"Website penetration testing and security vulnerability assessment tools" matching MCP servers:

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Enables control and monitoring of an ADT Control / Alarm.com security system from MCP-compatible hosts, including checking system and device state, reviewing activity, and safely arming, disarming, locking, or adjusting devices through confirmation-gated actions and a local audit trail.

repo-release-tools mcp-server automates the software release process by managing version bumps, changelog generation, and releases. It streamlines repository maintenance by handling repetitive release tasks directly through your AI assistant.

Enables users to create, validate, view, and export system stock-and-flow maps from a versioned JSON model through MCP-capable hosts over local stdio or hosted Streamable HTTP. Supports causal-loop and nested-level mapping while keeping submitted model content with the caller and requiring no LLM provider key.

Website audits for AI agents: cookie consent and tracking, Core Web Vitals and lost revenue, WCAG 2.2, email/DNS security (SPF, DMARC) and AI-search readiness, merged into one prioritised fix plan.

An MCP server for Abnormal Security, enabling management of threat detection, email security cases, and AI-powered attack protection through Abnormal's API.

Security-hardened MCP server for Excalidraw with API key auth, rate limiting, real-time WebSocket sync, and 14 diagramming tools

A legacy MCP server for Avanan cloud email security, providing tools to manage threat detection, email policies, and security incidents through Avanan's API.

A lightweight, self-hosted MCP server that connects LLM-based agents to Red Hat Lightspeed services, enabling natural language querying of read-only (and optionally write) operations across Advisor, Image Builder, Inventory, Planning, Remediations, and Vulnerability services.

Records and visualizes evidence from a coding agent's own testing tools in a private local workspace, with live activity, domain charts, screenshot maps, findings, reproduction steps, human priorities, and persisted testing preferences. Runs 54 bundled CARBON command workflows over local stdio and serves a loopback-only visual workspace with strict evidence and permission gates.

MCP server that resolves postal/ZIP codes to place names, states, and coordinates using Zippopotam.us. Free, no API key required.

Enables real-time domain registration lookups via RDAP, including availability, expiration, and registrar details, with no API key required. Supports natural language queries like 'is example.com available?' or 'when does example.com expire?'.

Enables AI assistants to bulk-check hundreds of brainstormed domain names in a single call, reporting which are available, taken, or reserved along with buy links and prices from multiple registrars. It runs locally via DNS, RDAP, and WHOIS lookups, with optional registrar API keys for confirming availability and premium pricing.

MCP server for creating and editing diagrams using draw.io. Allows generating diagrams from Mermaid or XML, searching shapes, and opening them in draw.io for export.

Enables users to draw GIS geometry on an interactive map and get clean, validated GeoJSON to hand off to other GIS MCP servers such as FEMA flood screening and USGS hydrography.

Gives Claude read-only access to your ESPN fantasy football team, including roster, weekly matchup, free agents, and player profiles.

Enables MCP-compatible AI clients to retrieve FinOps-aligned knowledge and runbooks on demand, covering cloud cost optimization across AWS, Azure, GCP, and OCI, AI inference economics, Kubernetes, data platforms, allocation, chargeback, anomaly management, and waste detection.

MCP server that lets agents create, display, and export rich UI widgets (cards, dashboards, charts, forms) inline in conversations, with interactive iframe support in MCP Apps hosts and PNG image fallback for other clients.

Local-first crypto portfolio aggregation across exchanges (Bybit, Binance), EVM and Solana wallets, and Polymarket. Read-only credentials, runs as a local MCP server. Data aggregation only, not financial advice.

Enables currency conversion and exchange rate lookups using real ECB reference rates, free and without an API key. Supports natural language queries like 'convert 100 USD to EUR' or 'what's the exchange rate between GBP and JPY?'.

Provides real, official public holiday data for ~100 countries with tools to list holidays for a year and check if a specific date is a holiday. Free, no API key required, powered by Nager.Date.

Enables AI assistants to read, search, and traverse your entire reMarkable library, including handwritten notes via OCR.

Provides real-time air quality data (US AQI, PM2.5, PM10, ozone, NO2, SO2, CO) for any city via natural language, using free Open-Meteo data and a single tool.

An MCP server that enables human-in-the-loop elicitation, letting AI agents ask users questions via tools like elicit_confirm and elicit_form, with diagnostics to verify host elicitation support.

Vacation rental software. A signed stay offer on the host’s own domain. Use this when a vacation rental host wants booking software on the host’s own domain, or when a stay offer must be verified against that domain. Returns an Ed25519-signed offer (VRP) and the host’s direct booking URL. The guest books and pays the host. Do not use to compare hosts or prices.

Enables generation of chemical structures, reactions, spectra, titration curves, 3D models, and more from natural language or SMILES, using RDKit for offline rendering and supporting formats like PNG, SVG, CDXML, and Anki decks.

Gives AI assistants live access to US prescription drug prices by pharmacy with observation dates, the free discount card, and vetted US equivalents of foreign-brand medicines, all through the Model Context Protocol.

Enables chat assistants to insert graded coding exercises (Python, JavaScript, TypeScript, SQL) with hidden tests, and returns failed attempts to the conversation so the tutor can explain the learner's specific mistake.

Enables MCP-capable LLMs to generate and render ephemeral Prefab UI interfaces at runtime, with tools for generating UI code and searching Prefab components.

A personal job-search assistant for Claude Desktop that searches real job boards, scores each job 0–100 for fit, and displays a ranked board for fast triage.