Skip to main content
Glama
118,163 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

MCP tools

MCP Connectors

"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    A governed SQL gateway for untrusted AI agents, providing controlled access to PostgreSQL, MySQL, and OceanBase with RBAC, field ACLs, row policies, and cost controls.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    CNN's Fear & Greed index for the US stock market: current score and rating, the seven component indicators, and about a year of daily history. Go standard library only, no API key required.
    1
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.
    4
    1
    BSD 3-Clause
  • A
    license
    Not graded
    quality
    B
    maintenance
    Send email, find out why an email failed, set up sending domains, and manage templates, contacts, lists and campaigns in your AhaSend account.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    MCP server that enables AI assistants to drive systematic literature review workflows, including screening, downloading, converting, and reviewing papers through natural language conversation.
    31
    AGPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Connect to your TTRPG campaign's repository and database. Instead of retrieving prose, its 48 tools (20 read, 28 write) return typed state: 14 entity schemas (NPCs, factions, locations, sessions, lore), relationship and knowledge-graph queries, wiki blocks, and a narrative-state bundle of open threads and canon facts.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    7 SQL tools (validate, format, parse, lint, security scan, metadata extraction, full analysis) over Streamable HTTP. Supports 6 SQL dialects with 1.25M+ ops/sec.
    7
    124
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for PostgreSQL with typed tools (list, describe, read, aggregate, insert, update, delete), catalog SQL served as named tools, and free SQL that runs under the grants of each login. Each caller is limited to its own tools, databases and tables, and start checks refuse unsafe setups, such as a superuser login with free SQL on. Serves stdio and Streamable HTTP. Written in Go, Apache-2.0
    12
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI assistants to manage and query Tiger Cloud database services, including service lifecycle operations, database connections, and SQL execution.
    127
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to query databases using natural language, with automatic schema discovery and SQL compilation.
    833 npm
    3,235
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables SQL queries against PostgreSQL databases through MCP-compatible clients and includes a natural language agent for forming SQL queries from natural language.
    245
    PostgreSQL
  • A
    license
    Not graded
    quality
    B
    maintenance
    Open source SQL-native query and provisioning engine for cloud and SaaS infrastructure. Ships as a single signed binary with MCP tools for provider discovery, schema exploration, queries, and lifecycle operations.
    1,075
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Self-hosted OpenTelemetry backend in one Go binary. Its MCP server exposes tools for service health, latency, topology, trace inspection, log search, read-only SQL over traces, logs and metrics, and dashboards.
    35
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Security proxy that wraps any MCP server with bidirectional scanning for credential leaks, prompt injection, and tool description poisoning. Also provides an HTTP fetch proxy with a 9-layer scanner pipeline for capability-separated agent deployments.
    986
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Description: Introduce Beelzebub, an MCP‑based honeypot framework that enables creating decoy tools to detect prompt injection and malicious agent behavior. Motivation: Strengthen the security of LLM workflows by adding a non‑intrusive detection mechanism.
    2,230
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables controlling your own Linux desktop machines from any MCP-capable LLM client, with opt-in agent capabilities for shell, filesystem, processes, screenshots, system info, and input injection.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables Claude to interact with WhatsApp: read chats, search messages, send messages with a mandatory confirmation step, and transcribe voice notes locally, all with encrypted storage and prompt-injection scrubbing.
    6
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Provides a read-only schema extraction tool that converts database structures from numerous dialects into Toon format, accepting live connections or offline SQL dumps.
    5
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Zero-dependency local proxy that wraps any MCP server to redact secrets, strip hidden-Unicode prompt injection, and block writes to protected paths like ~/.ssh and .env.
    4
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Guard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval
    16
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to scan directories, container images, and SBOMs for vulnerabilities, look up individual CVEs, and refresh the local vulnerability database. Findings come back prioritized with concrete upgrade targets rather than raw scanner output.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Scans MCP servers for prompt injection, supply chain attacks, excessive permissions, and code execution risks. Includes an offline blacklist that catches known-compromised packages like LiteLLM 1.82.7/1.82.8 and Trivy with zero latency.
    19
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    ContextLattice is an HTTP-first, MCP-compatible memory/context/task orchestrator that persists writes and returns fused recall from specialized stores with local-first defaults. Primary URL: https://contextlattice.io/ Install: https://contextlattice.io/installation.html Troubleshooting: https://contextlattice.io/troubleshooting.html
    3
    155
    Apache 2.0