Penetration Testing

Tools and frameworks for security testing, vulnerability scanning, and penetration testing. Enables security professionals to identify and exploit security weaknesses in applications and networks.

MCP ServersBrowse all →

Grype MCP Serverofficial
Penetration Testing Security
anchore
A
license
A
quality
F
maintenance
Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol.
Last updated 2025-08-29
2
9
9
Apache 2.0
Polygraphofficial
Penetration Testing Security Testing & QA Tools
polygraphso
A
license
A
quality
C
maintenance
Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.
Last updated 2026-07-06
12
4
130
6
Apache 2.0
nowsecure-mcp-server
Security Penetration Testing
tatavarthitarun
A
license
A
quality
B
maintenance
Enables interaction with NowSecure Platform for listing applications, retrieving remediation findings, and generating remediation PDFs via REST and GraphQL APIs.
Last updated 2026-06-15
2
5
13
2
MIT
Ghost Security MCP Serverofficial
Security Penetration Testing
ghostsecurity
A
license
A
quality
D
maintenance
A Model Context Protocol (MCP) server for the Ghost Security API, providing secure access to security findings and repository data through standardized tools.
Last updated 2026-06-12
7
157
3
MIT
@konsulto/mcpofficial
Penetration Testing Security
konsulto
A
license
A
quality
B
maintenance
MCP server that enables Claude Code to drive the Konsulto cybersecurity audit platform from the CLI, including reading and writing findings, managing evidence, and handling scope and assets.
Last updated 2026-06-29
19
30
1
MIT
burp-mcp-plus
Penetration Testing Security
titaniumtushar
A
license
A
quality
B
maintenance
Enables structured HTTP request creation and local file ingestion for LLM integration with Burp Suite, reducing malformed requests and token costs.
Last updated 2026-05-05
2
20
6
MIT
Dechonet MCP
Security Networking & Infrastructure Penetration Testing
node-man
A
license
A
quality
A
maintenance
Domain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.
Last updated 2026-06-17
6
13
152
1
MIT
MCP Hub Securityofficial
Security Penetration Testing
mcp-hub-corp
A
license
A
quality
B
maintenance
Security gate that scans MCP servers and Claude Code Skills for vulnerabilities before execution.
Last updated 2026-05-18
7
2
MIT
operant-mcpofficial
Penetration Testing Security Testing & QA Tools
operantlabs
A
license
A
quality
C
maintenance
A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
Last updated 2026-04-01
51
153
13
MIT
Latent Defense MCP Serverofficial
Penetration Testing Code Analysis AI & Machine Learning
latent-defense
A
license
B
quality
C
maintenance
Connects Claude Code to a Latent Defense deployment to map GitHub repositories into an infrastructure graph, discover attack paths using the JEPA energy model, and triage findings from the terminal.
Last updated 2026-06-22
85
Apache 2.0
agentminds-mcpofficial
Web Scraping Penetration Testing
agentmindsdev
A
license
A
quality
B
maintenance
MCP server for AgentMinds collective intelligence platform, enabling AI agents to scan websites for security/SEO/performance issues, pull personalized recommendations, and share findings across the network.
Last updated 2026-06-29
7
32
MIT
Symbiotic MCP Serverofficial
Penetration Testing Security Code Analysis
SymbioticSec
A
license
A
quality
D
maintenance
Enables security analysis of code and infrastructure files via MCP, using Symbiotic CLI for scanning vulnerabilities.
Last updated 2025-12-15
4
MIT
Beagle Security MCP Serverofficial
Penetration Testing Security Testing & QA Tools
beaglesecurity
A
license
B
quality
D
maintenance
Enables integration with Beagle Security API for managing security testing projects, applications, domain verification, and automated penetration tests. Provides 18 tools for creating, monitoring, and retrieving results from security assessments.
Last updated 2025-07-09
17
1
MIT
re-gdb
Penetration Testing
Heretek-RE
A
license
B
quality
C
maintenance
MCP server wrapping GDB and GEF for dynamic analysis, enabling interactive debugging and memory inspection via GDB/MI protocol.
Last updated 2026-06-10
14
1
MIT
@arcwall/mcp-server
Security Penetration Testing
rom-baro
A
license
A
quality
C
maintenance
Security scanning for AI coding tools (Claude Code, Cursor, Windsurf) including secrets detection, MCP config vulnerabilities, agent instruction checks, threat modeling, prompt injection testing, pre-commit security checks, and dependency vulnerability scanning.
Last updated 2026-05-07
7
151
1
MIT
MCP Interactsh Bridge
Penetration Testing Security Testing & QA Tools
tachote
A
license
A
quality
D
maintenance
Enables out-of-band interaction testing by integrating ProjectDiscovery's interactsh service as an MCP server. Allows AI agents to create callback domains, send probes, and capture DNS/HTTP interactions for security testing and verification workflows.
Last updated 2025-10-15
4
13
2
MIT
MCP Server Pentest
Penetration Testing Browser Automation Security
9olidity
A
license
B
quality
F
maintenance
A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
Last updated 2025-03-24
12
252
22
MIT
re-frida
Penetration Testing Autonomous Agents
Heretek-RE
A
license
A
quality
C
maintenance
MCP server that wraps the Frida dynamic instrumentation toolkit, allowing users to attach to processes, hook functions, enumerate modules and exports, and manage scripts through natural language.
Last updated 2026-06-10
10
1
MIT
MCP HTTP Requests
Penetration Testing API Testing Web Scraping
godzeo
A
license
A
quality
D
maintenance
A comprehensive HTTP client MCP server for security testing, API testing, and web automation that provides full-featured HTTP tools with detailed logging capabilities.
Last updated 2025-06-29
8
9
MIT
MEOK MCP Hardening MCP
Penetration Testing Security
CSOAI-ORG
A
license
B
quality
B
maintenance
Automated security red-team for any MCP server that scans manifests against OWASP LLM Top 10 and MCP-specific risks, returning a 0-100 hardening score and HMAC-signed report.
Last updated 2026-06-16
7
MIT
vibecheck
Code Analysis Penetration Testing
ArisRhiannon
A
license
A
quality
B
maintenance
Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
Last updated 2026-06-02
1
21
2
MIT
bawbel-mcp
Developer Tools Penetration Testing Security
bawbel
A
license
A
quality
A
maintenance
Bawbel MCP Server lets any agent scan MCP servers and skill files for security vulnerabilities mid-conversation. Seven tools covering server-card scanning, conformance scoring, rug pull detection, and AVE threat intelligence queries. Powered by the AVE standard with OWASP MCP Top 10 mapping on every finding. Free, Apache 2.0, no API key required.
Last updated 2026-05-23
10
1
Apache 2.0
BloodHound MCP Server
Security Penetration Testing Databases
mwnickerson
A
license
B
quality
B
maintenance
Enables security professionals to query and analyze Active Directory attack paths from BloodHound Community Edition data using natural language through Claude Desktop's Model Context Protocol interface.
Last updated 2026-06-01
79
113
GPL 3.0
OWASP Agentic MCP
Security Penetration Testing
CSOAI-ORG
A
license
A
quality
A
maintenance
OWASP Agentic - MCP server providing AI-powered tools and automation by MEOK AI Labs
Last updated 2026-06-26
5
MIT
hospital-vuln-scanner-mcp
Penetration Testing Testing & QA Tools
12211725-star
A
license
A
quality
B
maintenance
A real security scanning MCP server for medical information systems, supporting port scanning, vulnerability detection, medical system identification, and compliance report generation.
Last updated 2026-04-22
14
1
MIT
Sekrd Security Scannerofficial
Penetration Testing Developer Tools
sekrdcom
F
license
A
quality
C
maintenance
Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
Last updated 2026-05-04
3
MITRE ATT&CK Mapper MCP
Security Penetration Testing Documentation Access
CSOAI-ORG
A
license
B
quality
B
maintenance
Enables cyber defenders to query ATT\&CK techniques, list tactics, map incidents to techniques, look up threat actor groups and mitigations, all via the MCP protocol.
Last updated 2026-06-26
5
MIT
x64dbg MCP Server
Code Analysis Penetration Testing
ouonet
A
license
A
quality
B
maintenance
Enables AI assistants to perform reverse engineering and debugging of Windows executables through x64dbg, with tools for loading executables, controlling execution, analyzing memory and security, and generating reports.
Last updated 2026-05-30
39
88
3
MIT
Wireshark MCP Server
Networking & Infrastructure Penetration Testing
schwarztim
A
license
A
quality
F
maintenance
A Model Context Protocol server that enables AI assistants to perform network packet analysis, capture, and security operations on a remote machine via Wireshark/tshark.
Last updated 2026-05-09
10
1
MIT
vibescan-mcp-server
Security Penetration Testing Code Analysis
Aguantar
A
license
A
quality
F
maintenance
Enables scanning projects for leaked secrets and security issues directly from Claude Code, detecting secret categories, dangerous code patterns, and git hygiene issues.
Last updated 2026-03-19
2
1
MIT

MCP ConnectorsBrowse all →

ContrastAPI A
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Security Penetration Testing AI & Machine Learning
55131
osv-advisory-mcp-server A
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Penetration Testing Developer Tools Security
41
Opzyai Vibe Check A
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Penetration Testing Security
11
Password A
Password strength analysis MCP.
Security Penetration Testing
311
QuantumScan PQC Scanner A
Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.
Penetration Testing Blockchain Code Analysis
41
MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior)A
Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.
Security Penetration Testing
11
Port Scanner API A
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Penetration Testing Networking & Infrastructure
21
Subdomain API A
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Penetration Testing Security
21
LaunchTrust A
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Security Penetration Testing
91
cloud-pathfinder A
IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.
Cloud Platforms Security Penetration Testing
21
Helixar Security A
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
Security Penetration Testing
21
secret-scanner A
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Security Penetration Testing
11
Owasp A
OWASP MCP — keyless.
Security Penetration Testing
341
lookup-disclose-io A
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
Security Penetration Testing
21
pentest-mcp-server A
Offline methodology engine for authorized penetration testing, CTF, and security research.
Penetration Testing Security
71
HoneyLabs A
Query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.
Security Monitoring Penetration Testing
812
KernelScan A
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Penetration Testing Security
101
Cybersecurity Threat Intelligence MCP A
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Security Penetration Testing
91
mcpcheckup A
Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
Penetration Testing Security
21
Security Mcp A
MCP server for Security
Security Penetration Testing
41

Penetration Testing

MCP ServersBrowse all →

Grype MCP Serverofficial

Polygraphofficial

Ghost Security MCP Serverofficial

@konsulto/mcpofficial

MCP Hub Securityofficial

operant-mcpofficial

Latent Defense MCP Serverofficial

agentminds-mcpofficial

Symbiotic MCP Serverofficial

Beagle Security MCP Serverofficial

Sekrd Security Scannerofficial

MCP ConnectorsBrowse all →