Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables authorized penetration-testing workflows through MCP by exposing tools for network scanning, web fuzzing, subdomain enumeration, vulnerability scanning, brute-force checks, packet capture, and report generation with HTTP/STDIO/SSE transports and bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, network and web scanning, content fuzzing, vulnerability templates, brute-force checks, SQLi extraction, traffic capture, and engagement report generation through MCP clients.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, and client-report generation with stdio, HTTP, or SSE transports and optional bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, exploitation support, and report generation through a unified tool interface. Supports local and networked transports with bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration-testing workflows through MCP, including reconnaissance, web/content scanning, brute-force checks, traffic capture, exploitation sweeps, wordlist generation, and engagement reporting over stdio, Streamable HTTP, and legacy SSE.
    165 npm
    GPL 3.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI coding assistants to perform authorized attack-surface reconnaissance and vulnerability intelligence through stdio JSON-RPC tools for HTTP probing, TCP port scanning, directory discovery, template checks, and CISA KEV/cve.now lookups.
    5
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI assistants to directly invoke Kali Linux network tools for network maintenance and security assessment, with 19 tools including port scanning, DNS queries, and penetration testing.
    1
    Creative Commons Attribution Non Commercial 4.0 International
  • A
    license
    A
    quality
    B
    maintenance
    Enables recurring website maintenance checks — domain registration, SSL certificates, uptime, technical SEO and accessibility — across a portfolio of client sites, using publicly available information. Results are returned as structured data and can be sorted by urgency into a client-ready report.
    8
    88 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.
    14
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables LLM agents to read 3x-ui panel data and perform full CRUD operations on inbounds and clients.
    12
    15 npm
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP agents to run RouterOS commands on MikroTik routers over SSH, with configurable profiles, secure authentication, and a read-only safety guard.
    3
    22 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to view devices on a Portveil account and move, rotate, reconnect, or disconnect them across VPN locations, with verified successful moves.
    14
    183 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to understand lab topologies, follow operational principles, and interact with real network devices through observable terminals while keeping private access information hidden.
    7
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables looking up registration details for domains, URLs, or email addresses, returning registrar, creation and expiry dates, domain age, status codes, nameservers, DNSSEC, and registrant organization and country per domain. Queries registries directly via RDAP or WHOIS with no API key, running on Apify.
    1
    497 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for ngsrv tunnels that exposes local HTTP ports on public HTTPS URLs, with tools for starting, listing, and stopping tunnels, and provisioning agent tokens.
    5
    9 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Read-only access to a local Hiberden backup catalog: list projects, archives, tapes, and jobs, check 3-2-1 coverage, and verify a stored copy by reading it back and re-hashing it. Runs against the catalog on your own machine, so nothing leaves it.
    14
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server that exposes mDNS service discovery functionality via the Model Context Protocol, enabling LLMs to discover and query zero-configuration network services on the local network.
    6
    39 PyPI
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A Model Context Protocol (MCP) server that provides comprehensive WHOIS lookup capabilities using the IP2WHOIS API. This server allows AI agents to query domain registration details, including expiry dates, registrar information, and registrant data.
    2
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables LLM clients to inspect and manage a TP-Link Deco mesh Wi-Fi network, covering mesh nodes, connected devices, SSIDs and radio settings, internet status, blocked clients, and DHCP address reservations. Runs entirely against the router on the local network without any cloud account.
    15
    33 PyPI
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables coding agents to perform network diagnostics and lookups, including subnet calculations, port and MAC vendor information, DNS and blocklist checks, TLS certificate inspection, and public IP discovery, all without needing an account or sending telemetry.
    11
    MIT