"An overview of penetration testing (pentest)" matching MCP servers:

Enables agents to store, search, and manage a personal penetration testing knowledge base via MCP, using BM25-ranked retrieval with Chinese tokenization, plus draft approval, deduplication, and sensitive-data redaction workflows.

Enables accessibility testing of websites and HTML content using axe-core and IBM Equal Access engines. Supports WCAG compliance checking, multi-viewport testing, and provides detailed violation reports with remediation guidance.

Publishes a spending-summary tool alongside an interactive HTML view, letting people click a category in the answer to fetch the individual expense records behind that total. Keeps calculations and their supporting evidence together in a single inspectable flow.

Provides MCP tools to search, retrieve, and answer questions from the public Open Finance Brasil Confluence documentation using BM25-based local indexing.

Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.

Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.

Enables AI agents to debug and repair historical Solaris/SPARC systems by providing an out-of-band control plane with guest DTrace, QEMU monitor access, SPARC-aware GDB, host eBPF/perf tracing, and an immutable evidence ledger for cross-layer hypothesis testing.

Per-unit cost of 13 back-office tasks done by a person vs by software, in the US, Greece and Ukraine, with an official statistic behind every hourly wage. Bundled data, works offline.

Enables building client statements of account from existing invoices, credit notes, and deposits, with aged outstanding balances, PDF/plain-text output, and drafted payment chasers at friendly, firm, or final levels.

Enables AI assistants and developers to analyze code for language-specific best practices and idiomatic patterns across programming languages, CI automation, and configuration formats.

Runs 20 slash-command workflows across Google Calendar, Gmail, Linear, Slack, Granola, Google Docs, GitHub, Stripe, Notion, Google Forms, Sheets and Drive to produce morning briefs, meeting prep, action items assigned to owners and weekly updates. Reads proceed without asking, while anything that creates, sends, changes or deletes is shown for approval first.

An MCP server that uses Groq's API to expose raw chain-of-thought tokens from Qwen's qwq model, enabling LLMs to think step-by-step before responding.

Enables controlled, evidence-first web application penetration testing and bug bounty workflows, including scope enforcement, reconnaissance, human-approved surface triage, OWASP WSTG test execution, and SHA-256 evidence capture.

MIT ABS sister MCP — same five tools, citations. Pair with the ausdata gateway for joins and Embed.

One-call Australian economic data plumbing via the RBA — cited responses for rates and macro series, not a data broker.

An MCP server for managing contextual data as markdown files with metadata, enabling agents to save, retrieve, search, and delete contexts using simple CRUD operations.

A read-only MCP server for bounded table discovery, deterministic profiling, and maintained-library statistical testing (Welch's t-test and two-proportion z-test) using SQLite, pandas, SciPy, and statsmodels.

A specialized MCP server for QA engineering. It provides tools for user story analysis, test strategy, BDD/Gherkin scenarios, contract testing, integration tests, performance plans, security checklists, and CI/CD pipeline generation, accessible from any MCP-compatible IDE or client.

Read-only MCP server for precise lookup, search, and versioned retrieval of OWASP testing guides (WSTG, MASTG, ISTG, AITG) with full provenance on every result.

Provides MCP tools to create and query SigNoz trace funnels, enabling agents to measure their own step conversion rates from within the agent loop.