Skip to main content
Glama

Open-Source MCP servers

Production-ready MCP servers that extend AI capabilities through file access, database connections, API integrations, and other contextual services.

9,443 servers. Last updated -

Matching MCP tools:

Matching MCP servers:

  • -
    security
    F
    license
    -
    quality
    Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.
    Last updated -
    • Apple
    • Linux
  • A
    security
    A
    license
    A
    quality
    Provides tools for frontend testing including code analysis, test generation, test execution, and React component testing for Jest and Cypress frameworks.
    Last updated -
    4
    21
    MIT License
  • A
    security
    A
    license
    A
    quality
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    Last updated -
    37
    6
    5
    MIT License
  • -
    security
    F
    license
    -
    quality
    An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.
    Last updated -
  • -
    security
    A
    license
    -
    quality
    Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.
    Last updated -
    4
    2
    MIT License
    • Apple
  • -
    security
    F
    license
    -
    quality
    Enables automated testing and coverage reporting for MCP services with test execution, file generation, and mock service creation. Provides comprehensive testing infrastructure including Jest integration, coverage reports, and health checks for the MCP ecosystem.
    Last updated -

Interested in MCP?

Join the MCP community for support and updates.

RedditDiscord
  • A
    security
    A
    license
    A
    quality
    A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.
    Last updated -
    74
    Apache 2.0
    • Apple
  • A
    security
    A
    license
    A
    quality
    Audits npm package dependencies for security vulnerabilities, providing detailed reports and fix recommendations with MCP integration.
    Last updated -
    1
    58
    47
    MIT License
  • -
    security
    F
    license
    -
    quality
    Provides a one-stop automated solution for Android APK security analysis by integrating tools like JEB, JADX, APKTOOL, FlowDroid, and MobSF into unified MCP standard API interfaces.
    Last updated -
    131
    • Linux
    • Apple
  • A
    security
    F
    license
    A
    quality
    This server integrates with GitHub Advanced Security to load security alerts and bring it into your context. Supports Dependabot Security Alerts, Secret Scanning Alerts, Code Security Alerts
    Last updated -
    3
    1
    5
  • -
    security
    A
    license
    -
    quality
    This read-only MCP Server allows you to connect to Act-On data from Claude Desktop through CData JDBC Drivers. Free (beta) read/write servers available at https://www.cdata.com/solutions/mcp
    Last updated -
    MIT License
    • Linux
    • Apple
  • -
    security
    F
    license
    -
    quality
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    Last updated -
    2
    • Apple
    • Linux
  • -
    security
    F
    license
    -
    quality
    Enables secure execution of penetration testing commands on Kali Linux through Server-Sent Events with intelligent command validation, real-time monitoring, and comprehensive audit logging. Designed for authorized security research and penetration testing workflows.
    Last updated -
    1
    • Linux
  • -
    security
    F
    license
    -
    quality
    Provides comprehensive access to documentation for 600+ Kali Linux penetration testing and security tools through Claude Desktop, enabling users to search, explore, and get detailed information about security tools by category or functionality.
    Last updated -
    • Apple
  • -
    security
    F
    license
    -
    quality
    A government-oriented MCP server implementing security controls for AegisReader development with features including task management, security analysis, and secure operations functionality.
    Last updated -
    1
  • -
    security
    A
    license
    -
    quality
    Provides comprehensive system diagnostics and hardware analysis through 10 specialized tools for troubleshooting and environment monitoring. Offers targeted information gathering for CPU, memory, network, storage, processes, and security analysis across Windows, macOS, and Linux platforms.
    Last updated -
    10
    MIT License
    • Apple
    • Linux
  • -
    security
    A
    license
    -
    quality
    A prompt-validation service that checks incoming prompts against security rules, blocking those matching high-severity security or jailbreak patterns while authorizing safe prompts.
    Last updated -
    8
    MIT License
    • Linux
    • Apple
  • -
    security
    F
    license
    -
    quality
    Provides structured access to OCSF-normalized security data stored in Amazon Security Lake, enabling AI assistants to search for IP addresses, GuardDuty findings, and explore available data sources.
    Last updated -
    2
  • -
    security
    A
    license
    -
    quality
    A Python-based MCP server that enables integration with Microsoft Security Copilot and Microsoft Sentinel, allowing users to run KQL queries, manage skillsets/plugins, and execute prompts in Security Copilot.
    Last updated -
    18
    MIT License
  • -
    security
    F
    license
    -
    quality
    AI-powered cybersecurity automation platform with 150+ security tools and 12+ autonomous AI agents for penetration testing, vulnerability assessment, and bug bounty hunting. Enables comprehensive security testing through intelligent tool selection and automated workflows.
    Last updated -
  • A
    security
    A
    license
    A
    quality
    A comprehensive HTTP client MCP server for security testing, API testing, and web automation that provides full-featured HTTP tools with detailed logging capabilities.
    Last updated -
    8
    3
    MIT License
  • A
    security
    A
    license
    A
    quality
    A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
    Last updated -
    12
    521
    20
    MIT License
  • A
    security
    F
    license
    A
    quality
    A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.
    Last updated -
    5
    44
  • -
    security
    A
    license
    -
    quality
    Provides Trivy security scanning capabilities through a standardized interface, allowing users to scan projects for vulnerabilities and automatically fix them by updating dependencies.
    Last updated -
    10
    MIT License
    • Apple
  • -
    security
    F
    license
    -
    quality
    Enables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.
    Last updated -
  • -
    security
    F
    license
    -
    quality
    A FastMCP server that provides virtual try-on functionality through the Replicate API, allowing users to visualize how clothing items would look on models.
    Last updated -
  • -
    security
    F
    license
    -
    quality
    An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.
    Last updated -
    4
  • A
    security
    F
    license
    A
    quality
    Connects Nuclei vulnerability scanner with MCP-compatible applications, enabling AI assistants to perform security testing through natural language interactions.
    Last updated -
    2
    0
    • Linux
    • Apple
  • -
    security
    F
    license
    -
    quality
    Enables comprehensive network security scanning and vulnerability assessment using Linux tools like nmap. Provides network discovery, port scanning, service identification, OS detection, and device discovery capabilities for authorized security testing.
    Last updated -
    • Linux
  • -
    security
    A
    license
    -
    quality
    Provides access to 13+ penetration testing and security audit tools through a unified MCP interface. Enables security professionals to perform vulnerability scanning, web fuzzing, network reconnaissance, and other security assessments through containerized tools like Nuclei, Nmap, SQLMap, and FFUF.
    Last updated -
    MIT License
    • Linux
  • A
    security
    F
    license
    A
    quality
    An MCP server that executes tox commands to run Python tests within a project using pytest, allowing users to run all tests or specific test groups, files, cases, or directories.
    Last updated -
    5
  • -
    security
    F
    license
    -
    quality
    All In One Model Context Protocol: qdrant, google suite (gmail, calendar, ...), jira, gitlab, CLI, ...
    Last updated -
    87