first access controls.
    7
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server that downloads PDF files from URLs and converts them to Markdown format. Supports custom file names and directories, with security measures like SSRF protection.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables agents to inspect PDF, Microsoft Office, and Apple iWork documents without rendering them, providing page/slide counts, metadata, security signals, structure, and integrity as deterministic JSON via typed tools and batch operations.
    4
    50 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Provides read/write file tools with lint validation to prevent agents from writing malformed Obsidian markdown, and constrains writes to a single configurable vault for security.
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables searching, listing, and reading local notes with security constraints like path traversal protection and configurable limits.
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to interact with a local folder of Markdown notes, supporting listing, reading, searching, creating, and appending to notes with strict security boundaries.
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    GhostLink is a security-hardened MCP server that gives AI coding agents safe, deterministic access to local repositories through sandboxed, policy-gated tools for searching, reading, patching, and running curated commands.
    6
    44 npm
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    Efficiently loads, caches, and delivers project file context for AI agents using the Model Context Protocol, reducing multiple file reads to a single call with LRU caching and security validation.
    3
    14 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables local macOS automation via the Model Context Protocol, allowing file operations, system monitoring, shell commands, clipboard access, and screenshots with configurable security restrictions.
    14
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server that enables AI assistants to perform comprehensive file operations including finding, reading, writing, editing, searching, moving, and copying files with security validations.
    7
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A comprehensive tool server for reading, merging, and extracting content from PDF files via local paths or direct URLs. It enables metadata retrieval, regex searching, and page-specific text extraction with built-in caching and workspace-restricted security.
    9
    6,235 PyPI
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform controlled Linux system administration tasks like reading logs, managing services, cron jobs, WordPress, and executing sandboxed Python code, with strict security constraints.
    29
    2
    GPL 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A comprehensive MCP server that enables AI models to perform local file operations, command execution, and task management across multiple platforms. It features advanced capabilities like row-level file editing, directory searching, and system monitoring with built-in security filters.
    13
    16 npm
    Mulan Permissive Software , Version 2
  • A
    license
    A
    quality
    D
    maintenance
    Provides LLM-optimized filesystem access with intelligent file pagination for large files, lightning-fast ripgrep-powered code search with regex support, and security sandboxing to safely explore and search codebases.
    7
    3 npm
    1
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI assistants to interact with Obsidian vaults by providing tools for note management, full-text search, and link analysis. It supports comprehensive file operations, frontmatter manipulation, and daily note creation while ensuring security through path validation.
    19
    1
    -