Skip to main content
Glama
120,548 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    A lightweight MCP server for security reviews that injects security requirements before code generation, scans dependencies for CVEs, and verifies generated code without disrupting workflow.
    73
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
    33 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.
    2
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Automatically discovers and tests MCP services for security vulnerabilities including command injection, SQL injection, SSRF, path traversal, and sensitive data exposure with detailed reports and remediation guidance.
    1
    -
  • A
    license
    A
    quality
    C
    maintenance
    Release gate agents call before they tell users a public website is ready to ship. Scans public websites across security, SEO, accessibility, legal compliance, and sustainability.
    9
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Agentic DevOps control loop and MCP server featuring polyglot Tree-sitter AST blast-radius analysis, OPA Rego policy evaluation, and isolated --network=none Docker test verification[cite: 1]. Exposes tools to inspect impacted dependency closures, validate security guardrails, and run targeted test suites.
    3
    2
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    MCP server for AI security scanning. Detects prompt injections, jailbreaks, data exfiltration, and social engineering attacks in real-time using 42 regex patterns via the ClawGuard Shield API. Sub-10ms response times.
    5
    17 PyPI
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for https://oathe.ai security audits. Runtime behavioral analysis and security scanner for Ai systems. Check trust scores before installing MCP servers, plugins, or AI agent skills.
    5
    14 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Static security linter for MCP servers. Scans tool definitions for vulnerabilities (path traversal, SQL injection, SSRF), scores description quality, and auto-rewrites descriptions for safer agent tool selection.
    2
    294 PyPI
    10
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Local, deterministic review of Git changes for coding agents: weakened tests and CI gates, security-boundary changes, input-to-sink flows, and blast radius. Runs the RepoPilot Rust CLI over stdio; no source leaves the machine and no model is called.
    6
    344 npm
    24
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A ruthless, read-only code review MCP server that analyzes code produced by AI coding assistants, catching missing requirements, security vulnerabilities, edge cases, and performance issues without ever modifying files.
    1
    12 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables real-time code analysis for JavaScript, TypeScript, and Python through Claude Desktop and other MCP clients, detecting bugs, code smells, and security vulnerabilities with automated quick fixes.
    7
    125 npm
    4
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Website audits for AI agents: cookie consent and tracking, Core Web Vitals and lost revenue, WCAG 2.2, email/DNS security (SPF, DMARC) and AI-search readiness, merged into one prioritised fix plan.
    11
    44 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server exposing SuperAudit’s free website audit as a callable tool, enabling AI agents to audit any public URL and receive scores across SEO, security, legal, performance, and more. No API key required; respects rate limits and caches results.
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: * HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy * HTTPS enforcement and redirect chain depth * Presence of security.txt, robots.txt, sitemap.xml Payment model: * 0.05 USDC per scan, paid automatically on Base via the x402 proto
    2
    18 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Automatically scans project dependencies (npm, Composer) for security vulnerabilities using the OSV.dev database, providing real-time alerts and detailed remediation guidance directly in your IDE.
    1
    13 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Exposes the Maester security test framework for Microsoft 365/Entra/Defender as MCP tools, enabling AI agents to run tests, audit AI agents and MCP servers, and investigate security posture.
    9
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables agents and security automation to adjudicate proposed defense mutations against a sealed, canonicalized attack scenario, enforcing reproduction, impact-screening, regression, and proven-improvement gates before promoting at most one candidate. Every verdict, rejected candidate, and rejection reason is sealed into a recomputable SHA-256 Merkle evidence root and hash-linked lineage that can be independently verified without trusting the server.
    6
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Security co-pilot for AI agents. Scans for vulnerabilities like prompt injection, infinite loops, and token bombing in AI Agents, audits MCP servers, verifies AGENTS.md governance, and generates EU AI Act compliance reports.
    10
    109 npm
    3
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables interaction with Webhook.site to create, manage, and monitor endpoints for capturing HTTP requests, emails, and DNS lookups. It provides 16 tools for testing webhooks and inspecting incoming data through the Model Context Protocol.
    24
    41 PyPI
    12
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Point your coding agent at a URL and get a real-browser QA audit: broken signup/login/checkout flows, JS console errors, missing analytics, consent + security headers, mobile tap targets, and accessibility — returned as machine-verified findings graded A-F.
    44
    22 PyPI
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables interaction with the APVISO AI-powered penetration testing platform to manage targets, initiate scans, and retrieve vulnerability findings. It allows developers to integrate security testing workflows directly into MCP-compatible tools like Claude Code and Cursor.
    18
    17 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Privacy-preserving authentication cookie security auditing for AI browser agents, MCP clients, and automated testing. Detects missing HttpOnly, Secure, SameSite, and other cookie protections, and returns structured security findings without exposing raw cookie values.
    5
    5
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Programmatic email deliverability testing for AI agents. Create inbox placement tests across Gmail, Outlook, Yahoo, Mail.ru, Yandex — get per-provider placement (Inbox/Spam/Promotions), SPF/DKIM/DMARC auth, Rspamd & SpamAssassin verdicts, DNS health (MX, PTR, DNSBL), and live SSE results.
    5
    74 npm
    2
    MIT