Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    A unified MCP server for Rapid7's security platform, exposing InsightVM (vulnerability management), InsightIDR (SIEM/investigations), and Metasploit Pro (pentest telemetry) as tools for Claude, Cursor, and any MCP-compatible LLM client.
    6
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides read-only access to Tactical RMM, enabling agent searches, detailed agent information, audit log queries, and execution of information-gathering PowerShell scripts on agents, with Entra ID authentication and a strict read-only guard.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server exposing rlg (RustLogs) log files as tools for on-call / SRE agent workflows. Three tools over JSON-RPC stdio — tail_log (last N events, filtered by level/target), filter_log (predicate filtering), summarize_errors (grouped error taxonomy). Pure Rust. MIT OR Apache-2.0.
    3
    6
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Tells an agent what went wrong with its own Ollama calls, in sentences with the fix: lost prompt cache and where the prompt stopped matching, context overflow, a model running partly on CPU, tool schemas crowding the prompt. Also the last turn in numbers and which local models fit in video memory. Local, read-only, nothing leaves the machine.
    4
    7
    366 npm
    28
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables log analysis for Tenable Patch Management (SaaS and on-prem) by parsing, de-duplicating, and decoding server/client logs into structured verdicts, ranked issues, and known-issue fixes.
    11
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that connects language models to a Wazuh SIEM cluster, enabling read-only plain-language queries, schema inspection, field coverage analysis, and decoder testing.
    10
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.
    14
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables interaction with Jira Service Management Operations alerts and on-call schedules, including searching alerts, reading notes and activity logs, acknowledging, closing, annotating, adding responders, and querying current and next on-call rotations.
    28
    135 npm
    4
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Exposes live industrial IoT telemetry to any MCP client, streaming simulated sensor data from a fleet of machines and detecting anomalies, with the ability to inject faults on demand.
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Read-only MCP server for searching and aggregating logs from VMware Aria Operations for Logs (formerly vRealize Log Insight). Enables querying log events, aggregating with spike detection, and retrieving alert information.
    7
    179 PyPI
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables agents to query GPU availability across SSH hosts, find free GPUs, list hosts, and inspect fleet status using only nvidia-smi on the remote side.
    3
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to interact with Freeplay, an ops platform for AI engineering teams, to analyze production logs, identify quality issues, iterate on prompts and agents using real data, and run experiments before deploying.
    9
    17 PyPI
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server exposing qbit_manage's Web API as tools, so an LLM can read and manage a qbit_manage instance: run maintenance commands on qBittorrent torrents, manage config files, scheduler, logs, security settings, and system state.
    6
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables building, validating, describing, and conformance-testing TTEOP telemetry envelopes through the Model Context Protocol.
    4
    60 npm
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to raise and resolve incidents in ITOC360, triggering escalation policies that page on-call responders and closing alerts when problems clear.
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    An on-call agent for data incidents, built on a bio-inspired context protocol. It triages data quality and freshness issues using DataHub, computing severity, blast radius, and ownership from the catalogue before generating prose.
    9
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that provides monitoring tools for Codex agents, allowing them to create and wait on conditions using commands, log files, file events, and custom probes, replacing polling loops with event-driven blocking.
    5
    3 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that exposes GPU-accelerated anomaly detection to AI assistants via the Model Context Protocol. Provides two MCP tools: waveguard_scan (send training + test data in one call, returns per-sample anomaly scores and top explanatory features) and waveguard_health (check API and GPU status). Works on time series, JSON, numbers, text, and images — fully stateless.
    3
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables agents to check whether an execution trace contains the evidence needed for post-hoc causal reconstruction, retrieve individual requirement details, and list evidence requirements per failure class over MCP stdio. It works on files, directories, or inline JSON locally and never transmits or persists data.
    3
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    The logs of everything on one machine — app, build, GPU, containers, serial board, OS — interleaved in the order they happened, and readable by an agent. Read-only: it can tail, search and wait, and it cannot write, delete or configure anything.
    9
    11 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A read-only server that enables AI agents to triage Kubernetes CronJobs in a single tool call: whether runs happened and stayed on schedule, whether durations are trending slower or overrunning, which jobs have silently stopped succeeding, and why a given run failed, with evidence and stated basis for each verdict. It also lists active runs and recent failures while enforcing namespace allowlists and no write access.
    8
    52 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Identifies resource-intensive processes on macOS across CPU, memory, and network usage, with tools for detailed process filtering and system overview.
    3
    23
    MIT