Skip to main content
Glama
116,717 servers. Updated
20 Best Jira MCP Servers: compared and ranked, November 2026Ranked from 637 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Accessing Jira Tickets and Updating Their State" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    A
    quality
    D
    maintenance
    Provides a generic HTTP client tool allowing AI agents to make arbitrary HTTP requests from their environment, with support for environment-variable placeholders for secrets.
    1
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables bug bounty hunters to browse programs, inspect scope details, track scope changes over time, and receive personalized, recency-boosted program recommendations based on their skill profile.
    4
    ISC
  • A
    license
    A
    quality
    A
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query structured penetration testing engagement state captured from tmux sessions, including credentials, hosts, and command provenance with exact source bytes.
    15
    MIT
  • F
    license
    B
    quality
    C
    maintenance
    Enables read-only interaction with HackerOne, providing tools for searching and analyzing reports, exploring programs and scope, accessing earnings, and retrieving public disclosures.
    25
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    The Checkmarx Security MCP server bridges your AI assistant (Claude, Cursor, Copilot, etc.) with Checkmarx One's enterprise application security platform. It exposes security workflows as natural-language-accessible MCP tools, allowing developers to scan code, investigate findings, and receive context-aware fixes without leaving their development environment.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Alexa+ conversational applications to compile conversational contracts into revisioned state rules, guard effects against stale or ambiguous state, and generate adversarial multi-turn attacks through MCP tools.
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    An MCP server that lets AI agents manage a local watchlist of the software and exact versions you run, then check them against vulnerability and exploitation data. It enables adding, updating and listing watched items, pulling current alerts or recent findings, and asking whether a given CVE affects anything on the list.
    319 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Audits MCP server configurations for security risks including capability inventory, SSRF, prompt injection, and drift detection. Works in read-only mode and can also be used as an MCP server to let AI agents audit their own attack surface.
    259 PyPI
    4
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    An MCP server that audits installed MCP servers, revealing their credentials, tool capabilities, and security risks. It enables users to assess and monitor the access granted to AI models.
    18 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI assistants to drive OWASP ZAP for authorized penetration testing and bug-bounty workflows, including authenticated scans and vulnerability triage through 67 curated safety-gated tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    The server provides pre-invocation security assessments for MCP servers, ensuring that targeted tools and their entire dependency trees are free from known compromises. It enables agents to call external servers safely by issuing signed verdicts that prevent exploitation before any action is taken.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP clients to scan codebases, persist and prioritize security findings against SLAs, retrieve CVE details, propose fixes, and create tickets through its tools. It also supports agent-assisted remediation drafting while enforcing human approval and preventing auto-merge.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables autonomous bug bounty hunting with H1 auto-submit, profit tracking, and a live dashboard. Coordinates real-time state, credential vault, session management, and payload generation for MCP-compatible AI agents.
    3 npm
    ISC
  • A
    license
    Not graded
    quality
    D
    maintenance
    This MCP server offers 72 typed tools for Kali Linux pentesting, including recon, web, AD, cracking, C2, remote desktop, and tunneling. It provides structured JSON output, persistent session state, and auto-populated findings for streamlined workflows.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets an agent inspect and audit MCP servers before connecting to them, checking their exposed tools, prompts and resources for tool poisoning, shadowing, excessive permissions, leaked secrets and unsafe transports against 24 deterministic rules. Results are returned as findings with evidence, remediation and CWE/OWASP references, and can fail CI with SARIF, Markdown or standalone HTML reports.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to control and analyze RFID hardware through natural language: read, crack, emulate, and clone cards via MCP tools, with safety gates, offline dump analysis, and a host-side card library.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to perform Volatility 3 memory forensics through natural language, including process and network analysis, injection detection, and shellcode extraction from memory dumps.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for Frida dynamic instrumentation, enabling AI agents to enumerate devices/processes, attach, inject JavaScript, hook functions, read memory, and collect results via MCP tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables local, persistent analysis of business workflows and application state from imported Burp XML or HAR traffic, building actor/entity/state graphs and generating testable hypotheses for manual validation during authorized security testing.
    MIT
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities for a vendor/product pair, look up individual CVE IDs, and fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions. It also reports which databases are in use and when they were last updated.
    -
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables users to perform static security audits on EVM Solidity contract code for critical flaws such as reentrancy state changes, unhandled external calls, unchecked delegatecall, and tx.origin authentication vulnerabilities, returning risk audit reports.
    7
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, look up specific CVE IDs, fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions, and check database metadata. This gives MCP clients conversational access to public vulnerability data.
    -
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables static auditing of EVM Solidity smart contracts to detect critical vulnerabilities such as reentrancy state changes, unhandled external calls, unchecked delegatecall, and tx.origin authentication flaws, producing risk audit reports.
    7
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables users to browse vendors and their associated products, look up vulnerabilities by vendor/product or specific CVE ID, retrieve the latest CVEs with CAPEC, CWE and CPE expansions, and inspect current database information and update times.
    -