Skip to main content
Glama
117,249 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    A
    quality
    D
    maintenance
    MCP server that exposes the OBBBA No Tax on Tips federal deduction logic as callable tools, enabling users to check eligibility and estimate tip deductions.
    4
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables searching and bidirectional mapping of 1,451 security controls across 262 SCF-mapped frameworks, including ISO 27001, NIST CSF, DORA, and many others, through natural language queries.
    14
    701 PyPI
    9
    Apache 2.0
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.
    -
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for searching French and European law, providing natural language access to jurisprudence, consolidated legal texts, and related legal information via tools like search_decisions and search_legal_texts.
    4
    30
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Official MCP server for the EU AI Act. Search and access Articles, Recitals, Annexes, timelines, obligations, prohibited practices, GPAI requirements, conformity assessments, and compliance information across all 24 official EU languages.
    4
    65 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Create and check EU e-invoices (XRechnung, ZUGFeRD / Factur-X PDF, Peppol BIS, UBL, CII) on your own machine. Validation runs the official KoSIT, CEN and Peppol rules, and its verdicts match the official KoSIT validator 100% on the official test invoices. Free, open source, no API key.
    6
    7
    346 npm
    3
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables searching UK case law on BAILII and retrieving judgments with automatic section extraction (summary, conclusions, etc.). Runs locally to avoid BAILII's cloud IP blocks.
    3
    30 PyPI
    6
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Agent-friendly query layer over the ASD Information Security Manual, served via MCP. Enables agents to discover and interrogate ISM controls using plain language queries and coverage tracking for IRAP review.
    17
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Securedact MCP is a local-first privacy layer for MCP-compatible AI workflows. It detects, reviews, redacts, and audits sensitive information before approved sanitized content is used downstream.
    6
    3
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables users to search Korean National Tax Service tax law interpretations (예규) and retrieve their full body text as plain text from the National Tax Law Information System, complementing the korean-law MCP server that only provides list metadata.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query security checklists, protocols, and framework mappings to safely build and operate AI agents, with tools for checklist runs, protocol lookup, mapping lookup, and threat search.
    9
    CC BY-4.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables local MCP clients to search and read Peru's official legal information system, including legal norms and jurisprudence, with tools for full-text search, structure mapping, targeted reading, and filters. It provides clean content without storing files, using stdio transport and public session authentication.
    7
    7
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Provides access to Polish court judgments from the SAOS database. Enables search and retrieval of judgments with full-text search, filtering, and detailed case information.
    3
    20 npm
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Records a sale of a vehicle, equipment or stock and produces a printable bill of sale with signature lines. Drafts can be edited and finalized into a frozen signing copy rendered as Markdown or self-contained HTML for print-to-PDF.
    10
    0
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables auditing one or many websites from an EU address for cookie consent behavior, returning per-domain rows on the consent platform, first-layer reject availability, trackers and tracking cookies before consent and after reject, and Global Privacy Control response. Runs the work on Apify and hands back the dataset rows through a single tool.
    1
    56 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Provides deal mechanics for creators to understand and negotiate pricing models, usage rights, and negotiation moves, based on structure rather than rate quotes.
    6
    41 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Scans source code for possible Korean compliance risks (PIPA, Network Act, Credit Information Act, E-Commerce Act) and maps findings to specific legal provisions. Runs locally, exposes MCP tools for scanning and law lookup, and does not constitute legal advice. That's hedged (matches the project's "possible risk / not legal advice" rule), keyword-rich for search, and names all four laws.
    4
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    KYB due diligence on vendors, partners and resellers for AI agents: registries, sanctions, PEP, ICIJ Offshore Leaks, adverse media. uvx getsonar-mcp.
    5
    42 PyPI
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables LLM agents to extract, validate, and mask personally identifiable information using deterministic regular expressions, reducing token usage and hallucination risks.
    3
    4 npm
    3
    -
  • A
    license
    A
    quality
    B
    maintenance
    MCP server that directly queries the Korean National Tax Service tax law information system for tax law interpretations, precedents, and guidance. It supports exact document-number lookup, keyword search, and structured retrieval of ruling details and legal grounds.
    9
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    LicenseGuard is an MCP server that checks whether dependency licenses impose legal obligations based on your distribution model, enabling informed decisions before adding dependencies.
    3
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    MCP server for answering questions about Apache Software Foundation policies, offering tools to list, retrieve, and search policy documents on releases, licensing, branding, security, infrastructure, and incubator topics.
    4
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Provides automated EU AI Act compliance tools, including risk classification, role determination, transparency disclosures, content watermarking, deepfake labeling, and security threat detection.
    16
    33
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Enables physicians to generate source-based legal information packages by matching questions to official legislation and reasoned high court decisions, with citation-verified and conditional assessments rather than categorical legal opinions.
    8
    77 npm
    AGPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Search Brazilian jurisprudence on JusBrasil in natural language and retrieve formatted citations for legal documents, including metadata extraction from court decisions.
    5
    3
    MIT