MCPFP
Related Servers
Alternatives to MCPFP
No user-submitted related servers found.
Related Servers
- FlicenseNot gradedqualityCmaintenanceProvides AI agents with standardized security scanning capabilities for authorized assessments, including host detection, port scanning, service fingerprinting, web vulnerability scanning, CVE verification, and report generation, all with unified JSON output and strict compliance controls.-
- AlicenseNot gradedqualityDmaintenancePassive security scanner that audits a running MCP server against the OWASP MCP Top 10 and grades it A-F. Read-only static analysis of the advertised tools, prompts and resources with console/JSON/SARIF output, and it also runs as an MCP server itself.33 npmMIT
- AlicenseNot gradedqualityDmaintenanceProvides security assessment methodology, tool documentation, and step-by-step workflows to guide AI agents through vulnerability scanning, static analysis, and penetration testing of applications and URLs.1MIT
- AlicenseBqualityBmaintenanceEnables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.14MIT
- AlicenseNot gradedqualityAmaintenanceEnables professional penetration testers to orchestrate reconnaissance, scanning, brute-force checks, traffic capture, privilege-escalation auditing, and reporting workflows through MCP transports. It integrates tools including nmap, GoBuster, Nikto, John the Ripper, Hashcat, ffuf, Nuclei, Hydra, and sqlmap.172 npmGPL 3.0
- AlicenseNot gradedqualityAmaintenanceEnables professional penetration testers to run reconnaissance, vulnerability scanning, brute-force checks, traffic capture, exploitation support, and report generation through a unified tool interface. Supports local and networked transports with bearer/OIDC authentication.172 npmGPL 3.0
TDQS
Scored across 8 tools
Each tool targets a distinct stage or concern: target setup, environment checks, network scanning, HTTP header analysis, TLS inspection, OWASP mapping, guidance, and reporting. Even the two analyze tools are clearly separated by layer, so no agent should confuse one tool for another.
All tool names follow a consistent snake_case verb_noun pattern: load_, check_, scan_, analyze_, assess_, get_, and write_. The verb clearly signals the action and the noun signals the target, making the naming predictable and easy to extend.
Eight tools is a well-scoped set for a reconnaissance and OWASP assessment workflow. Each tool has a clear responsibility and no tool feels redundant or extraneous.
The workflow is complete for the stated passive-assessment and pedagogical purpose: it covers target validation, environment readiness, network discovery, HTTP/TLS inspection, OWASP mapping, guidance, and report generation. There are no obvious dead ends or missing core operations.