Skip to main content
Glama
wagonbomb

InsightAppSec MCP Server

by wagonbomb
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to InsightAppSec MCP Server

No user-submitted related servers found.

    Related Servers

    • Intigriti MCP Server

      alpernae
      A
      license
      A
      quality
      C
      maintenance
      A Model Context Protocol (MCP) server for interacting with the Intigriti bug bounty platform's Researcher API. It enables AI assistants to manage bug bounty programs, submissions, and research workflow.
      8
      4
      MIT

    • rapid7-mcp

      SecuritahGuy
      A
      license
      Not graded
      quality
      C
      maintenance
      A unified MCP server for Rapid7's security platform, exposing InsightVM (vulnerability management), InsightIDR (SIEM/investigations), and Metasploit Pro (pentest telemetry) as tools for Claude, Cursor, and any MCP-compatible LLM client.
      6
      MIT

    • ZAP MCP Proxy

      madmystic
      F
      license
      Not graded
      quality
      C
      maintenance
      A lightweight MCP server that wraps OWASP ZAP's REST API as Model Context Protocol tools, enabling AI agents to perform automated security scanning.
      -

    • DefectDojo MCP Server

      jamiesonio
      A
      license
      B
      quality
      D
      maintenance
      Provides a Model Context Protocol server implementation that allows AI agents and other MCP clients to programmatically interact with DefectDojo, a vulnerability management tool, for managing findings, products, and engagements.
      11
      16
      MIT

    • SentinelScan Cloud MCP Server

      vndpal
      F
      license
      Not graded
      quality
      D
      maintenance
      A remote MCP server that exposes mock application security testing data (applications, scans, issues) for LLM clients to query security posture using natural language.
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.3/5.0

    Scored across 56 tools

    Disambiguation4/5

    Most tools are clearly distinct by resource and action, such as list_apps vs create_app. However, the several scan-related getters (get_scan, get_scan_execution_details, get_scan_engine_events) could cause confusion, and the universal search tool overlaps with list functions.

    Naming Consistency4/5

    The vast majority follow the verb_noun pattern with snake_case, e.g., list_schedules, create_scan_config. Minor deviations like manage_app_tags and control_scan, while still understandable, break the otherwise consistent CRUD-oriented naming.

    Tool Count2/5

    With 56 tools, this far exceeds the recommended range of 3-15 and even the borderline 16-25. While the API scope is broad, many tools could be consolidated (e.g., all configure_* authentication tools), making the set feel oversized and harder to navigate.

    Completeness5/5

    The tool set provides thorough lifecycle coverage across multiple domains: applications, scans, scan configurations, vulnerabilities, schedules, blackouts, files, reports, and auth settings. CRUD operations are consistently present, and even edge cases like scan control and file uploads are included, leaving no major gaps.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources