"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

Open-source sample MCP server built to be audited: ships a paid-tool x402 demo, a deliberately scannable surface, and documented security posture. From Payload, makers of the MCP Launch Readiness Audit (48-rule scanner with a fix for every finding, hardening templates, stress-test harness, readiness verifier, CI workflow, branded audit report) and the MCP Monetization Kit.

Provides advanced string manipulation tools for AI agents, including text analysis, transformation, diffing, templating, and slug generation.

An MCP server for prompt injection boundary enforcement that scans URL content using a tiered LLM model strategy.

Provides web access tools (fetch, search, sitemap crawl) through String AI's API, automatically handling anti-bot bypass, CAPTCHA, and JavaScript rendering.

Enables MCP clients such as GitHub Copilot, Codex, Claude... to explore a SQL Server 2017+ database read-only: databases, schemas, tables, views, procedures, functions, indexes and dependency graphs, plus filtered, grouped, sampled and paginated queries capped by row limits.

Universal HTTP 402 Micropayment Protocol & Autonomous Economic Settlement Engine for AI Agents on Base L2.

MCP-first A/B testing server that enables agents to manage experiments (create, update traffic splits, read results, apply winning variants) from tools like Claude Code, with self-hosted Cloudflare backend.

Answers why a specific number in a Chinese listed company moved — margins, cash flow, inventory, management commentary, policy impact — by reading filed reports and IR transcripts and returning figures with the document and announcement number attached. It deliberately refuses price, valuation, and recommendation queries, returning a "gone_by_design" error instead.

Enables searching and retrieving content, module information, and Twig template snippets from a-blog cms via its GET API.

Lets an AI assistant read call and message history, send texts and picture messages, reach Phone Book contacts by name, and — once switched on — place calls run by a voice agent, all limited to the phone numbers the user ticks. Hosted remotely with OAuth sign-in, so nothing needs to be installed locally.

Provides read-only SQL Server health diagnostics (server health, blocking queries, missing indexes) via MCP, with a GUI installer that automatically configures AI clients like Claude Desktop.

This MCP wraps Bitrefill public API to allow agents to search for products and shop using cryptocurrencies like Bitcoin, Ethereum, Solana, and many more.

MCP server for hybrid documentation search (keyword + vector) and RAG chat, enabling natural language queries with cited answers from indexed repositories.

Enables AI assistants to query PostgreSQL, MySQL, SQL Server, Oracle, and MongoDB databases through MCP with read-only, audited access.

Enables MCP-compatible clients to deterministically neutralize adversarial prompt injections and jailbreak overrides with zero-dependency, sub-millisecond heuristic analysis.

Enables deterministic detection and neutralization of adversarial prompt injections and override attempts in AI agent workflows via a zero-dependency MCP server, providing structured telemetry and low-latency validation.

Enables web search and AI-summarized answers via an x402-gated gateway, with options for structured results or enriched summaries, accessible as an MCP server.

Enables autonomous AI agents and MCP-compliant clients to detect and block adversarial prompt injections, jailbreak attempts, system prompt exfiltration, and tool hijacking via a zero-dependency, sub-millisecond heuristic firewall.

Enables LLM clients to run Brave LLM Context web searches and fetch readable markdown extracts from URLs, including specialized site extraction, PDF text, raw mode, and pagination.

A meta-MCP server that aggregates authoritative web search and browser research tools, providing a unified interface with a cost-efficient fetch ladder for web research.