Skip to main content
Glama
116,578 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Security" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    B
    quality
    B
    maintenance
    Exposes seven MCP tools that let an AI coding agent detect a project's stack, fetch the priority security checks for that platform, search 2,057 OWASP-derived check cards with file-and-commit provenance, and record evidence-backed pass/fail results in a report.
    7
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Converts AI Skills (following Claude Skills format) into MCP server resources, enabling LLM applications to discover, access, and utilize self-contained skill directories through the Model Context Protocol. Provides tools to list available skills, retrieve skill details and content, and read supporting files with security protections.
    3
    39 PyPI
    29
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP clients to safely retrieve and query a RAG system over research papers on Raman spectroscopy of carbon nanotubes using read-only tools, a resource, and a prompt. It adds controlled paid-answer budgeting, prompt-injection fencing, and backend security checks.
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to perform fast, offline full-text search and section-level retrieval over the HackTricks offensive-security wiki, including ranked snippets, page/section extraction, code-only payloads, and category navigation.
    3
    68 npm
    5
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI coding agents to search a security corpus, scan Terraform plan JSON for cited findings, and list sources via MCP tools grounded in CIS AWS Foundations and OWASP Top 10 CI/CD risks.
    3
    Apache 2.0
  • A
    license
    A
    quality
    Not graded
    maintenance
    Enables AI assistants to securely connect to Snowflake data warehouses and execute SQL queries through natural language interactions. Supports multiple authentication methods and provides formatted query results with built-in security controls.
    1
    2
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Bee by HEOSSI exposes 16 MCP tools for specialist chat, code and security analysis, research, provenance, account usage, tenant-scoped documents and memory, quantum job workflows, and computer-host validation. API calls require a Bee API key and follow plan entitlements and metering.
    16
    2
    Apache 2.0
  • A
    license
    B
    quality
    D
    maintenance
    A Model-Context-Protocol server that provides SQL query execution and database management capabilities for Vertica databases, featuring connection pooling, schema management, and security controls.
    6
    2,011 PyPI
    7
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Dynamic MCP server — 30+ tools across fact verification, agent memory, Indian NLP, contract risk, security threat modelling, sales call intelligence and more. x402/USDC micropayments on Base.
    33
    4 npm
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    IMCP - Insecure Model Context Protocol The DVWA for AI Security! Welcome to IMCP – a deliberately vulnerable framework that exposes 16 critical security weaknesses in AI/ML systems. Whether you're a security researcher, developer, or educator, IMCP is your playground for hands-on learning about real
    15
    4
    JavaScript
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    缔零法则MCP是基于LLM和RAG技术搭建的实现完全替代人力的全自动化风险识别的内容安全审查平台,致力于通过代理AI技术减少人力成本,高效高精度为用户提供分钟级接入的内容风控解决方案,破解安全威胁,提供从风险感知到主动拦截策略执行的全链路闭环与一体化解决方案。This MCP tool is an AI-powered content security review platform built on LLM and RAG technologies, designed to achieve fully automated risk identification that completel
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    A Model Context Protocol server that provides Claude with access to Pangea's security services, including AI Guard, Domain Intel, Embargo checks, IP Intelligence, Redaction, Secure Audit Log, URL Intelligence, and Vault services.
    52 npm
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables inspection and governance of enterprise ingested context by classifying security clearance tiers, sanitizing cross-department prompts, and enforcing role-based access boundaries to prevent data leaks. It runs as a zero-dependency MCP server compatible with Claude Desktop, Cursor, and other agent frameworks.
    7
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables interaction with the Morphik multi-modal database system for document ingestion, retrieval, querying, and management. Supports text and file ingestion, semantic search with LLM-powered completions, and file system navigation with security controls.
    14 npm
    24
    ISC
  • A
    license
    Not graded
    quality
    B
    maintenance
    AAAA-Nexus MCP provides 135 tools for autonomous AI agent infrastructure: formally bounded trust scoring, RatchetGate session security, on-chain A2A escrow, EU AI Act / NIST compliance certification, DeFi parameter proofs, VRF gaming with cryptographic proof, and verifiable randomness — all backed by the atomadic.tech API. Free tier available, no signup required.
    40 PyPI
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables Claude to answer seller questions from previously saved research using read-only tools for accounts, initiatives, intent signals, key people, knowledge retrieval, and guarded dataset queries. It supports multi-tenant, authenticated access with tenant isolation and enforced read-only security.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A local security knowledge base that indexes documentation like CVEs and CWEs using hybrid keyword and semantic search. It enables LLM agents to query indexed materials via MCP for accurate, offline retrieval during security audits and code reviews.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes search, passage retrieval, and document listing tools over streamable HTTP so MCP clients can query a security-questionnaire knowledge base and receive results with document, version, and heading provenance.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides a read-only PostgreSQL SQL surface for LLM agents via MCP, with defense-in-depth security layers for safe database queries.
    236 PyPI
    4
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to query, explore, and analyze PostgreSQL databases through the Model Context Protocol. It provides robust security features including read-only mode, schema restrictions, and query timeouts for safe data interaction.
    6 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for tiered, injection-resistant natural-language access to a washing-machine Turso database, supporting stdio and HTTP transports with security guarantees like silent downgrades and audit logging.
    Mozilla Public 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Description: Introduce Beelzebub, an MCP‑based honeypot framework that enables creating decoy tools to detect prompt injection and malicious agent behavior. Motivation: Strengthen the security of LLM workflows by adding a non‑intrusive detection mechanism.
    2,230
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Claude to index and retrieve context from codebases using self-hosted Milvus for semantic search, with hardened reliability and security for production use.
    9 npm
    2
    MIT