"A Kali Linux expert for security testing and vulnerability assessment" matching MCP servers:

Code-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.

MCP server that studies a folder of code repositories, generates markdown documentation (architecture, interfaces, activity), and serves answers over MCP with live ripgrep search and file reads so AI assistants can query codebases and their relationships.

Indexes commit history to create a queryable expert, providing insights into code evolution, developer intent, and hidden patterns beyond static code analysis.

Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.

An accessibility expert MCP server that provides AI coding assistants with real-time access to WAI-ARIA patterns, code review, contrast checking, and WCAG guidance for writing accessible code from the start.

MCP server that enables AI agents to read, edit, and create PLC projects in EcoStruxure Control Expert via COM automation.

Automates project scaffolding for Domain-Driven Design and Clean Architecture, providing professional naming, structure verification, and bilingual documentation generation.

MCP server that provides a 216-rule, framework-aware Kotlin/JVM security analyzer, enabling AI coding agents to query real security findings while writing code.

14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.

Analyzes codebases from local directories, GitHub, and Azure DevOps, providing intelligent context to AI coding assistants through repository structure, critical files, and semantic maps.

Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.

An MCP server that enables AI assistants to analyze Android APK and iOS IPA files for security issues through natural language conversation, including permission auditing, secret detection, and SDK enumeration.

Enables comprehensive security scanning of code projects, detecting vulnerabilities in dependencies, code patterns (XSS, eval, etc.), and exposed secrets, with detailed reports in Spanish prioritized by severity.

A lightweight MCP server for security reviews that injects security requirements before code generation, scans dependencies for CVEs, and verifies generated code without disrupting workflow.

Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.

Fetches GitHub Code Scanning alerts and applies minimal local patches to fix vulnerabilities, without creating branches, commits, or PRs.

Multi-language SAST and AI-powered fuzzing MCP server for Claude Code integration, enabling static and dynamic security analysis of code.

Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.

Official Model Context Protocol server exposing static AST security tools (audit_mcp_repository, audit_local_directory) to scan MCP tools for vulnerabilities before connecting them to Claude or Cursor.

An MCP server that provides CVE-driven security prompts for code review, enabling coding agents to get actionable security checks based on real vulnerabilities.

Zero-execution static AST security scanner and vulnerability auditor for MCP servers. Detects Command Injection (CWE-78), Path Traversal (CWE-22), Hardcoded Secrets (CWE-798), and Unauthenticated Transports (CWE-306).

Enables security researchers and developers to run Kali Linux tools such as Nmap, nm, objdump, strings, and tshark through an MCP client, supporting network scanning, binary and symbol analysis, string extraction, traffic capture, and isolated Docker-based command execution.

Enables running Kali Linux security tools through an MCP client, including Nmap network scanning, nm symbol analysis, objdump binary disassembly, strings extraction, and tshark traffic capture. It also provides a Docker-based sandbox for isolated command execution with configurable resource limits and file copying.

Enables running Kali Linux security tooling through MCP, including Nmap network scanning, nm symbol analysis, objdump disassembly, strings extraction, and tshark traffic capture and pcap analysis. Also supports executing commands in an isolated Docker sandbox with configurable resource limits and bidirectional file copying.

Governed development control plane for VedaOps projects, letting authorized agents inspect, search, patch, test, lint, and coordinate registered software without exposing a general shell.

Enables MCP clients to run Kali Linux security tools for network scanning, binary and symbol analysis, string extraction, live traffic capture, and Docker-sandboxed command execution.

MCP server for static security analysis of Android application source code.

Enables MCP clients to invoke Kali Linux security utilities for network scanning, symbol and binary inspection, string extraction, live and pcap traffic analysis, and isolated command execution. It supports workflows such as Nmap scans, objdump disassembly, nm symbol listing, strings extraction, and tshark traffic inspection.

Enables security testing and reverse engineering through MCP clients by providing Kali Linux tools for network scanning, binary and symbol analysis, string extraction, packet capture/analysis, and sandboxed Docker command execution.

Enables users to run Kali Linux security tools such as Nmap, nm, objdump, strings, and tshark through MCP clients for network scanning, binary analysis, and traffic capture, with Docker sandbox support for isolated command execution.