Skip to main content
Glama

Related Servers

Alternatives to VulnForge MCP

No user-submitted related servers found.

    Related Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
      6 npm
      2
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.
      8
      1
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      An AI-powered security audit tool that analyzes codebases for vulnerabilities using real-time data from MITRE CWE and npm audit. It enables deep analysis of authentication, API security, and dependencies to provide structured findings and remediation steps.
      2
      7 npm
      1
      MIT
    • F
      license
      A
      quality
      D
      maintenance
      Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
      3
      -
    • A
      license
      Not graded
      quality
      B
      maintenance
      Provides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.
      10 npm
      Apache 2.0

    TDQS

    B3.4/5.0

    Scored across 5 tools

    Disambiguation4/5

    The three audit tools are clearly distinguished by layer (web, API, DB), and inject_patch is a distinct action. full_scan overlaps with the combined audits, which could cause minor confusion about when to use it versus individual audits, but its end-to-end purpose is clear.

    Naming Consistency4/5

    All tools use snake_case with the vulnforge_ prefix, which is consistent. However, audit_web/audit_api/audit_db and inject_patch follow a verb_noun pattern, while full_scan uses an adjective_noun pattern, a minor deviation.

    Tool Count5/5

    Five tools is well-scoped for a focused vulnerability auditing/patching server. Each tool targets a specific layer or action and earns its place without redundancy.

    Completeness4/5

    The surface covers detection across web, API, and DB layers plus automated patching and a full-scan orchestrator, providing a complete detect-and-remediate cycle. Minor gaps include no dedicated patch verification or scanning beyond these three layers (e.g., dependencies, cloud configs).

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues