Skip to main content
Glama
116,549 servers. Updated
20 Best Web Scraping MCP Servers: compared and ranked, November 2026Ranked from 2,036 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Web Scraping" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    11 npm
    1
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    A Node.js-based frontend security audit tool that performs comprehensive dependency security audits for both local projects and remote repositories. Generates detailed Markdown reports with vulnerability detection, risk assessment, and fix recommendations.
    1
    8 npm
    7
    ISC
  • A
    license
    B
    quality
    D
    maintenance
    Provides seamless integration with Fastly's Next-Gen Web Application Firewall API, enabling AI assistants to manage web application security through natural language interactions.
    29
    1
    MIT
  • A
    license
    C
    quality
    B
    maintenance
    Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.
    51
    39 PyPI
    8
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Turns any web API into a governed, agent-ready MCP server with lockfile-based approval, fail-closed enforcement, and full audit trail.
    MIT
  • A
    license
    Not graded
    quality
    F
    maintenance
    23 pay-per-call web analysis APIs as MCP tools. Security audits, tech stack detection, email verification, SEO analysis, SSL checks, performance monitoring. Supports x402 and Stripe MPP payments.
    96 npm
    6
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Node 20+ developers to stand up single-file, zero-dependency MCP stdio servers whose destructive tools stay disabled by default, answering calls with a refusal and a dry-run preview until an environment variable turns them on. Also provides truthful empty/error results, secret redaction in logs, guarded stdout, and per-tool timeouts and cancellation.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP clients to inspect and query PostgreSQL databases through per-endpoint bearer-token authentication, SQL guarding, and comprehensive audit logging, while a web UI manages connections, endpoints, roles, and audit records.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables real-time email verification, phone and WhatsApp validation, caller ID, IP geolocation, blacklist and spam checks, web and social scraping, Google SERP lookups, and AI brand visibility audits through 19 tools. It runs as a hosted Streamable HTTP endpoint with an included stdio bridge so any MCP client can connect out of the box.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables autonomous AI agents to operate safely by intercepting risky tool calls, evaluating them against policy, and suspending them for human approval via Slack, Telegram, or a web dashboard.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables an AI agent to perform read-only inspection of Palo Alto Networks Panorama and PAN-OS firewalls for monitoring and troubleshooting, including inventory, health, network, logs, and policy queries. It communicates via the PAN-OS XML API over HTTPS and does not allow configuration changes.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables cloud AI agents to safely work on a Mac through MCP-style JSON-RPC by providing approval-gated command execution, jailed file access, signed requests, and a tamper-evident audit log. Risky actions require on-device approval, while files remain confined to a chosen folder with recoverable writes and deletions.
    88 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Real-time audit and approval system for Claude Code tool calls, enabling monitoring and control of AI agent actions with a web dashboard.
    19
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables multi-user, per-namespace storage of AES-256-GCM-encrypted credentials (SSH, web, API, DB) managed through a web console with TOTP 2FA, and lets AI clients save, list, retrieve, or server-side invoke those secrets over a remote Streamable-HTTP endpoint without ever exposing the values in chat.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Aggregates multiple backend MCP servers (Stdio, SSE, and Streamable HTTP) into a single hub, exposing their combined tools and resources through unified SSE or Streamable HTTP endpoints, or as a Stdio server, while routing requests to the correct backend. Adds API-key/bearer-token endpoint security, per-tool enable/disable and renaming, and an optional web admin UI with live config reload, install monitoring, and a web terminal.
    104 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to access deliberately selected Delta capabilities through independently scoped gateway profiles, without requiring a browser, Web plugin, or graphical session.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Protects AI agents from prompt injection attacks, jailbreak attempts, and common web vulnerabilities by screening untrusted input through semantic LLM analysis and static pattern matching.
    85 npm
    2
    ISC
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to orchestrate reconnaissance, web scanning, brute-force testing, exploitation, traffic capture, hash cracking, wordlist building, privilege escalation audits, and client report generation via STDIO/HTTP/SSE transports with optional bearer/OIDC authentication.
    298 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables compatible AI clients to read stored personal-finance data and, with explicit user authorization, perform supported mutations under the same ownership checks as the web app.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to securely fill web forms with credentials from SecureVault, keeping raw secrets hidden from the agent.
    8 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for web application security scanning with Nikto, Nuclei, Wapiti, and shcheck integration.
    8
    BSD 3-Clause
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables decoding JSON Web Tokens offline and keylessly, returning the header and payload JSON along with a summary of standard claims such as issuer, subject, and expiration status. Note that it only decodes — it does not verify signatures, so a decoded token is not a trusted one.
    199 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to audit JSON Web Tokens (JWTs) and other token formats for security vulnerabilities, including HMAC secret cracking, live JWKS verification, and CVE fingerprinting.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Credential vault for LLM agents that stores credentials encrypted and exposes MCP tools for authenticated HTTP requests, web scraping, and credential management, preventing AI assistants from seeing secrets.
    Apache 2.0