Skip to main content
Glama
116,913 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
    8
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Exposes the Tenable Identity Exposure (TIE) REST API as tools for LLM clients, enabling queries on security profiles, activity timelines, AD objects, and more.
    15
    5
    MIT
  • A
    license
    D
    quality
    B
    maintenance
    Enables AI agents to debug and repair historical Solaris/SPARC systems by providing an out-of-band control plane with guest DTrace, QEMU monitor access, SPARC-aware GDB, host eBPF/perf tracing, and an immutable evidence ledger for cross-layer hypothesis testing.
    16
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables transparent security for any MCP server by intercepting tool calls, blocking prompt injection attempts, masking PII in responses, and writing immutable audit logs.
    2,302 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables secure interaction between LLMs and MCP tools by applying zero-trust security controls, including sensitive data masking, file system protection, and policy enforcement.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides a read-only summary of Ubuntu server status including system version, resource usage, apt updates, service health, security logs, and hardware information to AI clients via MCP tools.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A security gateway for MCP servers that enforces policy checks including role-based access, argument constraints, injection scanning, and PII redaction on both tool arguments and results, with tamper-evident audit logging.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Provides structured MCP tools for local runtime observability and debugging of React Native/Expo apps on Android, enabling evidence-first diagnostics such as screenshots, UI trees, per-request network capture, performance metrics, and CDP-based console/heap/profiling exports.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An enterprise-level MCP gateway and proxy that sits between an organization's MCP servers and clients. MCP Manager mitigates security threats, enables fine-grained permissions, enforces policies and guardrails, and generates comprehensive, end-to-end logs.
    199
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides read-only access to Tactical RMM, enabling agent searches, detailed agent information, audit log queries, and execution of information-gathering PowerShell scripts on agents, with Entra ID authentication and a strict read-only guard.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    An MCP server for the RocketCyber Managed SOC platform that provides read-only access to security data including incidents, agents, and events. It enables users to monitor and query security information through 10 specialized tools and resources.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for Security Onion Community Edition that provides 21 read and write tools for SOC operations, including event querying, alert management, detection tuning, PCAP retrieval, and agent enrollment, without requiring a Pro license.
    Apache 2.0
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enforces deterministic security policies on Model Context Protocol traffic between agents and remote MCP servers, including request validation, signed human approval, response-side credential blocking, prompt-injection flagging, and privacy-minimized auditing.
    -
  • A
    license
    A
    quality
    C
    maintenance
    8 standalone MCP servers for SMBs — Guardrails (prompt injection, PII, secrets detection), FinOps (AI cost tracking and budgets), Observability (agent tracing), Smart Router (17+ models, 9 providers), Trust Score (governance scoring 0-100), Memory (persistent agent memory), ThinkSecure (runtime security + SOC2/GDPR audit), and A2A Lite (agent-to-agent protocol). 37 tools total, TNC credits
    4
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    MCP server exposing rlg (RustLogs) log files as tools for on-call / SRE agent workflows. Three tools over JSON-RPC stdio — tail_log (last N events, filtered by level/target), filter_log (predicate filtering), summarize_errors (grouped error taxonomy). Pure Rust. MIT OR Apache-2.0.
    3
    6
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Tells an agent what went wrong with its own Ollama calls, in sentences with the fix: lost prompt cache and where the prompt stopped matching, context overflow, a model running partly on CPU, tool schemas crowding the prompt. Also the last turn in numbers and which local models fit in video memory. Local, read-only, nothing leaves the machine.
    4
    7
    366 npm
    28
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables log analysis for Tenable Patch Management (SaaS and on-prem) by parsing, de-duplicating, and decoding server/client logs into structured verdicts, ranked issues, and known-issue fixes.
    11
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that connects language models to a Wazuh SIEM cluster, enabling read-only plain-language queries, schema inspection, field coverage analysis, and decoder testing.
    10
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.
    14
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables security analysts to investigate Microsoft Entra ID security logs through natural language, exposing read-only tools for user context, sign-ins, risky users, risk detections, directory audits, and conditional access policies.
    6
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables interaction with Jira Service Management Operations alerts and on-call schedules, including searching alerts, reading notes and activity logs, acknowledging, closing, annotating, adding responders, and querying current and next on-call rotations.
    28
    135 npm
    4
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Exposes live industrial IoT telemetry to any MCP client, streaming simulated sensor data from a fleet of machines and detecting anomalies, with the ability to inject faults on demand.
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Read-only MCP server for searching and aggregating logs from VMware Aria Operations for Logs (formerly vRealize Log Insight). Enables querying log events, aggregating with spike detection, and retrieving alert information.
    7
    179 PyPI
    MIT