Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to orchestrate 100+ security tools over MCP for authorized penetration testing, including recon, scanning, exploitation, attack-chain planning, and knowledge-base retrieval.
    7
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to manage and analyze personal investment portfolios, including fund and stock holdings, net value tracking, XIRR calculations, penetration analysis, and backtesting.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    AI-native security testing platform with native MCP support, enabling automated penetration testing, vulnerability discovery, and attack-chain analysis through conversational commands.
    Apache 2.0
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables LLM agents to play six-on-six Pokémon battles with hidden information, a full move set, and a deterministic battle engine, including local play, reproducible matches, and benchmarking against AI opponents.
    5
    -
  • A
    license
    A
    quality
    B
    maintenance
    Self-hostable remote terminal assistance over MCP. Agents create one-command connection invitations, execute commands, and manage interactive sessions on user-authorized macOS, Linux, and Windows computers without requiring an SSH daemon.
    7
    102
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Minimal Go library for building stdio MCP servers on the official go-sdk — struct-derived JSON Schema, tiny static binaries.
    3
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Scans source code for possible Korean compliance risks (PIPA, Network Act, Credit Information Act, E-Commerce Act) and maps findings to specific legal provisions. Runs locally, exposes MCP tools for scanning and law lookup, and does not constitute legal advice. That's hedged (matches the project's "possible risk / not legal advice" rule), keyword-rich for search, and names all four laws.
    4
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A wallet for AI agents: test funds, payments, paid APIs and escrow on Aether. Give an AI agent its own wallet on Aether, a proof-of-work chain with post-quantum (ML-DSA-44) signatures. The agent gets an address and testnet funds in one step, then sends and receives AETH or USDC under per-payment and daily limits you set. It can pay for APIs that answer HTTP 402, sell its own, rate the services it
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Agent memory for facts that change. When a user corrects something, Recall replaces the old fact, tells the agent what it replaced, and keeps the old value in a history. Ask what was believed on any date, see every change to a fact, or diff two dates. Runs locally on polign_db, Postgres with pgvector, MongoDB, or Qdrant. Apache 2.0.
    14
    5
    13
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
    8
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Decentralized Git with on-chain governance, bounties, and DAOs. Tools for repos, issues, PRs, labels, releases, bounties, and DAO proposals. Auto-wallet on first use, trust tiers, and approval mode for human-in-the-loop.
    57
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Lets AI agents drive terminal apps built with Limoni (a Go TUI engine) through their semantic tree instead of scraping the screen: widgets are found by role and label, clicked, typed into, and waited on. Runs locally over the app's automation socket; secret fields never reach the agent.
    8
    190
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for PostgreSQL with typed tools (list, describe, read, aggregate, insert, update, delete), catalog SQL served as named tools, and free SQL that runs under the grants of each login. Each caller is limited to its own tools, databases and tables, and start checks refuse unsafe setups, such as a superuser login with free SQL on. Serves stdio and Streamable HTTP. Written in Go, Apache-2.0
    12
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that purchases small factual datasets on demand via x402 micropayments (about $0.01 per call), offering tools for financial research, fuel prices, air quality, and border crossings while supporting preview-only mode and configurable spending limits.
    8
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server for patent search and prior art discovery powered by Google Patents public dataset on BigQuery. Supports searching patents, fetching full patent details with CPC codes and citations, and retrieving legal claims text.
    3
    6
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    One guarded pass for all your coding agents. A derbent was a guarded post on an Turkish History mountain pass: its keepers decided who went through and kept a record of everyone who did. Derbent does the same for your coding agents' tool calls.
    7
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Prices your Claude Code and Codex sessions from the transcripts on disk, shows what each agent cost over any period, and tells you in plain English what would have been cheaper. CLI, Browser UI and MCP server.
    8
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Your AI agents won't set your GPU on fire. GPU/CPU/RAM scheduler + market maker for AI coding agents (Claude Code, Codex, Gemini, Cursor, Grok, OpenCode, Kimi, Copilot and more) sharing one PC. Any mix of GPUs, MCP server, one-command install, Windows/macOS/Linux.
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A git-native merge gate. mergelock check compares two branches before they meet and reports the conflicts git itself won't tell you about: a function whose signature changed on one branch while the other branch added calls to the old signature, a symbol deleted on one side but still used on the other, the same function written twice.
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Deliberation primitive for multi-agent coordination — agents submit positions, vote on a 5-point scale, and the server returns crux detection, vote clustering, bridging statements, and consensus. Inspired by Polis and Talk to the City.
    6
    4
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Give each local app its own private HTTPS address on your Tailscale network, and control who can reach it, from your AI agent through MCP.
    48
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Mishmar is a risk management layer for trading bots and AI agents: every order is checked against your limits before it reaches the exchange, large orders wait for your approval, and no key can trade alone. Its MCP server lets a model propose orders on Hyperliquid and Binance and read positions, PnL and approvals, without ever seeing a key.
    10
    Apache 2.0
  • A
    license
    A
    quality
    F
    maintenance
    Scheduled scans across all Binance spot and perpetual pairs using CEL rules (RSI, volume, MAs, price action). Runs server-side 24/7, fires webhooks on match, with delivery proof and alert explainability.
    18
    71 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Pit Officer sits between your AI agent and your broker or exchange account and checks every order before it is sent. Limits an AI agent cannot change: order size, order rate and a profit-and-loss stop. Block the account to stop new orders. The agent connects over MCP; read-only tools are on by default, and you choose which order tools it may call.
    46
    2
    Apache 2.0