Skip to main content
Glama

Penetration Testing

Tools and frameworks for security testing, vulnerability scanning, and penetration testing. Enables security professionals to identify and exploit security weaknesses in applications and networks.

MCP ServersBrowse all →

  • agentminds-mcp by agentmindsdev

    agentminds-mcpofficial

    agentmindsdev
    A
    license
    A
    quality
    D
    maintenance
    MCP server for AgentMinds collective intelligence platform, enabling AI agents to scan websites for security/SEO/performance issues, pull personalized recommendations, and share findings across the network.
    7
    15 npm
    MIT
  • PatrowlIntelMCP by Patrowl

    PatrowlIntelMCPofficial

    Patrowl
    A
    license
    A
    quality
    D
    maintenance
    Exposes PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks) via MCP tools like search_cves, get_cve, and list_trending_attacks.
    3
    2
    MIT
  • MCP Security scanner by DeepSleuth

    MCP Security scannerofficial

    DeepSleuth
    A
    license
    A
    quality
    A
    maintenance
    Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.
    3
    32 PyPI
    1
    Apache 2.0
  • Sekrd Security Scanner by sekrdcom

    Sekrd Security Scannerofficial

    sekrdcom
    A
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3
    MIT
  • shipsafe-mcp by EthYusuf

    shipsafe-mcpofficial

    EthYusuf
    A
    license
    A
    quality
    C
    maintenance
    Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.
    8
    1
    MIT

  • steganography-mcp

    badchars
    A
    license
    B
    quality
    C
    maintenance
    The most comprehensive steganography analysis toolkit for AI agents, providing 60 tools across 7 categories for detecting and extracting hidden data from images, audio, text, and files, all running 100% offline.
    2
    100
    177 npm
    7
    MIT
  • operant-mcp by operantlabs

    operant-mcpofficial

    operantlabs
    A
    license
    A
    quality
    F
    maintenance
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    51
    42 npm
    26
    MIT
  • Kitsune vulnerability research MCP by KitsuneTech1

    Kitsune vulnerability researchofficial

    KitsuneTech1
    A
    license
    A
    quality
    B
    maintenance
    This local MCP server keeps vulnerability intelligence, research scope, scanner results, evidence receipts, Bugcrowd VRT assessments, and report drafts in one SQLite ledger. It is built for authorized defensive research and does not scan, exploit, or submit reports.
    19
    1
    MIT

  • SkillTotal

    pezhik
    A
    license
    A
    quality
    A
    maintenance
    SkillTotal is a local stdio MCP server that lets an agent check a component before installing it. It statically analyzes MCP servers, agent skills, npm/PyPI packages and repos for supply-chain risks, dangerous capabilities (shell, filesystem, network, credentials), prompt-injection surfaces like tool poisoning, and exfiltration paths. Each finding cites file, line and snippet.
    4
    3
    1,456 PyPI
    16
    Apache 2.0
  • Grype MCP Server by anchore

    Grype MCP Serverofficial

    anchore
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol.
    9
    29 PyPI
    9
    Apache 2.0

  • Web Check MCP

    ameobius-ai
    A
    license
    A
    quality
    B
    maintenance
    MCP server that exposes 31 OSINT checks from Lissy93/web-check as tools for website analysis, including SSL, DNS, headers, WHOIS, and security presets. Enables natural-language-driven web recon and health checks.
    18
    8
    MIT
  • everthread by PB-Digital-LLC

    everthreadofficial

    PB-Digital-LLC
    A
    license
    A
    quality
    B
    maintenance
    Enables plain-English website security checks from an MCP client, offering tools to assess site findings, explain individual issues, and list all available security checks.
    3
    19 npm
    MIT
  • Polygraph by polygraphso

    Polygraphofficial

    polygraphso
    A
    license
    A
    quality
    D
    maintenance
    Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.
    4
    41 npm
    8
    Apache 2.0
  • PwnBridge by 1mr0-tech

    PwnBridgeofficial

    1mr0-tech
    A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    11
    10 npm
    MIT
  • Sn1per MCP Server by 1N3

    Sn1per MCP Serverofficial

    1N3
    A
    license
    A
    quality
    C
    maintenance
    Lets an AI assistant drive a self-hosted Sn1per install over local stdio, launching orchestrated scans and reading back structured findings, ports, subdomains and technologies. Enforces configured target scope, redacts secrets, and writes an audit log of every scan, cancel, delete and export request.
    10
    34 PyPI
    2
    Apache 2.0

  • io.github.OpenOSINT/openosint

    kush-coder
    A
    license
    A
    quality
    C
    maintenance
    Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.
    8
    20
    MIT
  • AppLedger by contentasoftware

    AppLedgerofficial

    contentasoftware
    A
    license
    A
    quality
    B
    maintenance
    Security checks for apps built with AI: Trivy and Opengrep findings explained in plain English, with a fix request for your coding agent. Hosted scan by default (only files Git would commit, never secret files) or fully local.
    5
    63 PyPI
    MIT

MCP ConnectorsBrowse all →