Skip to main content
Glama
115,941 servers. Updated
20 Best Browser Automation MCP Servers: compared and ranked, November 2026Ranked from 5,034 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information about playwrights or Playwright (context-dependent)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    A local MCP server that acts as a policy-based firewall for personal context, letting users control agent access to their data with deny-by-default rules, per-field grants, and an audit trail.
    89 npm
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A security wrapper for MCP servers that provides trust-on-first-use pinning, guardrail scanning, and protection against prompt injection attacks. It acts as an intermediary layer to ensure universal compatibility and secure enforcement of server configurations across various MCP host applications.
    228
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Gives AI agents governed context about a data warehouse — table meaning, ownership, lineage, freshness, and PII flags — plus read-only, row-limited, PII-protected querying across DuckDB, Snowflake, and Databricks. Guardrails enforced at parsing, connection, and result layers keep agents from writing, running away, or leaking personal data.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables multiple users to share an AI-maintained markdown knowledge base with per-person privacy enforced by the server, so any MCP-capable assistant can recall and save private notes, tasks, and decisions alongside reviewed team and role-gated silos. Access is scoped by identity-provider roles, keeping each person's silo readable only by them while shared knowledge stays available to the whole team.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Local MCP server for private, consent-based speaker identification and attribution, with per-language voiceprints and calibrated match thresholds. It lets AI assistants know who is speaking in a room or transcript without cloud services.
    1
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables authenticated MCP clients to query Security Context tools against a git tag or commit ref while returning only vulnerabilities and fix fingerprints that predate that snapshot, so agents do not receive live bugs at the tag.
    -
  • A
    license
    B
    quality
    D
    maintenance
    Enables managing personal information with dynamic topic-based organization (tasks, meetings, contacts, etc.), supporting optional OTP authentication and AES-256 encryption for sensitive data with automatic backups.
    10
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.
    4
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Privacy-first, tamper-evident receipts for MCP tool calls. It hashes and signs arguments/results so you can verify what ran, when, without storing raw payloads.
    2
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    IMCP - Insecure Model Context Protocol The DVWA for AI Security! Welcome to IMCP – a deliberately vulnerable framework that exposes 16 critical security weaknesses in AI/ML systems. Whether you're a security researcher, developer, or educator, IMCP is your playground for hands-on learning about real
    15
    4
    JavaScript
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables inspection and governance of enterprise ingested context by classifying security clearance tiers, sanitizing cross-department prompts, and enforcing role-based access boundaries to prevent data leaks. It runs as a zero-dependency MCP server compatible with Claude Desktop, Cursor, and other agent frameworks.
    7
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables enterprise context governance by auditing ingested content, classifying security clearance tiers, sanitizing cross-department prompts, and preventing data leaks through role-based permission boundaries.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables coding agents to drive a browser through an authenticated session while being unable to read the credential that created it, by running the browser process under a separate OS user and stripping unsafe code-execution tools. The agent interacts over MCP with a hardened, tool-filtered automation server seeded from a login helper's saved session.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Loads signed, verified markdown capsules into AI agents, refusing any capsule without a valid signature from a trusted key. Enables secure, provenance-checked context loading for agents.
    31 npm
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    A fully compliant MCP gateway and registry that federates any MCP, A2A, or REST/gRPC API behind one unified endpoint, adding centralized discovery, auth, rate limiting, retries, and OpenTelemetry observability. It virtualizes legacy services and agents into MCP-compliant tools, prompts, and resources, with 40+ plugins extending transports and protocols.
    Apache 2.0
  • F
    license
    Not graded
    quality
    D
    maintenance
    Implements a secure message communication protocol for handling exchanges between the banking chatbot and Azure OpenAI, providing message queuing, reliability, and detailed logging.
    1
    -
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to run read-only AWS security audits and receive normalized, severity-ranked findings about account posture, such as stale access keys, missing MFA, public buckets, open security groups, and CloudTrail coverage.
    11
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.
    10
    8
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Registers a set of inert, tempting decoy tools with any MCP-capable client so that any call from a hijacked or prompt-injected agent instantly raises an alert with full attack context and a per-call trace token. Also plants worthless canary tokens in honeypot files that trigger zero-false-positive leak alerts when they surface in agent output, files, or outbound requests.
    12
    80
    MIT