Skip to main content
Glama
116,605 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to look up CVE details, EPSS exploit probability, and CISA KEV status from free public APIs to prioritize vulnerabilities by real-world risk. Combines these sources into a single enriched, prioritized view using a KEV > EPSS > CVSS rule.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables users to retrieve Hong Kong government security incident reports from the Digital Policy Office. Provides a FastMCP interface for querying the number of reported information security incidents.
    38 PyPI
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying SEC 13F institutional ownership data, including who holds a security, manager portfolios, quarterly changes, and security flows, with live ticker resolution via OpenFIGI.
    283 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A security pentesting MCP server with 89 tools across 10 categories, enabling comprehensive reconnaissance, web security, OSINT, and exploitation tasks. It features a native Windows/WSL bridge for Kali Linux tools and scope-aware permission tiers for safe and efficient scanning.
    4
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables asking natural language questions about OpenSSF Scorecard security assessments for open source projects.
    4
    Apache 2.0
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables domain overviews for security and sales, providing registration, infrastructure, and risk signal data through a simple API request.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables an AI assistant to adjust any dollar amount for U.S. inflation from 1913 to the latest published month using official BLS Consumer Price Index data, report current and core inflation rates, check whether a raise kept pace, and compute the Social Security COLA. Every result includes structured figures, a plain-English summary, and live-or-bundled data status.
    5
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Gives AI assistants and research code read-only, normalized access to trusted humanitarian datasets — 75 years of UNHCR displacement statistics, World Bank indicators, HDX crisis data on conflict, food security, funding and internal displacement, and ReliefWeb situation reports — through the Model Context Protocol. Unifies country codes to ISO3 with fuzzy English and Arabic name resolution, applies each dataset's correct aggregation semantics, and attaches a citable source and reproducible extraction manifest to every payload.
    24
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI-native access to the MITRE ATT\&CK framework, allowing LLMs and agents to query techniques, threat groups, software, and generate ATT\&CK Navigator layers for threat intelligence and security workflows.
    65
    87 npm
    5
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to look up data breaches and leaked passwords, search NVD CVEs and the CISA KEV catalogue, and generate passive attack-surface reports for a domain covering security headers, TLS, email/DNS security, and CT-log subdomains. All checks are read-only and passive, using only public third-party data sources.
    10
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server providing access to Hong Kong law and security data, including Foreign Domestic Helpers statistics from the Immigration Department.
    2
    34 PyPI
    2
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    al-time AI ecosystem intelligence for agents: 1,250+ classified AI security incidents, API pricing for 26 models across 7 providers, GPU cloud pricing, live provider status and cross-signal company analysis. No API key required.
    11
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    Enables AI assistants to query the full FAOSTAT API for global food and agriculture statistics, allowing natural-language questions about crop production, trade, food security, emissions, and more.
    23
    59 PyPI
    20
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Remote, read-only MCP connector to check any company's witnessed trust record on the Trooth Network, across identity, security, privacy, and AI practices. Also does a neutral read of a domain's public security surface and verifies signed Trust Ledger Tokens. No key, no account.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying SEC Form N-PORT data to find which mutual funds and ETFs hold a given security, view a fund's reported portfolio positions, and check data coverage and scope.
    282 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to retrieve current Social Security cost-of-living adjustment records, perform educational benefit calculations, browse preserved snapshot history, and access primary source links through a public, read-only remote endpoint that requires no API key.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to run domain-intelligence investigations through six free tools: sanctions screening, IP geolocation with VPN/Tor detection, email validation with breach status, company profiling, WHOIS and email-security scoring, and a single-call domain dossier.
    2 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables querying aggregated vulnerability records from CIRCL's Vulnerability-Lookup, resolving IDs across multiple feeds such as MITRE CVE, NVD, GitHub Security Advisories, PySec, and vendor CSAF, with tools for lookup, search, and recent records.
    274 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables searching and retrieving Humanitarian Data Exchange datasets, locations, and publishing organizations via CKAN, supporting discovery of data on displacement, refugees, food security, conflict, disasters, health, and population.
    369 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Consult status and regularity of private security companies with Brazil's Federal Police through an official read-only API. Works with any MCP client over HTTP, with prepaid credits.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying the UN Food and Agriculture Organization's FAOSTAT statistics, covering crop and livestock production, food balance, trade, land use, emissions, food security, and producer prices for 245 countries since 1961. Provides tools to discover statistical domains, dimension codes, and retrieve observations with units, years, and quality flags.
    458 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to query 16 institutional data and security endpoints spanning SEC EDGAR, certificate transparency, vulnerability scoring, KYB, regulatory complaints, federal spending, banking, cloud catalogs, DeFi, healthcare, academic citations, and seismic data. Access is monetized through x402 V2 micropayments or Stripe session passes.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides access to Austrian cultural heritage through the Kulturpool API, enabling search and discovery of cultural objects from major Austrian institutions like Albertina, Belvedere, and the Austrian National Library with progressive filtering and rate-limited security.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for querying live CISA KEV, EPSS, and enriched vulnerability feeds with full provenance. Enables natural-language access to auditable security-intelligence data from Claude Desktop and other MCP clients.
    MIT