"An overview of penetration testing (pentest)" matching MCP connectors:

Point Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools.

Check an MCP endpoint resolves: liveness, live tool list, schema drift. Free.

Instant no-signup webhook & HTTP-request inspector for testing webhooks and agent tool-callbacks.

End-to-end API testing — generate and run tests from OpenAPI, curl, Postman, or real user traffic.

An MCP server that provides tools to validate an email address using Dilli Email Validation API.

Swagger Petstore API (v1.0.27) as MCP for testing and prototyping powered by the HAPI MCP server

Search millions of x402 APIs for data, finance, validation, security, inventory, sync and automation

Simceptor is an AI-native Mock API simulation platform with a built-in MCP server. It enables AI agents to create, inspect, update, and test dynamic mock APIs, conditional response rules, stateful session simulations, and network latency directly from context.

HttpStatus MCP Server — 24 AI-callable tools for API testing, mocking, monitoring, and security. Create and manage API mocks, run chaos engineering rules, validate OpenAPI specs, scan URLs for security issues, check SSL certificates, debug CORS, analyze redirect chains, decode JWTs, inspect HAR files, trace distributed requests, capture webhooks, build automation workflows (including Postman import), and set up uptime monitors — all from your AI assistant.

AI-callable tools for API mocking, testing, monitoring, security, and automation.

The Grafbase MCP server sits in front of a GraphQL API and exposes an MCP protocol-compliant interface that allows AI agents and LLMs to explore and query GraphQL APIs using natural language. It provides tools to search schemas, introspect types and fields, and execute GraphQL queries while minimizing context bloat by returning only relevant schema subsets, with built-in support for authentication, authorization, and configurable access control.