"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

Deterministic encode, decode, hash and convert for agents, on the same pipeline engine as the String Utility Belt web app, CLI and editor extensions: a pipeline built and checked in the browser runs unchanged from its share link. Base64/hex/URL, JWT, hashes, JSON/YAML/CSV/XML, dates and regex; tools to search, describe and run utilities or whole pipelines, and to detect input formats. Runs locally

Provides agents with real Linux VMs to run commands, manage files, expose ports, and track costs, all through an ephemeral sandbox service.

Cross-chain cryptocurrency swaps via Chainflip. Get quotes, execute swaps, and track progress. No API key required to get started.

MCP server for the STRING protein–protein interaction database, hosted by STRING at mcp.string-db.org. Adapted for LLM grounding: responses are size-limited and include metadata and notes on interpretation and next steps. Tools cover identifier resolution, interaction networks and evidence, functional and PPI enrichment, and sequence similarity search.

Run free live audience Q&A and polls from your agent: start an AskOne room, add and launch a poll, approve or hide questions and mark them answered, close the room, then read the questions as a FAQ draft and get the results. Free AI moderation. Uses an organization API token from askone.org

Provides web access tools (fetch, search, sitemap crawl) through String AI's API, automatically handling anti-bot bypass, CAPTCHA, and JavaScript rendering.

Enables MCP clients such as GitHub Copilot, Codex, Claude... to explore a SQL Server 2017+ database read-only: databases, schemas, tables, views, procedures, functions, indexes and dependency graphs, plus filtered, grouped, sampled and paginated queries capped by row limits.

Universal HTTP 402 Micropayment Protocol & Autonomous Economic Settlement Engine for AI Agents on Base L2.

Lets AI agents register, post job specs to matching specialist bots, authorize PayPal escrow funds, and capture payment only for units that pass acceptance checks. Covers the full job lifecycle — bidding, hashed contracts, funding, delivery verification, payouts, dispute mediation and long-polled events.

Provides string utility operations via the MCP protocol, with built-in EU AI Act compliance.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

WAF for AI agents — block prompt injection before it reaches the LLM.

Enables MCP clients and autonomous agents to screen incoming prompts for system overrides, delimiter breakouts, and encoded payload evasion, helping block prompt injection and jailbreak attempts before execution.

Enables agents to scan untrusted text for jailbreak markers, prompt-override exploits, and indirect injection payloads, then cleanse it by replacing hostile command sequences with safe placeholders before the text reaches a prompt. Exposes tools for sanitizing input and itemizing detected threat patterns.

Give your AI agent the entire China A-share market: 55 datasets of prices, financials, capital flows, corporate events and futures/options, stored locally and queryable with read-only SQL. Built point-in-time with delisted stocks kept, so backtests don't lie — no account, no API key.

A fault-tolerant, stealth-enabled Model Context Protocol (MCP) server for web searching and content fetching. Built for AI Agents (Cursor, Claude Code, OpenCode), it uses a stealth browser engine to fetch pages, dynamically handles SPAs/React, and converts bloat into token-optimized Markdown.

Enables LLM agents to run read-only SQL Server performance diagnostics through Query Store and DMVs, covering regressions, execution plans, parameter sniffing, missing-index impact, and wait statistics across databases.

Enables secure database operations on SQL Server instances through a three-tier safety system, supporting schema exploration, query execution, performance analysis, and data export with configurable security levels from read-only to full development access.