Best OWASP MCP Servers
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software through community-led open source software projects, hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.
Why this server?
Allows fetching OWASP category details by ID, enabling security analysis reference.
AlicenseAqualityDmaintenanceA Model Context Protocol server that wraps the Appknox CLI for mobile application security testing.138 npmMITWhy this server?
Provides comprehensive coverage of OWASP LLM + Agentic + MCP Top 10 security threats through ClawGuard Shield's detection patterns, enabling security scanning aligned with OWASP standards.
AlicenseAqualityCmaintenanceMCP server for AI security scanning. Detects prompt injections, jailbreaks, data exfiltration, and social engineering attacks in real-time using 42 regex patterns via the ClawGuard Shield API. Sub-10ms response times.51MITWhy this server?
Provides structured access to the OWASP Bug Logging Tool (BLT) ecosystem, allowing AI agents to submit issues, triage vulnerabilities, manage security workflows, and track contributor rankings and rewards.
AlicenseBqualityDmaintenanceProvides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.49AGPL 3.0Why this server?
Maps security findings to OWASP MASVS categories for mobile security compliance.
AlicenseAqualityAmaintenanceHealth check for React Native and Expo apps. One command, no install, no account.93,175 npm6MITWhy this server?
Enforces OWASP Top 10 security compliance, including helmet, CORS, rate limiting, and input sanitization.
AlicenseBqualityAmaintenanceEnables auditing codebases for production readiness, including linting, testing, CI/CD, security, branch conventions, architecture, and an A–F quality scorecard via MCP tools.1510 npm1MITWhy this server?
Includes security scanning capabilities for OWASP Top-10 vulnerabilities and taint analysis as part of the security scanning features.
AlicenseAqualityAmaintenanceFramework-aware code intelligence MCP server that builds a cross-language dependency graph from source code. 53 integrations (Laravel, Django, Rails, Spring, NestJS, Next.js, and more) across 68 languages. 100+ tools for navigation, impact analysis, refactoring, security scanning, session memory, and CI/PR reports — up to 97% token reduction.298,194 npm201MITWhy this server?
Provides comprehensive access to OWASP security documentation, including detailed information on the OWASP Top 10 vulnerabilities and security cheat sheets.
AlicenseAqualityDmaintenanceProvides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.41MITWhy this server?
Supports implementation of protection against OWASP top 10 vulnerabilities through rule creation and configuration.
AlicenseBqualityDmaintenanceProvides seamless integration with Fastly's Next-Gen Web Application Firewall API, enabling AI assistants to manage web application security through natural language interactions.291MITWhy this server?
Incorporates OWASP security standards for web application security assessments, specifically checking OWASP headers as part of the compliance_check tool's comprehensive security audit capabilities.
AlicenseAqualityFmaintenanceMCP server for Alderpost Intelligence API — 8 x402 endpoints bundling premium data sources (VirusTotal, People Data Labs, Hunter.io, AbuseIPDB, SSL Labs, NIH RxNorm) into scored intelligence responses. Pay per call via USDC on Base.817 npm2MIT