"Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Arsen is a human risk management platform that enables security teams to assess employee exposure through advanced phishing, voice phishing, and deepfake simulations, and strengthen their resilience with adaptive cybersecurity awareness training. Arsen MCP connects your Arsen platform to your preferred AI assistant, including Claude, ChatGPT, and any MCP-compatible assistant. With Arsen MCP, you can: 1. Build and launch campaigns. Let your AI assistant prepare phishing simulation campaigns and cybersecurity awareness programs, then launch them with your approval. 2. Get actionable insights from your data. Ask questions in plain language and get answers based on your organization's actual data, including campaign results, click, compromise and reporting rates, phishing score trends, coverage, and teams that need attention. 3. Manage multiple client organizations. Give MSSPs the ability to query and work across every client organization they manage, from a single AI assistant. Secure by design. Users authenticate with their Arsen account (SSO and MFA supported), and every request is governed by their existing Arsen permissions.
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Scan a web page for accessibility, security, privacy, quality and SEO issues, with fixes.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client
Offline methodology engine for authorized penetration testing, CTF, and security research.
Gandoki is a precision-first MCP security scanner featuring 55 detectors, layered evidence verification, AI-assisted false-positive suppression, and read-only credential validation. Discover exposed secrets, debug interfaces, and sensitive files across authorized assets with explainable findings and minimal noise.
Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.
Google Open Source Insights (deps.dev) OpenSSF Security Scorecard & dependency tree audit.
Audit on-chain DEX token liquidity pairs, volume, price action, and FDV via DexScreener.
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.
Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
DataFood: 16 data sources (crypto/DeFi/security/news/finance) via one MCP. Bundles save ~92%.
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
