"Resources for Penetration Testing and Security Analysis" matching MCP servers:

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Enables control and monitoring of an ADT Control / Alarm.com security system from MCP-compatible hosts, including checking system and device state, reviewing activity, and safely arming, disarming, locking, or adjusting devices through confirmation-gated actions and a local audit trail.

Medicare claim documentation lookup for CPT codes against live CMS sources, returning structured requirements and document URIs with optional enrichment via RCI APIs.

MCP server for SpamTitan email security — manage quarantine, allowlists, blocklists, and view email stats

An MCP server for rendering common ECharts visualizations from structured tool arguments, exposing per-chart opener tools that map to independent HTML app resources.

An MCP server for Abnormal Security, enabling management of threat detection, email security cases, and AI-powered attack protection through Abnormal's API.

MCP server for KnowBe4 — security awareness training, phishing simulation, and user risk management API integration

Security-hardened MCP server for Excalidraw with API key auth, rate limiting, real-time WebSocket sync, and 14 diagramming tools

A legacy MCP server for Avanan cloud email security, providing tools to manage threat detection, email policies, and security incidents through Avanan's API.

MCP server for Proofpoint Email Protection - email security, threat intelligence, TAP (Targeted Attack Protection), and email filtering API integration

MCP server that resolves postal/ZIP codes to place names, states, and coordinates using Zippopotam.us. Free, no API key required.

Enables real-time domain registration lookups via RDAP, including availability, expiration, and registrar details, with no API key required. Supports natural language queries like 'is example.com available?' or 'when does example.com expire?'.

Enables AI assistants to bulk-check hundreds of brainstormed domain names in a single call, reporting which are available, taken, or reserved along with buy links and prices from multiple registrars. It runs locally via DNS, RDAP, and WHOIS lookups, with optional registrar API keys for confirming availability and premium pricing.

MCP server for creating and editing diagrams using draw.io. Allows generating diagrams from Mermaid or XML, searching shapes, and opening them in draw.io for export.

Enables users to draw GIS geometry on an interactive map and get clean, validated GeoJSON to hand off to other GIS MCP servers such as FEMA flood screening and USGS hydrography.

Gives Claude read-only access to your ESPN fantasy football team, including roster, weekly matchup, free agents, and player profiles.

Enables MCP-compatible AI clients to retrieve FinOps-aligned knowledge and runbooks on demand, covering cloud cost optimization across AWS, Azure, GCP, and OCI, AI inference economics, Kubernetes, data platforms, allocation, chargeback, anomaly management, and waste detection.

Vacation rental software. A signed stay offer on the host's own domain. Agents discover a host domain, verify an Ed25519-signed offer (VRP), and send the guest to that domain to book and pay the host. Do not compare hosts or prices. HemmaBo + VRP, 6 runtime tools: 2 HemmaBo tools, 2 host onboarding tools, and 2 VRP verification tools. Not an OTA. Not a marketplace.

Local-first crypto portfolio aggregation across exchanges (Bybit, Binance), EVM and Solana wallets, and Polymarket. Read-only credentials, runs as a local MCP server. Data aggregation only, not financial advice.

MCP server that lets agents create, display, and export rich UI widgets (cards, dashboards, charts, forms) inline in conversations, with interactive iframe support in MCP Apps hosts and PNG image fallback for other clients.