Skip to main content
Glama
77,030 servers. Updated
20 Best GitHub MCP Servers — compared and ranked, August 2026Ranked from 1,620 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Exploring GitHub Repositories for File and Folder Organization Inspiration" matching MCP servers:

  • gef-mcp-for-ctf

    guaidao2
    F
    license
    Not graded
    quality
    D
    maintenance
    GDB Enhanced Features MCP server for remote debugging and CTF exploitation with 41 specialized tools including ROP search, format-string detection, and memory patching.
    9

  • MCP GitHub PR Reviewer

    TheNovaNodes
    F
    license
    Not graded
    quality
    C
    maintenance
    This server enables AI agents to delegate GitHub pull request diffs for automated security auditing, returning structured vulnerability and architecture feedback while routing requests through a resilient multi-provider fallback pipeline.

  • Mythic MCP

    johanrobbenites
    F
    license
    B
    quality
    C
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12

  • VulniCheck

    andrasfe
    A
    license
    Not graded
    quality
    C
    maintenance
    AI-powered security scanner for Python projects and GitHub repositories. Detects vulnerabilities, secrets, and provides AI risk assessment.
    11
    MIT

  • gobuster-mcp

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    A Model Context Protocol (MCP) server for Gobuster that enables AI assistants to perform directory/file, DNS, virtual host, S3 bucket, and TFTP enumeration on a remote Kali Linux host via SSH.
    10
    MIT

  • mcp-guard

    zent7x
    A
    license
    A
    quality
    B
    maintenance
    Adds security capabilities like port scanning, TLS inspection, DNS enumeration, process monitoring, secrets scanning, HTTP header auditing, and CVE checking to Claude Code and Cursor.
    23
    32
    MIT

  • burp-mcp-plus

    titaniumtushar
    A
    license
    A
    quality
    D
    maintenance
    Enables structured HTTP request creation and local file ingestion for LLM integration with Burp Suite, reducing malformed requests and token costs.
    20
    6
    MIT

  • sliver-mcp

    v0idravl
    A
    license
    B
    quality
    B
    maintenance
    A Model Context Protocol server for the Sliver C2 framework that exposes operator tools like listeners, implant generation, sessions, command execution, and file operations for LLM-driven adversary emulation.
    37
    1
    MIT

  • Bug Bounty MCP Server

    SlanyCukr
    A
    license
    C
    quality
    D
    maintenance
    Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.
    40
    2
    MIT
  • compuute-scan-api by Compuute

    compuute-scan-apiofficial

    Compuute
    A
    license
    Not graded
    quality
    A
    maintenance
    Scan-as-a-Service for MCP servers. Wraps the compuute-scan static security scanner with HTTP and MCP endpoints to analyze public GitHub repos for MCP-specific vulnerabilities.
    MIT

  • mcp-fortress

    mcp-fortress
    A
    license
    Not graded
    quality
    D
    maintenance
    Scans MCP servers for security vulnerabilities, prompt injection, and tool poisoning, providing risk scores and protection.
    4
    MIT

  • Kali MCP Server

    weirdmachine64
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables running Kali Linux security tools and commands in a containerized environment for semi-automated penetration testing, with background job management and out-of-band interaction detection.
    16
    Apache 2.0

  • code-audit-mcp

    kkk1259
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables automated security code auditing using LLM and MCP, including AST parsing, taint analysis, dataflow tracing, and automated PoC generation for multi-language codebases.
    MIT

  • Hacking Buddy MCP

    ManuelBerrueta
    A
    license
    Not graded
    quality
    D
    maintenance
    A proof-of-concept tool that integrates AI into security operations, allowing users to perform offensive security tasks like network scanning and reconnaissance through natural language commands to GitHub Copilot.
    5
    Apache 2.0