Skip to main content
Glama
116,913 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,408 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Security Testing" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
    8
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    KSM MCP is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage your KSM secrets-such as listing, creating, retrieving, and deleting records and folders-while protecting your
    10
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to orchestrate 100+ security tools over MCP for authorized penetration testing, including recon, scanning, exploitation, attack-chain planning, and knowledge-base retrieval.
    7
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    AI-native security testing platform with native MCP support, enabling automated penetration testing, vulnerability discovery, and attack-chain analysis through conversational commands.
    Apache 2.0
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables LLM agents to play six-on-six Pokémon battles with hidden information, a full move set, and a deterministic battle engine, including local play, reproducible matches, and benchmarking against AI opponents.
    5
    -
  • A
    license
    A
    quality
    A
    maintenance
    Agentic DevOps control loop and MCP server featuring polyglot Tree-sitter AST blast-radius analysis, OPA Rego policy evaluation, and isolated --network=none Docker test verification[cite: 1]. Exposes tools to inspect impacted dependency closures, validate security guardrails, and run targeted test suites.
    3
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Self-hostable remote terminal assistance over MCP. Agents create one-command connection invitations, execute commands, and manage interactive sessions on user-authorized macOS, Linux, and Windows computers without requiring an SSH daemon.
    7
    102
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release notes, updated daily. check_stack compares running versions locally — versions never leave your process.
    7
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Minimal Go library for building stdio MCP servers on the official go-sdk — struct-derived JSON Schema, tiny static binaries.
    3
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents and MCP clients to drive real Chrome, Edge, Brave, and Firefox browsers through native automation protocols. It exposes tools for navigation, page snapshots, form filling, clicks, screenshots, console/network inspection, and tab management.
    23
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Scans source code for possible Korean compliance risks (PIPA, Network Act, Credit Information Act, E-Commerce Act) and maps findings to specific legal provisions. Runs locally, exposes MCP tools for scanning and law lookup, and does not constitute legal advice. That's hedged (matches the project's "possible risk / not legal advice" rule), keyword-rich for search, and names all four laws.
    4
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A wallet for AI agents: test funds, payments, paid APIs and escrow on Aether. Give an AI agent its own wallet on Aether, a proof-of-work chain with post-quantum (ML-DSA-44) signatures. The agent gets an address and testnet funds in one step, then sends and receives AETH or USDC under per-payment and daily limits you set. It can pay for APIs that answer HTTP 402, sell its own, rate the services it
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Agent memory for facts that change. When a user corrects something, Recall replaces the old fact, tells the agent what it replaced, and keeps the old value in a history. Ask what was believed on any date, see every change to a fact, or diff two dates. Runs locally on polign_db, Postgres with pgvector, MongoDB, or Qdrant. Apache 2.0.
    14
    5
    13
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server for Everstake's non-custodial staking data across 130+ networks: live APY, uptime metrics, rewards calculator, integrations, security and compliance. Built for asset managers, custodians, and exchanges evaluating institutional staking.
    11
    1
    BSD 3-Clause
  • A
    license
    A
    quality
    A
    maintenance
    Local-first MCP proxy with BM25 tool discovery, quarantine security, Docker isolation, OAuth support, activity logging, and web UI. Routes multiple upstream MCP servers through a single endpoint.
    9
    407
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    7 SQL tools (validate, format, parse, lint, security scan, metadata extraction, full analysis) over Streamable HTTP. Supports 6 SQL dialects with 1.25M+ ops/sec.
    7
    124
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Decentralized Git with on-chain governance, bounties, and DAOs. Tools for repos, issues, PRs, labels, releases, bounties, and DAO proposals. Auto-wallet on first use, trust tiers, and approval mode for human-in-the-loop.
    57
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Lets AI agents drive terminal apps built with Limoni (a Go TUI engine) through their semantic tree instead of scraping the screen: widgets are found by role and label, clicked, typed into, and waited on. Runs locally over the app's automation socket; secret fields never reach the agent.
    8
    189
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for PostgreSQL with typed tools (list, describe, read, aggregate, insert, update, delete), catalog SQL served as named tools, and free SQL that runs under the grants of each login. Each caller is limited to its own tools, databases and tables, and start checks refuse unsafe setups, such as a superuser login with free SQL on. Serves stdio and Streamable HTTP. Written in Go, Apache-2.0
    12
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that purchases small factual datasets on demand via x402 micropayments (about $0.01 per call), offering tools for financial research, fuel prices, air quality, and border crossings while supporting preview-only mode and configurable spending limits.
    8
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server for patent search and prior art discovery powered by Google Patents public dataset on BigQuery. Supports searching patents, fetching full patent details with CPC codes and citations, and retrieving legal claims text.
    3
    6
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    One guarded pass for all your coding agents. A derbent was a guarded post on an Turkish History mountain pass: its keepers decided who went through and kept a record of everyone who did. Derbent does the same for your coding agents' tool calls.
    7
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Prices your Claude Code and Codex sessions from the transcripts on disk, shows what each agent cost over any period, and tells you in plain English what would have been cheaper. CLI, Browser UI and MCP server.
    8
    5
    MIT