"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.

Enables security researchers to evaluate AI system defenses against prompt injection attacks through a comprehensive set of test vectors and analysis tools.

Enables natural-language querying and analysis of an e-commerce SQLite database via MCP, with read-only SQL execution, table inspection, and AI-generated answers.

Enables MCP clients such as GitHub Copilot, Codex, Claude... to explore a SQL Server 2017+ database read-only: databases, schemas, tables, views, procedures, functions, indexes and dependency graphs, plus filtered, grouped, sampled and paginated queries capped by row limits.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Enables AI clients to safely query PostgreSQL databases using plain English, with read-only access and built-in SQL safety checks.

Enables read-only SQL Server queries across multiple environments with secure keychain credential storage, catalog exploration, and built-in safety guards against destructive operations.

Provides read-only SQL Server access via MCP tools and a chat interface for natural-language database queries.

A governed SQL gateway that exposes typed tools to AI agents, compiling safe read-only queries from a semantic layer while blocking PII before execution, supporting SQL Server, Postgres, and SQLite.

Automatically scans SQLite databases and generates typed CRUD tools for each table, allowing natural language database interaction without exposing raw SQL.

Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

Formats SQL queries with support for 14 dialects, keyword casing, and tab width.

Enables AI assistants to safely explore and query MySQL, MariaDB, PostgreSQL, SQLite and StarRocks databases through read-only tools for schema listing, table description, schema search, row sampling, query execution, and plan explanation. Enforces least-privilege accounts, engine-level read-only sessions with timeouts, parsed SQL guardrails, and column masking so runaway or unsafe queries are refused.

A read-only MCP server for SQL Server and PostgreSQL that enables exploring and querying databases (schemas, tables, views, procedures, indexes, foreign keys) and running arbitrary SELECT queries.

An MCP server that connects LLMs to SQL databases for development assistance, enabling query execution, schema exploration, and data manipulation while providing safety controls against destructive operations.

WAF for AI agents — block prompt injection before it reaches the LLM.

Enables natural language database interaction with SQLite through JMD documents, allowing CRUD operations and schema management via simple text format.

MCP server that integrates sql-sop SQL linter into LLM clients, enabling linting SQL queries and listing lint rules via chat tools.

A read-only MCP server for browsing and querying SQL Server databases, providing tools to list schemas, tables, describe columns, and execute safe SELECT queries with validated parameters.

MCP server for managing and retrieving reusable SQL templates with semantic search, enabling a workflow of generation, retrieval, and templating.

Enables AI assistants to query SQLite databases using plain language, with strict read-only enforcement and column-level access control to prevent damage or unauthorized data reads.

Provides SQL analysis, linting, and dialect conversion using SQLGlot, enabling validation, transpilation, and extraction of table/column references.

Enables LLM agents to run read-only SQL Server performance diagnostics through Query Store and DMVs, covering regressions, execution plans, parameter sniffing, missing-index impact, and wait statistics across databases.

Enables LLM agents to read PostgreSQL data through a fixed catalog of parameterized, read-only queries, without allowing free-form SQL or access outside bounded inputs.

A local MCP server for read-only SQL Server / MS Fabric queries. It authenticates as the user via Entra ID and runs one server process per tenant.

Enables AI agents to interact with SQL Server databases for debugging and data issue resolution, providing tools for query execution, schema inspection, and diagnostics.

An MCP server that lets Claude query a mock business SQL database in plain language through read-only tools, with server-side guardrails that enforce SELECT-only queries and block access to sensitive payment data.

Enables agents to explore a sample SQLite shop dataset and run read-only SELECT queries through three stdio MCP tools, returning table metadata and capped result sets.

Converts SQL queries between different database dialects using the sqlglot library to ensure cross-system compatibility. It allows users to list supported dialects and transpile SQL code from one syntax to another through the Model Context Protocol.

A read-only MCP server for SQL Server database introspection that enables Claude to explore and query databases via tools like listing objects and executing SELECT queries.