Skip to main content
Glama
120,576 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables transparent security for any MCP server by intercepting tool calls, blocking prompt injection attempts, masking PII in responses, and writing immutable audit logs.
    1,098 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables managing and observing Technitium DNS Server through MCP, including read-only or read-write tool surfaces, scoped bearer authentication, audit logging, and confirmation gates for destructive operations.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to monitor, trace, query, and manage local DNS resolver chains using MCP, with health checks, packet tracing, Pi-hole log access, and automated failover via natural language.
    8
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables secure interaction between LLMs and MCP tools by applying zero-trust security controls, including sensitive data masking, file system protection, and policy enforcement.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables comprehensive management of Tailscale networks including device management, DNS configuration, file sharing via Taildrop, security monitoring, and network automation with built-in Grafana/Prometheus observability stack.
    5
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.
    17 PyPI
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to troubleshoot AWS and hybrid network connectivity by analyzing hop-by-hop paths across security groups, NACLs, route tables, Transit Gateway routes, VPN/BGP, DNS, and flow logs to identify blocking rules and suggest fixes.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An enterprise-level MCP gateway and proxy that sits between an organization's MCP servers and clients. MCP Manager mitigates security threats, enables fine-grained permissions, enforces policies and guardrails, and generates comprehensive, end-to-end logs.
    200
    AGPL 3.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for Security Onion Community Edition that provides 21 read and write tools for SOC operations, including event querying, alert management, detection tuning, PCAP retrieval, and agent enrollment, without requiring a Pro license.
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    8 standalone MCP servers for SMBs — Guardrails (prompt injection, PII, secrets detection), FinOps (AI cost tracking and budgets), Observability (agent tracing), Smart Router (17+ models, 9 providers), Trust Score (governance scoring 0-100), Memory (persistent agent memory), ThinkSecure (runtime security + SOC2/GDPR audit), and A2A Lite (agent-to-agent protocol). 37 tools total, TNC credits
    4
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Uptime monitoring from your AI agent: create and diagnose checks (40 types: HTTP, TCP, DNS, SSL, ICMP, databases, message queues and more), read results and incidents, and manage status pages and maintenance windows. Built into the self-hostable SolidPing server, served over streamable HTTP at /api/v1/mcp.
    23
    33
    AGPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables security analysts to investigate Microsoft Entra ID security logs through natural language, exposing read-only tools for user context, sign-ins, risky users, risk detections, directory audits, and conditional access policies.
    6
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server exposing qbit_manage's Web API as tools, so an LLM can read and manage a qbit_manage instance: run maintenance commands on qBittorrent torrents, manage config files, scheduler, logs, security settings, and system state.
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI assistants to interact with Tenzir, a data pipeline engine for security operations, including executing pipeline queries, managing OCSF schemas, and generating parsers.
    15
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
    8
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    DCL Trust Oracle is a deterministic AI audit layer, natively integrated with MCP, that evaluates LLM and agent outputs against configurable policies before and after action. Every verdict is written to a tamper-evident, hash-chained audit log storing only cryptographic metadata — never raw content — enabling privacy-first forensic review.
    18
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for AWS infrastructure analysis. Connects to DynamoDB, Lambda, SQS, SNS, Secrets Manager, EventBridge, RDS, PostgreSQL, MongoDB, and CloudWatch — surfaces missing indexes, queue DLQs, Lambda config issues, IaC drift, and security findings for Claude Code and Cursor.
    22
    466 npm
    22
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server for Microsoft Defender Advanced Hunting that enables AI assistants to investigate security events using natural language by translating queries to KQL and executing them against Defender.
    2
    21 PyPI
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Exposes the Tenable Identity Exposure (TIE) REST API as tools for LLM clients, enabling queries on security profiles, activity timelines, AD objects, and more.
    15
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for Drumbeats monitoring. Enables creating monitors, triaging incidents, and running HTTP/SSL/DNS checks using natural language from any AI client.
    19
    108 npm
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Provides system monitoring tools for VPS including CPU, memory, disk, network ping, top processes, and Docker status, with read-only architecture and security features.
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    agent-bom is an open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. The default scan profile in MCP server mode exposes 8 MCP tools. Additional profiles provide inventory, findings, compliance, graph, and runtime workflows. See the published Glama release for its packaged version.
    8
    1,682 PyPI
    37
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    A task manager's view of a Windows or Linux PC for AI assistants: processes, per-core CPU and who ran on it, disks and the files they serve, network connections and DNS lookups, GPUs, sensors, services, stutters and a 7-day history. Actions (ending or suspending processes, controlling services, memory dumps) are allowed kind by kind, and it runs locally over stdio or on 127.0.0.1 only.
    31
    46
    18
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables LLM assistants to run guarded, read-only SPL searches and inspect Splunk indexes, saved searches, health, server info, and Enterprise Security notables using only a token, with enforced row caps, index allow-lists, command blocking, and audit logging.
    7
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    AI-powered threat intelligence server with real-time alert monitoring and multi-source IOC analysis, enabling security investigations directly in Claude Desktop.
    9
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    AI-powered MCP server that enables security analysts to query Wazuh SIEM/XDR for alert triage, threat hunting, compliance audits, and incident response through natural language prompts.
    28
    13
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.
    2
    11
    1,072
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Provides network and proxy diagnostics for Windows, enabling users to check GitHub reachability, system proxy settings, proxy port status, run DNS/TCP/HTTP checks, scan hosts file conflicts, and get concrete suggestions for fixes.
    8
    64 npm
    2
    MIT