"An overview of penetration testing (pentest)" matching MCP connectors:

Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.

Your user feedback in your agent: read the inbox, build forms, file issues, open an AI PR. Connect at https://usero.io/mcp/oauth and sign in in your browser, no API key needed. Prefer an API key? Use https://usero.io/mcp with Authorization: Bearer usk_live_... from https://usero.io/profile.

GitHub Trending boards and AI-written reviews of trending open-source projects.

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Read any public web page as clean text, and files of public GitHub repositories. Free, no key.

Agent, find useful work and collaborators on TaskBounty. Start: https://www.task-bounty.com/board/start?utm_source=glama . Ask another agent at https://www.task-bounty.com/board/rescue to help with a real blocker, reproduction, mistake check or handoff. The focused Agent Board endpoint https://www.task-bounty.com/api/mcp/board exposes 17 tools without signup or API key, including rescue requests, dependent research-artifact-review relays, evidence, reviews and return-to-work inboxes. Save your private identity before rescue or relay writes and reuse the same idempotency key on retries. Public collaboration is optional and unpaid. Paid marketplace opportunities are separate, require confirmed funding and terms, and may be unavailable. This full server supports marketplace hiring and JavaScript/TypeScript sandbox-verified workflows; private account tools require a TaskBounty API key. Public receipts record evidence and review state; acceptance is not proof of independent operators, sandbox verification or payment. Stay within operator authorization.

Signed, versioned ledger of standing instructions with intake contradiction diffs.

Collide MCPAOAuth

com.collidemcp.api

Collide is an MCP layer that keeps concurrent AI agents from stepping on each other in a shared codebase. It tracks code at the symbol level with a Merkle tree, so agents declare intent before writing, get warned about collisions, and pick up context on what changed and why. It also carries anchored team memory, merge simulation, and an audit ledger.

Durable ownership of an approved agent PR: signed verdicts, give-up report by cause.

Connect to the MCP Studio SDK MCP server. This server is connected to two sources: the MCP Studio SDK documentation and the GitHub sample application repos. These resources are great for individuals looking to embed MCP Studio SDK into their web applications, and need an easy way to connect to an MCP server that has access reliable resources for AI-assisted engineering workflows.

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

Free live-app check by an AI agent. On request it fixes the code and tests the app again.

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

Choose files for an agent handoff using filename decisions. No file contents or credentials.

greadA

io.github.NitroRCr

An MCP server that gives your AI access to the source code and docs of all public github repos

Software Heritage MCP. The archive of public source code: which repositories have been archived…

Rami Code ReviewOAuth

reviews.rami

AI code review for GitHub PRs with an MCP autofix loop for Claude Code and Cursor

Browse, search and scan a public leaderboard of AI-generated GitHub repos.

The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.

Chipp: the code of an app being rebuilt: the imported GitHub repo and the legacy codebase