Skip to main content
Glama
120,548 servers. Updated
20 Best Security MCP Servers: compared and ranked, November 2026Ranked from 4,472 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"dns security mcp" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    Comprehensive DNS security toolkit for AI agents: 103 tools across 13 categories including DNSSEC validation, subdomain takeover detection, email security audit, and more, all running locally with no external API calls required.
    100
    147 npm
    9
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables LLM agents to retrieve live, accurately labeled data from DNS (dns-shop.ru) — city-specific pricing, product search with filters, ratings, reviews, store stock, and price history — while avoiding common data misinterpretations.
    2
    5
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A domain security and privacy checker MCP server that runs locally, performing DNS, TLS, HTTP, and RDAP lookups to generate a scored report covering certificates, email authentication, DNS, and web security headers.
    3
    57 npm
    GPL 3.0
  • A
    license
    A
    quality
    D
    maintenance
    Orchestrates multiple AWS security services to provide comprehensive security assessments, threat analysis, and multi-framework compliance monitoring. It enables users to perform automated remediation recommendations and incident investigations through a unified Model Context Protocol interface.
    3
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.
    14
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables searching and bidirectional mapping of 1,451 security controls across 262 SCF-mapped frameworks, including ISO 27001, NIST CSF, DORA, and many others, through natural language queries.
    14
    464 PyPI
    9
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to diagnose website health and configuration through focused TLS, DNS, HTTP, security-header, port, and email-DNS checks, returning pass/warn/fail verdicts with concrete fixes while guarding against SSRF.
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.
    5
    8 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: * HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy * HTTPS enforcement and redirect chain depth * Presence of security.txt, robots.txt, sitemap.xml Payment model: * 0.05 USDC per scan, paid automatically on Base via the x402 proto
    2
    18 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server for managing Hetzner DNS zones and RRSets via the Hetzner Cloud API. It enables listing, creating, updating, deleting, importing/exporting zone files, and managing protection and TTLs from MCP clients.
    22
    76 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.
    12
    476 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Domain intelligence for DNS, WHOIS/RDAP, SSL/TLS, subdomain discovery, availability, valuation, email security, and typosquatting and brand protection.
    1
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to retrieve Social Security COLA and yearly limits, calculate benefit increases and earnings-test withholding, and determine full retirement ages and claiming-age benefits from SSA-sourced data.
    6
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Smart contract security scanner for Base. Detect honeypots, rug pulls, hidden mints, proxy dangers, and generate audit reports.
    8
    25 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.
    55
    194 npm
    6
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for searching papers from top-tier and second-tier security conferences (S&P, USENIX Security, CCS, NDSS, ACSAC, RAID, ESORICS) using DBLP, with tools for keyword/author/year/conference search, listing conference papers, and getting statistics.
    4
    12 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI assistants to analyze Android APK and iOS IPA files for security issues through natural language conversation, including permission auditing, secret detection, and SDK enumeration.
    12
    18 npm
    8
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for Android app security auditing that integrates ADB, VirusTotal, and MobSF to extract, analyze, and recommend actions on apps for ethical hacking learning.
    15
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to manage Tophost DNS records through MCP tools, including listing, creating, updating, and deleting records with safety guards, while delegating authentication and Tophost protocol handling to a separate REST API service.
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables control and monitoring of an ADT Control / Alarm.com security system from MCP-compatible hosts, including checking system and device state, reviewing activity, and safely arming, disarming, locking, or adjusting devices through confirmation-gated actions and a local audit trail.
    11
    MIT