Skip to main content
Glama
116,873 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    Cloud infrastructure provisioning via natural language. Enables deploying production-ready infrastructure on AWS, GCP, Azure, or Oracle with a single prompt.
    12
    13 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables generating, reading, auditing, and previewing BPMN 2.0 diagrams for Bizagi Modeler, with an automatic layout engine that produces files Bizagi can open, plus optional control of the Bizagi Modeler desktop app on Windows.
    12
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables auto-configuration and validation of React components against a glassmorphic design token system using an AST correction engine. It supports managing UI presets, enforcing design uniformity in Monaco IDE, and exporting tokens as CSS, Tailwind, or JavaScript variables.
    14
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to inspect, audit and document Sonatype Nexus Repository 3 through read-only tools covering repositories, blob stores, tasks, cleanup policies, security objects and drift checks, with write and raw REST tools only when explicitly enabled.
    12
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables desktop MCP clients to launch a local connector that renders Mermaid flowcharts from an AI assistant into a browser-based reader served on localhost. Users can explore a diagram step by step, inspect a step's incoming and outgoing connections, read relationships as text, and save the Mermaid source.
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Lets Claude Code, Cursor, VS Code and other AI agents draw and edit draw.io diagrams from your project's files, on a live browser canvas you can also edit by hand. Includes version history, undo, cloud shape libraries (AWS, Azure, GCP) and PNG or SVG export.
    16
    35 npm
    36,683
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Renders diagram-as-code to PNG files on your disk, and also provides text-art previews and syntax validation, all locally without a browser or network.
    4
    9 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Extracts deterministic architecture maps from codebases for AI agents, enabling queries about blast radius, routes, security findings, and production readiness without sending code anywhere.
    6
    27 PyPI
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables assistants to turn a plain-language process description into a checked BPMN swimlane diagram, asking only for missing details and showing a picture for approval. Once approved, it exports the diagram as SVG, PNG and a .bpmn file that opens in Camunda, all drawn and checked locally on the user's own computer.
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    diagramzu-mcp lets an AI client (Claude, Cursor, ChatGPT, etc.) author Mermaid diagrams in a shared workspace that a team can read, comment on, embed, and present at a clean URL — rather than just generating a one-off diagram. Hosted endpoint https://mcp.diagramzu.ai/mcp or local npx -y @diagramzu/mcp. Also listed in the official MCP registry as ai.diagramzu/mcp.
    19
    180 npm
    1
    MIT
  • F
    license
    A
    quality
    B
    maintenance
    An MCP server that generates standalone SVG architecture diagrams from text descriptions, running entirely on your machine with no dependencies or network access.
    8
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI coding agents to make evidence-aware design-pattern decisions by analyzing cases, comparing options, detecting misuse, stress-testing assumptions, planning adoption, writing ADRs, and generating evidence plans with transparent scoring.
    8
    5 npm
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to generate and structurally validate 30+ diagram types—UML (class, sequence, activity, state, component, and more), Mermaid, D2, Graphviz, TikZ, ERD, BPMN, and C4—via Kroki, PlantUML, and Mermaid.ink, returning rendered SVG/PNG/PDF/JPEG as URLs, base64 payloads, or saved files through tools like generate_uml and generate_uml_batch.
    5
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A tree whose vocabulary, rules and solvers are data, edited at runtime through generic tree_* tools. Rules go red on the node that breaks them, so it works as a design-dexision ledger on any checked knowledge base.
    14
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables a coding agent to sketch explanations step by step on a shared hand-drawn canvas beside the chat, highlighting parts as it talks and reading back anything the user draws or notes. Boards persist per chat and can be searched, saved, and exported as Excalidraw files or PNGs.
    11
    1,183 npm
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Semantic React/TSX analysis MCP server that saves 70-90% tokens by using AST to retrieve precise component usages, prop flow, and state update information for AI coding assistants.
    10
    10 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to edit diagram/graph structures on a live draw.io canvas and manage local versions via snapshots, restore, and export without embedding a separate LLM or polluting the workspace.
    7
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    Enables agents and IDEs to generate and verify NestJS microservices with hexagonal architecture, JSON:API contracts, and mandatory security headers. Supports declarative spec-based module generation, refactoring existing services, quality checks, and per-repository inventory and auditing.
    15
    -
  • A
    license
    A
    quality
    D
    maintenance
    Enables creation, editing, and export of ASCII art diagrams using Monodraw on macOS, with tools for generating boxes, flowcharts, tables, trees, and sequence diagrams.
    6
    18 npm
    8
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Score your agent's governance (0-100), lint MCP tool definitions, and estimate costs across all major models. Free diagnostic tools with no API key needed. Expert skill files on governance, economics, and system architecture available with free tier.
    8
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to scope and generate safe Odoo add-on starters locally, including drafting architecture plans, creating 11-file add-on scaffolds, validating them, and saving files to disk—all without API keys or network access.
    6
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Turns Claude or ChatGPT into a live system design interviewer that watches a hand-drawn whiteboard, reads the diagram as structured data or an image, hears spoken answers, pins questions on components, and grades the session. Everything runs locally, so users can practice mock interviews on their own machine without API keys.
    13
    64 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables developers and product owners to scan a codebase and extract a readable business overview—features, roles, access control, data model, and endpoints—along with findings on missing or inconsistent rules, and generate shareable HTML or Markdown reports and diagrams.
    9
    2
    MIT