Skip to main content
Glama
61,008 servers. Last updated

Matching MCP tools:

Matching MCP Connectors:

"Resources for security testing, penetration testing, and bug bounty programs" matching MCP servers:

  • API Testing MCP

    cocaxcode
    A
    license
    A
    quality
    C
    maintenance
    A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.
    Last updated
    42
    106
    4
    MIT

  • bug-bounty-intelligence-mcp

    holistis
    -
    license
    -
    quality
    B
    maintenance
    AI-powered smart contract security analysis for AI agents and developers, enabling scanning of Solidity repos for vulnerabilities.
    Last updated
    1

  • Bounty-api

    vncent786
    F
    license
    A
    quality
    B
    maintenance
    Verified Singapore property, tax, affordability, salary, and location data for AI agents. 17 MCP tools, x402 micropayments, source provenance on every response. Singapore live now, more markets coming. Categories: Finance, Real Estate, Data, Singapore, x402, Payments, Government Data
    Last updated
    17
    1

  • mcp-security-toolkit

    x0base
    A
    license
    A
    quality
    A
    maintenance
    14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.
    Last updated
    14
    MIT

  • supabase-security-mcp

    Perufitlife
    A
    license
    A
    quality
    A
    maintenance
    MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.
    Last updated
    5
    1
    1
    MIT

  • AWS Security MCP

    groovyBugify
    A
    license
    -
    quality
    D
    maintenance
    A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.
    Last updated
    84
    Apache 2.0

  • mcp-security-audit

    LuciferForge
    A
    license
    -
    quality
    C
    maintenance
    Security auditor for MCP servers that enumerates tools, resources, and prompts, scans for injection patterns, classifies risk levels, and produces a scored report (0-100, grades A-F).
    Last updated
    2
    MIT

  • Security Scanner MCP

    ongjin
    A
    license
    -
    quality
    B
    maintenance
    Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
    Last updated
    22
    2
    MIT

  • trust-security

    Jaden-JJH
    A
    license
    -
    quality
    A
    maintenance
    Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.
    Last updated
    2
    MIT

  • mcp-server-security-snapshot

    Seiya-wasabi
    A
    license
    A
    quality
    D
    maintenance
    An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: * HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy * HTTPS enforcement and redirect chain depth * Presence of security.txt, robots.txt, sitemap.xml Payment model: * 0.05 USDC per scan, paid automatically on Base via the x402 proto
    Last updated
    2
    2
    MIT

  • xlsx-for-ai

    senoff
    A
    license
    A
    quality
    A
    maintenance
    50 tools and 400 functions for working with Excel/.xlsx spreadsheets — read/write, recalculate formulas, diff, repair broken references, and audit. Built for AI agents.
    Last updated
    50
    806
    4
    MIT