Best OWASP MCP Servers
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software through community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.
Why this server?
Allows fetching OWASP category details by ID, enabling security analysis reference.
AlicenseAqualityCmaintenanceA Model Context Protocol server that wraps the Appknox CLI for mobile application security testing.1312 npmMITWhy this server?
Facilitates security auditing based on OWASP standards, utilizing tools like OWASP ZAP for dynamic scanning and Top 10 coverage.
AlicenseBqualityDmaintenanceAn MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.6MITWhy this server?
Provides structured access to the OWASP Bug Logging Tool (BLT) ecosystem, allowing AI agents to submit issues, triage vulnerabilities, manage security workflows, and track contributor rankings and rewards.
AlicenseBqualityDmaintenanceProvides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.49AGPL 3.0Why this server?
Incorporates OWASP security standards for web application security assessments, specifically checking OWASP headers as part of the compliance_check tool's comprehensive security audit capabilities.
AlicenseAqualityFmaintenanceMCP server for Alderpost Intelligence API — 8 x402 endpoints bundling premium data sources (VirusTotal, People Data Labs, Hunter.io, AbuseIPDB, SSL Labs, NIH RxNorm) into scored intelligence responses. Pay per call via USDC on Base.832 npm2MITWhy this server?
Provides comprehensive coverage of OWASP LLM + Agentic + MCP Top 10 security threats through ClawGuard Shield's detection patterns, enabling security scanning aligned with OWASP standards.
AlicenseAqualityDmaintenanceMCP server for AI security scanning. Detects prompt injections, jailbreaks, data exfiltration, and social engineering attacks in real-time using 42 regex patterns via the ClawGuard Shield API. Sub-10ms response times.51MITWhy this server?
Includes security scanning capabilities for OWASP Top-10 vulnerabilities and taint analysis as part of the security scanning features.
AlicenseAqualityAmaintenanceFramework-aware code intelligence MCP server that builds a cross-language dependency graph from source code. 53 integrations (Laravel, Django, Rails, Spring, NestJS, Next.js, and more) across 68 languages. 100+ tools for navigation, impact analysis, refactoring, security scanning, session memory, and CI/PR reports — up to 97% token reduction.292,728 npm190MITWhy this server?
Assesses a domain's external security posture against OWASP standards: the OWASP Secure Headers Project checks plus the externally observable OWASP Top 10 subset (cryptographic failures, security misconfiguration, vulnerable/outdated components), returning an A+ to F grade with per-category findings and an explicit list of out-of-scope categories that require authenticated or active testing.
AlicenseAqualityAmaintenanceDomain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.23862 npm1MITWhy this server?
Integrates OWASP security guidelines and references for vulnerability classifications and remediation advice, mapping detected issues to OWASP Top 10 categories.
AlicenseAqualityDmaintenanceA security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.7400 PyPI2MITWhy this server?
Implements OWASP-aligned security checks for authentication systems, allowing validation against industry-standard security practices
AlicenseBqualityDmaintenanceEnterprise-grade authentication solution that provides secure credential management with encryption, multi-protocol authentication (OAuth2, SAML, LDAP), and real-time threat detection for applications.81AGPL 3.0