Skip to main content
Glama
120,548 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.
    21 npm
    2
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    RCP-1 is an enterprise-ready MCP server that connects AI assistants to SAP ABAP systems via the ADT REST API, with built-in security, access controls, and deployment options for BTP or on-premise.
    8
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Analyzes GitHub Pull Request diffs for security vulnerabilities and data leaks, using a deterministic filter to skip trivial changes and an AI-powered analysis for logic changes.
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI agents to perform comprehensive GitHub security audits across org settings, repositories, Actions workflows, secrets, supply chain, and access control using 39 tools and 45 checks.
    39
    207 npm
    15
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Connects AI assistants to GitHub repositories, pull requests, issues, commits, and code search while enabling repository visibility controls, CI/CD monitoring, sandboxed local filesystem access, and code quality/security analysis.
    13
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to administer GitHub Enterprise (Cloud & Server) — organizations, members, teams, repositories, rulesets, security alerts, and Actions — through guarded MCP tools that are read-only, org-scoped, audited, and human-confirmed by default. It also ships an opinionated security-posture baseline that scores a live organization and can apply hardening fixes.
    23
    457 npm
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    A security-first MCP gateway that enables AI assistants to safely inspect and interact with GitHub repositories through a controlled, auditable tool layer with policy enforcement and human approval for mutations.
    27
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Connects LLMs to GitHub and GitLab to analyze pull and merge requests for logic, security, and architectural alignment. It provides tools for fetching diffs, file contents, and project metadata, alongside guided prompts for professional code reviews.
    10
    18 npm
    ISC
  • A
    license
    B
    quality
    D
    maintenance
    A modular monolith MCP server connecting multiple providers (Redash, PostgreSQL, GitHub) with unified permission, security, and auditing, enabling secure data access and tool execution.
    4
    42 npm
    Apache 2.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables read-only, evidence-led security audits of GitHub-hosted source code through explicit workflow primitives: repository reconnaissance, coverage-ledger planning, heuristic candidate leads, structured findings validation, independent verification gates, and JSON/Markdown report generation. It never clones, executes, or probes the target code, and marks runs incomplete until coverage and reviewer-verification gates pass.
    14
    AGPL 3.0
  • A
    license
    D
    quality
    D
    maintenance
    Enables AI agents to perform security audits on pull request diffs by detecting secrets, dangerous code patterns, and new dependencies, outputting structured JSON for generating PR review comments.
    1
    MIT
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables git repository operations through REST endpoints, providing access to repository status, diffs, and commits. Enforces security through configurable root directory allowlists for safe git operations.
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Analyze GitHub repositories into structured JSON with tech stack detection, dependency analysis, health signals, and security checks. No AI, fully deterministic. Available as CLI and MCP server.
    9
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A production-grade MCP server offering modules for GitHub issue/PR triage, live website auditing, and automated release note generation. It provides robust security features like write-operation confirmation gates, rate limiting, and dual-read storage backends.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to plan, apply, and audit GitHub repository configuration — merge options, security features, rulesets, branch protection, labels, topics, webhooks, files, and git hooks — from reusable templates assigned to single repos or in bulk. It also surfaces drift reports and a full audit trail of who changed what, when, and from where.
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Exposes a Windows or Linux host terminal to remote MCP clients via Streamable HTTP, enabling command execution, tunnel management, and privileged operations with security features like OAuth and audit logging.
    26 npm
    3
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Tracks the complete lineage and DNA of every line of code, enabling impact analysis, bug risk prediction, and code archaeology through deterministic analysis of git history and AST.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI clients to incrementally build and maintain a git-backed personal wiki, providing long-term memory by compiling and cross-referencing knowledge across sessions.
    2
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A minimal, security-focused MCP server that provides structured read/write access to exactly one local workspace, with built-in local Git checkpoints and rollback.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Connects AI assistants such as Claude, Cursor, and Windsurf to GitHub repository intelligence, code review, AST-based code and security analysis, web and documentation search, and automated test and documentation generation through MCP tools.
    15 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A unified MCP server with composable tools for GitHub operations, file management, shell execution, kanban boards, Discord messaging, and package management. Features role-based security, HTTP/stdio transports, and a web-based development UI.
    GPL 3.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive GitHub operations including repository management, push, releases, issues, PRs, GitHub Actions, secrets, security, profile, search, and a unique portfolio push tool to create repos from local folders.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to perform independent security review of AI-built apps by watching a GitHub repository and querying what the last reading found.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A comprehensive Model Context Protocol server implementation that enables AI assistants to interact with file systems, databases, GitHub repositories, web resources, and system tools while maintaining security and control.
    132 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    . A good description should be concise and describe what the server enables users to do, e.g. * Enables to interact with WordPress sites...' Then a huge block? Actually the user message includes the README content inside tags, then after the readme, there is a large block of text starting with '{
    6,532 npm
    MIT