Skip to main content
Glama
mohdhaji87

JWT Auditor MCP Server

by mohdhaji87
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python

Related Servers

Alternatives to JWT Auditor MCP Server

No user-submitted related servers found.

    Related Servers

    • jwt-doctor-mcp

      Baneado98
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI agents to audit JSON Web Tokens (JWTs) and other token formats for security vulnerabilities, including HMAC secret cracking, live JWKS verification, and CVE fingerprinting.
      MIT

    • Pentest MCP

      daikiward0871
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables authorized penetration-testing workflows through MCP by exposing tools for network scanning, web fuzzing, subdomain enumeration, vulnerability scanning, brute-force checks, packet capture, and report generation with HTTP/STDIO/SSE transports and bearer/OIDC authentication.
      172 npm
      GPL 3.0

    • Pentest MCP

      aOzkan613
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables professional penetration testers to orchestrate reconnaissance, web/content scanning, brute-force checks, traffic capture, privilege-escalation auditing, wordlist generation, and client reporting through MCP transports with optional bearer/OIDC authentication.
      172 npm
      GPL 3.0

    • ghostkit MCP Server

      pspray
      F
      license
      Not graded
      quality
      D
      maintenance
      MCP server that provides AI clients with 26 security and developer tools, enabling tasks like JWT decoding, HTTP header analysis, and phishing URL inspection.
      -

    • Pentest MCP

      fnelson71
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables authorized penetration testers to run reconnaissance, scanning, brute-force, exploitation, traffic capture, wordlist generation, and client-report workflows through MCP clients, with stdio/HTTP/SSE transport and OIDC bearer authentication.
      172 npm
      GPL 3.0
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.6/5.0

    Scored across 4 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose: jwt_analyze for vulnerability assessment, jwt_bruteforce for secret cracking, jwt_decode for raw decoding, and jwt_generate for token creation. There is no overlap in functionality, making it easy for an agent to select the correct tool for a specific task.

    Naming Consistency5/5

    All tool names follow a consistent 'jwt_' prefix with a descriptive action suffix (analyze, bruteforce, decode, generate), using snake_case uniformly. This predictable pattern enhances readability and reduces confusion for agents.

    Tool Count5/5

    With 4 tools, the server is well-scoped for JWT auditing, covering essential operations like analysis, decoding, generation, and brute-forcing. Each tool earns its place without being too sparse or overwhelming, fitting typical use cases in this domain.

    Completeness4/5

    The toolset provides strong coverage for core JWT auditing tasks, including decode, generate, analyze, and brute-force. A minor gap exists in lacking a tool for verifying JWTs with known keys, which could be useful but is not critical for the stated purpose, as agents can work around this.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources