Skip to main content
Glama
118,203 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information on Penetration Testing (Pentest)" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query structured penetration testing engagement state captured from tmux sessions, including credentials, hosts, and command provenance with exact source bytes.
    15
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Enables AI agents to orchestrate 25+ security tools for penetration testing through natural language, automating scans, vulnerability detection, and report generation.
    31
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Unified penetration testing MCP server for Claude Desktop providing 34 security tools for reconnaissance, web scanning, code analysis, and authenticated testing.
    1
    -
  • F
    license
    A
    quality
    F
    maintenance
    Enables agents to store, search, and manage a personal penetration testing knowledge base via MCP, using BM25-ranked retrieval with Chinese tokenization, plus draft approval, deduplication, and sensitive-data redaction workflows.
    13
    -
  • A
    license
    C
    quality
    B
    maintenance
    Enables MCP-capable AI agents to run authorization-gated reconnaissance, vulnerability scanning, web application testing, exploitation, CTF tasks, reporting, and integrations with tools such as Burp, ZAP, and DefectDojo.
    80
    2
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    Provides an MCP server that tracks open loops (pending decisions or replies) across email, agent sessions, and other channels, enabling agents to query what is waiting on whom.
    14
    MIT
  • A
    license
    C
    quality
    D
    maintenance
    AI-powered security scanning MCP server that exposes 25+ professional tools, enabling penetration testing and security assessments through natural language interaction with AI agents like Claude Desktop.
    31
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to perform autonomous penetration testing on any Linux distribution via SSH with persistent tmux sessions, supporting interactive tools like Metasploit, reverse shells, and complex multi-step security workflows.
    18
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server providing Kali Linux security tools for authorized penetration testing, with tiered tool sets for network scanning, web testing, and more, run via Docker stdio.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables natural-language chat-driven API testing, letting users upload API specs, run deterministic pytest checks against live targets, inspect results, create defects, and view failure trends.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables authorized penetration testing and security assessments with CVE monitoring, vulnerability scanning, and reporting features.
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    HandaaS的MCP服务器,提供全域资讯搜索、企业新闻、行业资讯、主题跟踪和企业动态监控能力,帮助用户开展行业研究和舆情分析。
    2
    -
  • F
    license
    Not graded
    quality
    Not graded
    maintenance
    A full-stack API automation testing server that parses OpenAPI/Swagger/Postman/HAR specs, generates comprehensive test scenarios and executable code, and provides AI-powered review and auto-fix.
    -
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI coding assistants to perform authorized attack-surface reconnaissance and vulnerability intelligence through stdio JSON-RPC tools for HTTP probing, TCP port scanning, directory discovery, template checks, and CISA KEV/cve.now lookups.
    5
    MIT
  • A
    license
    B
    quality
    C
    maintenance
    Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.
    11
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server exposing every documented Email on Acid API v5 request as a tool — 24 tools across authentication, email client lists, email rendering testing, and spam testing.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Autonomous pentests from one command: real security tools, working PoCs, and audit-ready reports, all driven via MCP.
    451 PyPI
    1,807
    MIT
  • -
    license
    Not graded
    quality
    D
    maintenance
    Provides secure access to penetration testing tools from Kali Linux including nmap, nikto, dirb, wpscan, and sqlmap for educational vulnerability assessment. Operates in a controlled Docker environment with target whitelisting to ensure ethical testing practices.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Wraps common web penetration testing tools in a Docker container and exposes them as Claude tools for educational use in controlled lab environments.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables natural-language-driven security testing by orchestrating multiple pen-testing tools through MCP, with automated scan execution and AI-assisted vulnerability summarization.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP-compatible clients to discover API endpoints from OpenAPI/Swagger specs, send HTTP requests, validate responses, and analyze status codes for automated API testing.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.
    7
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    A universal AI-powered testing server built on the Model Context Protocol (MCP). Allows AI agents to inspect, execute, test, monitor, debug, and report on software projects.
    3
    GNU Lesser General Public v2.1 only