"Security" matching MCP servers:

Standalone MCP server exposing only the security-classified tools from Shade Browser, enabling Brave CDP browser automation across 20 isolated profile slots. Built on FastMCP and Playwright Python.

Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

Enterprise-grade Chrome automation for AI agents with compliance-ready logging, post-quantum encryption, and SIEM integration.

Enables LLMs to perform browser automation tasks including web scraping, taking screenshots, and executing JavaScript using Playwright. It facilitates real-time interaction with web pages and the generation of automated test code.

Enables AI agents to perform security testing on web applications by controlling a Firefox browser with 39 security tools, including injection testing and access control analysis.

Enables LLMs to configure Tencent Cloud resources such as DNSPod DNS records and CVM/Lighthouse security group rules by controlling a locally logged-in Edge browser over CDP, leveraging existing login state without needing API keys or credentials.

Enables running comprehensive website audits from any MCP client, returning actionable plain-language reports covering SEO, accessibility, performance, security, and more.

Read-only MCP server providing AI access to verifiable web, GitHub, and local sources, plus a managed fantasy entity catalog, with strong security and provenance tracking.

Enables pre-launch website checks for link previews, SPA routes, and security headers before sharing URLs.

Give your AI agent a full Chrome workspace. 70 MCP tools powered by nodriver: browsing, forms, screenshots, data extraction, network capture and passive security checks. Reuse logins, run isolated browsers, and choose a fresh tab, favorite URLs or automatic tab restoration. Direct CDP control without ChromeDriver. One-command setup for 15+ clients including Claude, Cursor and Codex.

Adds fdl-mcp-server — published on npm at https://www.npmjs.com/package/fdl-mcp-server Five tools any MCP client can call to analyze small business websites: * audit_website — deterministic 5-pillar scorecard (Performance, SEO, Mobile, Security, AEO) with a 0–100 score and specific findings * compare_websites — side-by-side scorecard of two sites with a winner * ai_visibility_check —

This server allows users to search, read timed subtitles, and sample frames from Bilibili videos. It enables the automated saving of recommended content to a user's watch-later list or favorite folders while maintaining local session security.

Point your coding agent at a URL and get a real-browser QA audit: broken signup/login/checkout flows, JS console errors, missing analytics, consent + security headers, mobile tap targets, and accessibility — returned as machine-verified findings graded A-F.

MCP server + Chrome extension that drive the user's real, logged-in Chrome over a local WebSocket. 59 token-efficient web-dev tools: compact element refs instead of screenshots, server-side table filtering, visual regression, accessibility/SEO/security audits, network mocking. Also runs on ChromeOS/Crostini.

Gives AI agents a browser that bypasses bot detection, a MITM proxy for traffic interception, and a Python sandbox to autonomously write and execute security exploits.

Enables AI assistants to access 50+ developer utility APIs for inspecting SSL, DNS, WHOIS, security headers, redirects, sitemaps, and page speed, converting between JSON, CSV, YAML, XML, Markdown, and HTML/PDF, and generating UUIDs, hashes, passwords, QR codes, and screenshots via natural language.

Runs WCAG accessibility, SEO, performance, and security audits on URLs or raw HTML via SiteLint Auditor. Enables LLM agents to audit web pages and check WCAG criteria through MCP tools.

A read-only web-intelligence server that lets agents fetch pages through a security gate, purify them into bounded Markdown, extract tables as structured rows, and capture screenshots. It exposes exactly three tools with no code-execution surface and re-checks the post-redirect URL against the same SSRF and allowlist verdicts.

Chrome browser JS reverse engineering MCP tool for CTF/Web security, enabling dynamic analysis and restoration of login encryption logic.

Enables Claude Code to control Google Chrome using local Playwright sessions to navigate, click, fill forms, take screenshots, and read pages, with security guards and an audit log.

MCP server that uses a visible Playwright browser to search products and manage an Amazon Business cart, requiring manual login for security, and never finalizes orders.

This MCP server equips AI agents with ten web-data tools for web search, page reading, site crawling, contact and tech-stack detection, company profiling, e-mail/DNS security checks, e-mail validation, package health, and raw Google search. Each call runs Actors on the user's own Apify account, returning trimmed, readable dataset rows.

Provides AI agents with free web tools for converting HTML to Markdown, running EU compliance scans, profiling pages, and checking security headers, with no authentication or dependencies.

Enables LLM-powered browser automation and security testing with features like browser management, network monitoring, DOM manipulation, and captcha handling.

A privacy-focused web search and content extraction MCP server. It integrates SearxNG with fallback to Google scraping, featuring relevance ranking, security-aware search, and rate limiting.

Provides comprehensive website validation across performance, accessibility, SEO, and security dimensions using multiple testing services including WebPageTest, Google PageSpeed Insights, Axe DevTools, Mozilla Observatory, and SSL Labs. Enables automated website health assessments through browser automation and API integrations.

A fork of Playwright MCP that adds PhiShark preflight and browser-deep security checks to block or warn on phishing and high-risk pages.

A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.

A comprehensive web scraping server that transforms web content into clean, agent-ready Markdown with automatic citations and efficient caching. It features a robust suite of tools for metadata extraction, sentiment analysis, SEO auditing, and security scanning while strictly adhering to robots.txt policies.

A community security-research MCP server providing Browser Session and OIDC authentication for Okta workspaces, enabling read-only exploration of Okta organizations and user identity.