Skip to main content
Glama
118,425 servers. Updated
20 Best Web Scraping MCP Servers: compared and ranked, November 2026Ranked from 2,071 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"How to fetch or scrape data from a website for use in training an LLM" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    A
    maintenance
    Enables agents to detect and redact PII and secrets in text, HTML, and PDF documents before they reach an LLM, with reversible placeholder, mask, or hash redaction, and to list supported detectors and redaction styles.
    4
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.
    1
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables AI bots and agents to call self-hosted APIs behind Cloudflare Access through a single HTTP fetch tool, using human-approved OAuth tokens instead of long-lived credentials.
    2
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables cloud-based MCP clients to delegate privacy-sensitive or large-output tasks to a local LLM, returning sanitized placeholders or digested summaries so private data never leaves the user's network.
    8
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables a cloud orchestrator to query a local Ollama model over Tailscale or a LAN as a side-channel for drafts, summaries, and other helper output, with tools to list available models and to redact text. Answers leaving the server are passed through output-only DLP that masks card numbers, IBANs, emails, phone numbers, API keys, and similar secrets before they reach the cloud.
    3
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables AI agents to use vault-stored credentials without ever exposing plaintext secrets to model context, transcripts, or telemetry. It decrypts AES-256-GCM envelopes locally via WebCrypto, resolves opaque secret handles into subprocess environments and outbound HTTP requests, issues auto-zeroizing time-bounded leases, and scrubs echoed credentials from output.
    19
    MIT
  • F
    license
    B
    quality
    A
    maintenance
    MCP server toolkit with payload library, WAF bypass generator, rate limiter, plugin system, and inter-MCP bridge for security testing.
    16
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables a constrained subagent to perform foreground GUI actions on Hyprland—observing, focusing windows, clicking, typing, scrolling, dragging, and managing the clipboard—under per-action approval with lease, audit log, and kill-switch gating.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables applications to scan model replies for leaks, sanitize output, authorize model-proposed actions with signed single-use grants, and optionally score prompt injection in a way that can only tighten enforcement decisions.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    OpenAI-compatible proxy with PII scrubbing, audit logging, and model routing. Drop-in replacement — set OPENAI_BASE_URL to point to this server. Supports GPT-4o, Claude, Gemini, and Llama via single endpoint.
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables LLMs to propose UPDATE/DELETE SQL that is run in a transaction, measured, and rolled back, requiring human approval before applying to prevent unauthorized changes.
    7 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to automate macOS desktop GUI applications through a policy-governed MCP proxy over Cua Driver, with fail-closed per-app allowlisting, a hardcoded sensitive-app denylist, an emergency kill-switch, masked audit logging, and self-healing app recovery with durable task journaling.
    3 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides a governance gateway for LLM and agent traffic via MCP, blocking prompt injection, redacting PII, enforcing per-tenant token budgets, and caching repeat questions semantically. Enables AI agents to route model calls through the same guardrails instead of calling providers directly.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to read connected bank accounts, transactions, and balances through the Lunch Flow Personal API using a personal API key.
    3
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Rate-limits MCP tool calls with Upstash Redis, allowing a configurable number of invocations per sliding window and sharing counters across server instances.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables organisations to connect a database so people can query it through an MCP client, authenticating through the organisation's own identity provider. Every question is parsed and checked against role-based table, column and row limits before running, with all decisions recorded in an audit trail.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes an OpenAI- and Anthropic-compatible HTTP, SSE, and stdio gateway that wraps multiple subscription CLIs, adding prompt-injection defense, PII redaction, cost-aware routing, and reasoning-trace capture for MCP-compatible clients like Claude Desktop and Cursor.
    83 npm
    15
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets MCP clients safely investigate live business data across multiple enterprise APIs by giving each subject a consistent scoped pseudonym and surfacing disagreements between sources as findings.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
    129 npm
    35
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables Claude or any MCP-capable assistant to explore and query a small business's sales, payments, invoices, and expenses through read-only SQL tools, while personal-data columns and write operations are refused by the database policy.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Demonstrates Agent Passport System pre-dispatch authorization by issuing one-use grants and verifying signed authorization envelopes before proxied tool calls reach the upstream server.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Provides a validated MCP server with strict schema-checked tools, alongside security gateway filtering, streaming PII redaction, and rate-limited model fallback routing.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables an MCP server to enforce External Verifier Contract authorization before proxied tool calls, allowing or denying requests based on a supplied bundle.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables agents to validate data safety before storing, transmitting, or logging data, preventing GDPR/HIPAA/PCI-DSS violations with clear verdicts like SAFE_TO_PROCESS, REDACT_BEFORE_PASSING, DO_NOT_STORE, or ESCALATE.
    3
    90 npm
    MIT