Best OWASP MCP Servers
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software through community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.
Why this server?
Allows fetching OWASP category details by ID, enabling security analysis reference.
AlicenseAqualityDmaintenanceA Model Context Protocol server that wraps the Appknox CLI for mobile application security testing.1319MITWhy this server?
Generates compliance reports mapping security findings to OWASP LLM Top 10 and OWASP Agentic Top 10 frameworks for AI agent security standards.
Why this server?
Security assessment against the OWASP Top 10 for Agentic AI, providing tools to detect prompt injection, tool poisoning, excessive agency, and data leakage.
AlicenseAqualityBmaintenanceOWASP Agentic - MCP server providing AI-powered tools and automation by MEOK AI Labs5MITWhy this server?
Incorporates OWASP security standards for web application security assessments, specifically checking OWASP headers as part of the compliance_check tool's comprehensive security audit capabilities.
AlicenseAqualityFmaintenanceMCP server for Alderpost Intelligence API — 8 x402 endpoints bundling premium data sources (VirusTotal, People Data Labs, Hunter.io, AbuseIPDB, SSL Labs, NIH RxNorm) into scored intelligence responses. Pay per call via USDC on Base.8342MITWhy this server?
Provides read-only access to OWASP testing guides (WSTG, MASTG, ISTG, AITG), enabling precise lookup, natural-language search, and browsing of test procedures with full provenance.
AlicenseAqualityBmaintenanceRead-only MCP server for precise lookup, search, and versioned retrieval of OWASP testing guides (WSTG, MASTG, ISTG, AITG) with full provenance on every result.11Apache 2.0Why this server?
Implements OWASP-aligned security checks for authentication systems, allowing validation against industry-standard security practices
AlicenseBqualityDmaintenanceEnterprise-grade authentication solution that provides secure credential management with encryption, multi-protocol authentication (OAuth2, SAML, LDAP), and real-time threat detection for applications.81AGPL 3.0Why this server?
Provides comprehensive integration with OWASP ZAP for automated web crawling (spider scans), active vulnerability scanning, proxy integration, alert management, and security context configuration.
AlicenseBqualityAmaintenanceAI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.4741MITWhy this server?
Provides access to mem9 persistent memory for AI agents, with read and write operations guarded by OWASP agent-memory-guard policies to prevent prompt injection, secret leakage, and memory poisoning.
AlicenseAqualityDmaintenanceAn MCP server that provides a guarded interface to the mem9 persistent memory backend, protecting AI agents against prompt injection, secret leakage, and memory poisoning.6MITWhy this server?
Maps detected security findings to OWASP categories and standards to provide industry-standard vulnerability context.
AlicenseAqualityDmaintenanceAn AI-powered security audit tool that analyzes codebases for vulnerabilities using real-time MITRE CWE data and npm audit. It enables users to perform comprehensive scans for authentication issues, exposed secrets, and dependency risks with structured remediation steps.210MIT