Skip to main content
Glama
120,613 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    Adds security capabilities like port scanning, TLS inspection, DNS enumeration, process monitoring, secrets scanning, HTTP header auditing, and CVE checking to Claude Code and Cursor.
    23
    79 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    DATPAQ exposes 34 production data & utility APIs — IP geolocation, DNS/WHOIS/MX lookups, email & phone validation, currency & precious-metals rates, aircraft/VIN lookups, web scraping & screenshots, and more — through one hosted, streamable-HTTP MCP endpoint.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    KSM MCP is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage your KSM secrets-such as listing, creating, retrieving, and deleting records and folders-while protecting your
    10
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Agentic DevOps control loop and MCP server featuring polyglot Tree-sitter AST blast-radius analysis, OPA Rego policy evaluation, and isolated --network=none Docker test verification[cite: 1]. Exposes tools to inspect impacted dependency closures, validate security guardrails, and run targeted test suites.
    3
    2
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.
    15
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release notes, updated daily. check_stack compares running versions locally — versions never leave your process.
    7
    2
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Uptime monitoring from your AI agent: create and diagnose checks (40 types: HTTP, TCP, DNS, SSL, ICMP, databases, message queues and more), read results and incidents, and manage status pages and maintenance windows. Built into the self-hostable SolidPing server, served over streamable HTTP at /api/v1/mcp.
    23
    33
    AGPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    A Linux system monitoring MCP server that provides real-time information on CPU, memory, disk, network, processes, Docker, security, and more via MCP tools.
    10
    65
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server for Everstake's non-custodial staking data across 130+ networks: live APY, uptime metrics, rewards calculator, integrations, security and compliance. Built for asset managers, custodians, and exchanges evaluating institutional staking.
    11
    1
    BSD 3-Clause
  • A
    license
    A
    quality
    B
    maintenance
    See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict
    8
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    7 SQL tools (validate, format, parse, lint, security scan, metadata extraction, full analysis) over Streamable HTTP. Supports 6 SQL dialects with 1.25M+ ops/sec.
    7
    124
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A comprehensive MCP tools collection providing filesystem operations, command execution, system tools, and more, with cross-platform support and strong security features.
    33
    4
    Apache 2.0
  • A
    license
    A
    quality
    F
    maintenance
    Gemini-powered code review. Offers review-only and review-and-commit modes with integrated Gitleaks security scanning.
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Data freshness verification for AI agents. Probes endpoints for HTTP cache staleness, latency percentiles, content fingerprinting, TLS certificate health, DNS timing, and redirect chains. Returns deterministic FRESH/STALE/UNKNOWN JSON verdicts with policy evaluation and NIST AI RMF mapping.
    3
    2
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to inspect and operate multiple Kubernetes clusters through natural language, providing multi-cluster diagnostics, RBAC analysis, security checks, and app-centric deployment with GitOps and smart workload placement.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Open-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers
    25
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Connect AI agents like Claude, Cursor, and Gemini to historical Windows performance and privacy data gathered by the AppControl Windows app. This server enables natural language queries into CPU, GPU, and temperature history alongside system security events for deep local auditing.
    45
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    An MCP server that enables easy integration with coding assistants, providing security context to AI agents. This runs locally using the Snyk CLI.
    62
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to query Abnormal Security for threats, message search, remediation history, ATO cases, vendor/BEC data, and opt-in evidence download and response actions.
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Security proxy that wraps any MCP server with bidirectional scanning for credential leaks, prompt injection, and tool description poisoning. Also provides an HTTP fetch proxy with a 9-layer scanner pipeline for capability-separated agent deployments.
    990
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Description: Introduce Beelzebub, an MCP‑based honeypot framework that enables creating decoy tools to detect prompt injection and malicious agent behavior. Motivation: Strengthen the security of LLM workflows by adding a non‑intrusive detection mechanism.
    2,235
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    A local MCP server that unifies email and calendar management across multiple providers, enabling AI agents to search, read, and write with explicit approval and local-first security.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding assistants and IDEs to run authorized offensive-security workflows over Model Context Protocol, including scope validation, reconnaissance, HTTP probing, secret and vulnerability scanning, playbook lookup, evidence management, and report generation.
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Provides AI agents with read-only access to the drxinfra.ru knowledge base for Directum RX administrators, enabling log-line error lookup, article search, sizing calculations, component version checks, upgrade checklists, and security self-assessment through remote MCP.
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables clients to check domain availability live via DNS and RDAP, search a daily snapshot of unregistered 1–4 character names by TLD, length, or substring, turn a word or project name into short free candidates, and pull per-TLD statistics. All four tools are read-only.
    2
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server for searching, inspecting, and evaluating NPM packages through health scoring and license risk assessments. It provides comprehensive package analysis including maintenance status, popularity trends, and security vulnerability reports to help users make informed dependency decisions.
    3
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server for web application security scanning with Nikto, Nuclei, Wapiti, and shcheck integration.
    8
    BSD 3-Clause
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to orchestrate 100+ security tools over MCP for authorized penetration testing, including recon, scanning, exploitation, attack-chain planning, and knowledge-base retrieval.
    7
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables running ephemeral Kubernetes Jobs/pods with caller-chosen images and commands, returning results and artifacts while automating cleanup. Supports synchronous and background execution, repository cloning, and strict security controls.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server that provides AI coding assistants with access to call graphs, data flows, and security analysis for multi-file vulnerability detection.
    143
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
    2
    Apache 2.0