Skip to main content
Glama
117,399 servers. Updated
20 Best PDF MCP Servers: compared and ranked, November 2026Ranked from 2,140 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Extracting Orders from PDF Files" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    Connects AI assistants to Solodit's 49,000+ blockchain vulnerability database, enabling search, browse, and lookup of audit findings directly from your AI workflow.
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to perform passive security scans on domains, checking email spoofing (DMARC/SPF/DKIM), TLS weaknesses, security headers, exposed files, and subdomain-takeover risk without needing an API key.
    7
    89 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.
    7
    125 npm
    11
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to search and analyze vulnerabilities and exploits from multiple intelligence sources, including NVD, CISA KEV, ExploitDB, Metasploit, and more, with tools for CVE research, exploit analysis, and report generation.
    17
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    11 npm
    1
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables users to scan MCP servers for security threats, check installed servers, and analyze config files for risks, all from AI assistants like Claude, Cursor, or Windsurf.
    5
    11 npm
    4
    -
  • A
    license
    A
    quality
    B
    maintenance
    Security checks for apps built with AI: Trivy and Opengrep findings explained in plain English, with a fix request for your coding agent. Hosted scan by default (only files Git would commit, never secret files) or fully local.
    5
    42 PyPI
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables users to retrieve and display CVE vulnerability information from the National Vulnerability Database (NVD) with support for keyword search and detailed lookup.
    2
    99 npm
    4
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.
    55
    149 npm
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI assistants to analyze Android APK and iOS IPA files for security issues through natural language conversation, including permission auditing, secret detection, and SDK enumeration.
    12
    18 npm
    7
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server exposing LIEF for cross-format binary analysis, enabling parsing, section listing, imports/exports, disassembly, and string extraction for PE, ELF, MachO, DEX, ART, and OAT files.
    17
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server that exposes 31 OSINT checks from Lissy93/web-check as tools for website analysis, including SSL, DNS, headers, WHOIS, and security presets. Enables natural-language-driven web recon and health checks.
    8
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables MCP-compatible AI clients to analyze Android APK and iOS IPA files for security issues through natural language, including permission auditing, API endpoint extraction, hardcoded secret detection, Firebase inspection, and third-party SDK enumeration.
    12
    1,327 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query structured penetration testing engagement state captured from tmux sessions, including credentials, hosts, and command provenance with exact source bytes.
    15
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI clients to manage ADB devices and packages, detect packers, pull APKs, and unpack hardened Android apps via static extraction, BlackDex, or Frida, then convert DEX files to smali. Supports listing, reading, and regex-searching smali classes to locate APIs and other reverse-engineering targets.
    13
    94 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables an AI agent to statically triage local binaries and APKs by extracting and classifying strings, flagging hardcoded secrets, detecting file types, checking exploit-mitigation flags, and auditing Android manifests. Results from all tools can be merged into a single structured report with a summary findings list.
    6
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Talk to your Flipper Zero from Claude Code — or any MCP client. Storage, app deployment, screen capture, button automation, JavaScript execution on the device, and honest answers about what is nearby.
    66
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    The most comprehensive steganography analysis toolkit for AI agents, providing 60 tools across 7 categories for detecting and extracting hidden data from images, audio, text, and files, all running 100% offline.
    2
    100
    177 npm
    7
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables evolving scan and policy configurations by inferring security phenotypes from observed findings, seeding competing genomes, measuring fitness, and generating bounded trial plans with ancestry lineage.
    5
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables local, evidence-first triage of native binaries by extracting bounded symbols, strings, sections, call sites, gadget candidates, and mitigation signals as MCP tools for agent-guided manual review. It also provides metadata-only inspection for carriers such as archives, WebAssembly, firmware, and scripts without claiming verified vulnerabilities.
    12
    5
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for integrating with StackHawk's security scanning platform. Helps developers set up StackHawk, run security scans, and triage findings to fix vulnerabilities — all from within an LLM-powered IDE or chat.
    27 PyPI
    9
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables PE coordinate and RVA-based driver analysis, structured evidence collection, and direct WinDbg pairing for debugging and runtime byte comparison from Binary Ninja.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI editors such as Cursor, Claude Code, Windsurf and VS Code to scan a project for common AI-introduced security mistakes — leaked keys, open Supabase/Firebase data, missing auth, unverified Stripe webhooks, SQL injection and more — and return findings with exact fix instructions. It also provides a guided prompt that walks an agent through fixing critical issues one by one and verifying each fix by re-scanning, without ever editing files or rotating keys itself.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.
    17 PyPI
    2
    Apache 2.0