Penetration Testing

Tools and frameworks for security testing, vulnerability scanning, and penetration testing. Enables security professionals to identify and exploit security weaknesses in applications and networks.

MCP ServersBrowse all →

Polygraphofficial
Penetration Testing Security Testing & QA Tools
polygraphso
A
license
A
quality
A
maintenance
Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.
Last updated 2026-07-20
12
4
86
7
Apache 2.0
Beagle Security MCP Serverofficial
Penetration Testing Security Testing & QA Tools
beaglesecurity
A
license
B
quality
D
maintenance
Enables integration with Beagle Security API for managing security testing projects, applications, domain verification, and automated penetration tests. Provides 18 tools for creating, monitoring, and retrieving results from security assessments.
Last updated 2025-07-09
17
1
MIT
Grype MCP Serverofficial
Penetration Testing Security
anchore
A
license
A
quality
F
maintenance
Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol.
Last updated 2025-08-29
9
9
Apache 2.0
agentminds-mcpofficial
Web Scraping Penetration Testing
agentmindsdev
A
license
A
quality
B
maintenance
MCP server for AgentMinds collective intelligence platform, enabling AI agents to scan websites for security/SEO/performance issues, pull personalized recommendations, and share findings across the network.
Last updated 2026-06-29
7
10
MIT
MCP Hub Securityofficial
Security Penetration Testing
mcp-hub-corp
A
license
A
quality
B
maintenance
Security gate that scans MCP servers and Claude Code Skills for vulnerabilities before execution.
Last updated 2026-05-18
7
2
MIT
Latent Defense MCP Serverofficial
Penetration Testing Code Analysis AI & Machine Learning
latent-defense
A
license
B
quality
C
maintenance
Connects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.
Last updated 2026-06-22
85
Apache 2.0
OSINT MCP Server
Security Penetration Testing
Krisparenthetic284
A
license
A
quality
C
maintenance
A comprehensive reconnaissance toolset that provides AI agents with 37 tools across 12 data sources like Shodan and VirusTotal for automated intelligence gathering. It enables agents to perform domain reconnaissance, attack surface mapping, and cross-platform data correlation within a single conversational interface.
Last updated 2026-06-16
2
37
281
2
MIT
Symbiotic MCP Serverofficial
Penetration Testing Security Code Analysis
SymbioticSec
A
license
A
quality
D
maintenance
Enables security analysis of code and infrastructure files via MCP, using Symbiotic CLI for scanning vulnerabilities.
Last updated 2025-12-15
4
MIT
PatrowlIntelMCPofficial
Security Penetration Testing
Patrowl
A
license
A
quality
C
maintenance
Exposes PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks) via MCP tools like search_cves, get_cve, and list_trending_attacks.
Last updated 2026-07-08
3
2
MIT
operant-mcpofficial
Penetration Testing Security Testing & QA Tools
operantlabs
A
license
A
quality
D
maintenance
A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
Last updated 2026-04-01
51
90
14
MIT
AynOpsofficial
Penetration Testing Security
AynOps
A
license
A
quality
B
maintenance
An Open Sourced Model Context Protocol (MCP) Local server that gives Claude real-time cybersecurity reconnaissance capabilities
Last updated 2026-07-27
14
19
MIT
@konsulto/mcpofficial
Penetration Testing Security
konsulto
A
license
A
quality
B
maintenance
MCP server that enables Claude Code to drive the Konsulto cybersecurity audit platform from the CLI, including reading and writing findings, managing evidence, and handling scope and assets.
Last updated 2026-06-29
19
28
1
MIT
fingerprint-mcp
Penetration Testing Networking & Infrastructure
badchars
A
license
A
quality
B
maintenance
A universal digital fingerprinting MCP server that combines 103 techniques across TCP, TLS, SSH, HTTP, DNS, and more into a single interface for AI agents, enabling full-spectrum fingerprinting on demand.
Last updated 2026-07-15
2
13
181
3
AGPL 3.0
Ghost Security MCP Serverofficial
Security Penetration Testing
ghostsecurity
A
license
A
quality
D
maintenance
A Model Context Protocol (MCP) server for the Ghost Security API, providing secure access to security findings and repository data through standardized tools.
Last updated 2026-06-12
7
95
3
MIT
OnSecurity MCP Server
Penetration Testing Project Management Security
onsecurity
A
license
B
quality
F
maintenance
OnSecurity MCP Server
Last updated 2025-08-13
5
MIT
meok-mcp-injection-scan-mcp
Penetration Testing Security
CSOAI-ORG
A
license
A
quality
A
maintenance
Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.
Last updated 2026-06-19
5
MIT
agent-security-scanner-mcp
Code Analysis Penetration Testing Security
sinewaveai
A
license
A
quality
B
maintenance
A security scanner for AI coding agents and autonomous assistants that scans code for vulnerabilities, detects hallucinated packages, blocks prompt injection, and provides LLM-powered semantic code review via MCP or CLI.
Last updated 2026-07-27
22
1,336
117
MIT
re-gdb
Penetration Testing
Heretek-RE
A
license
B
quality
C
maintenance
MCP server wrapping GDB and GEF for dynamic analysis, enabling interactive debugging and memory inspection via GDB/MI protocol.
Last updated 2026-06-10
14
1
MIT
sec-netexec-mcp
Penetration Testing Shell Access Command Line
schwarztim
A
license
A
quality
B
maintenance
An MCP server that enables AI assistants to execute NetExec network penetration testing commands via SSH to a Kali Linux machine, supporting protocols like SMB, WinRM, SSH, LDAP, and more.
Last updated 2026-07-25
12
2
MIT
DefectDojo MCP Server
Penetration Testing Project Management
jamiesonio
A
license
B
quality
D
maintenance
Provides a Model Context Protocol server implementation that allows AI agents and other MCP clients to programmatically interact with DefectDojo, a vulnerability management tool, for managing findings, products, and engagements.
Last updated 2025-04-01
11
14
MIT
Snyk API & Web MCP Serverofficial
Penetration Testing Security
snyk
A
license
C
quality
A
maintenance
Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.
Last updated 2026-07-24
51
7
Apache 2.0
secscan-mcp
Code Analysis Penetration Testing
openjkai
A
license
A
quality
A
maintenance
MCP server for Cursor that scans codebases for security issues including hardcoded secrets, SAST, vulnerable dependencies, and IaC misconfigurations.
Last updated 2026-07-23
7
MIT
re-lief
Code Analysis Penetration Testing
Heretek-RE
A
license
A
quality
C
maintenance
MCP server exposing LIEF for cross-format binary analysis, enabling parsing, section listing, imports/exports, disassembly, and string extraction for PE, ELF, MachO, DEX, ART, and OAT files.
Last updated 2026-06-10
17
MIT
Xploit47
Penetration Testing Autonomous Agents
aloc999
A
license
A
quality
C
maintenance
AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
Last updated 2026-07-17
1
1
MIT
Damn Vulnerable MCP Server
Penetration Testing Education & Learning Tools
Kyze-Labs
A
license
A
quality
F
maintenance
An intentionally vulnerable MCP server for security training, enabling users to practice attacking and defending AI agents through realistic scenarios.
Last updated 2026-05-22
28
66
MIT
re-frida
Penetration Testing Autonomous Agents
Heretek-RE
A
license
A
quality
C
maintenance
MCP server that wraps the Frida dynamic instrumentation toolkit, allowing users to attach to processes, hook functions, enumerate modules and exports, and manage scripts through natural language.
Last updated 2026-06-10
10
1
MIT
re-apktool
Penetration Testing Code Analysis
Heretek-RE
A
license
A
quality
C
maintenance
MCP server for Android APK triage, providing tools to parse APK headers, list DEX classes, and decode AndroidManifest.xml using apktool or androguard backends.
Last updated 2026-06-10
5
1
MIT
RedTeam ML API MCP
Penetration Testing AI & Machine Learning
rnadjqaim
A
license
B
quality
B
maintenance
Enables security teams to run controlled adversarial penetration tests against authorized ML/LLM API endpoints, scoring responses and generating evidence for compliance frameworks such as SOC 2, ISO 27001, and GDPR.
Last updated 2026-06-21
6
2
MIT
mcp-defectdojo
Penetration Testing Security
inspicere
A
license
A
quality
B
maintenance
MCP server for DefectDojo vulnerability management, exposing 24 tools for managing products, engagements, tests, findings, scan imports, and finding lifecycle through the Model Context Protocol.
Last updated 2026-06-14
24
MIT
NetMCP
Networking & Infrastructure Security Penetration Testing
cortexc0de
A
license
B
quality
C
maintenance
A professional-grade network analysis MCP server that integrates Wireshark/TShark, Nmap, and threat intelligence to enable packet capture, network scanning, threat detection, and credential extraction through natural language.
Last updated 2026-04-03
41
2
MIT

MCP ConnectorsBrowse all →

Security Intel MCP A
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Security Penetration Testing
31
lazaretto A
Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.
Security Penetration Testing
31
Helixar Security A
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
Security Penetration Testing
21
ContrastAPI A
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Security Penetration Testing AI & Machine Learning
55132
agentready A
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
Security Web Scraping Penetration Testing
31
CertScore.ai — Light mode A
No-account public website privacy risk scans with 20 new scans/day and free recent-result reuse.
Security Penetration Testing
31
HoneyLabs A
Query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.
Security Monitoring Penetration Testing
812
Cybersecurity Threat Intelligence MCP A
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Security Penetration Testing
91
osv-advisory-mcp-server A
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Penetration Testing Developer Tools Security
411
aribot A
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Security Penetration Testing
151
SimplyScan A
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Penetration Testing Marketing Search
71
ZEN SecDB A
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
Security Penetration Testing
111
Opzyai Vibe Check A
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Penetration Testing Security
11
Password A
Password strength analysis MCP.
Security Penetration Testing
321
QuantumScan PQC Scanner A
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Penetration Testing Blockchain Code Analysis
41
Port Scanner API A
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Penetration Testing Networking & Infrastructure
21
Subdomain API A
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Penetration Testing Security
21
LaunchTrust A
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Security Penetration Testing
91
MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)A
Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
Security Penetration Testing
11
secret-scanner A
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Security Penetration Testing
11

Penetration Testing

MCP ServersBrowse all →

Polygraphofficial

Beagle Security MCP Serverofficial

Grype MCP Serverofficial

agentminds-mcpofficial

MCP Hub Securityofficial

Latent Defense MCP Serverofficial

Symbiotic MCP Serverofficial

PatrowlIntelMCPofficial

operant-mcpofficial

AynOpsofficial

@konsulto/mcpofficial

Ghost Security MCP Serverofficial

Snyk API & Web MCP Serverofficial

MCP ConnectorsBrowse all →