"Damn Vulnerable MCP" matching MCP servers:

MCP server for remote machine operations via SSH, providing a single tool to execute any shell command on remote machines with real-time progress streaming.

Intentionally vulnerable Model Context Protocol (MCP) server designed for security research that processes natural language queries through an LLM to execute SQL queries or shell commands without restrictions.

A single-purpose MCP server that lets an AI assistant run commands over SSH on a fixed, pre-configured host only, with an explicit per-call confirmation gate before execution.

A lightweight MCP server that enables AI assistants to execute local development tools and retrieve system status with low latency over stdio or HTTP.

Ephemeral MicroVM-isolated code execution for AI agents. Run Python, Node, or bash — fresh hardware-isolated VM per call, hard-purged after. No state persists between calls.

MCP server for overseer.nvim — gives any MCP-capable coding agent running inside Neovim (Claude Code, Codex, Gemini CLI, opencode) the same visibility and control over tasks the user has: list, run, tail, restart, stop. Agent-started dev servers land in the user's own task list instead of becoming invisible orphaned processes.

interactive-mcp

Interactive, streaming SSH tool for LLM agents that enables spawning long-running remote commands with live line-by-line output, signal handling, stdin input, and SFTP file transfer.

An MCP front-end for AnB. The tool surface is "use-don't-reveal": no tool returns a plaintext secret. Reveal paths require a TTY the server doesn't have, so the no-reveal guarantee is structural, not prompt-based — it holds even against a prompt-injected agent. Runs as a dedicated, narrowly-scoped AnB identity; exec is default-deny (only allowlist rules tagged scope=mcp run); command output

A persistent Python REPL MCP server for AI agents with stateful execution, real timeouts, crash isolation, and an MCP bridge to call other tools in the project.

Enables AI agents on macOS to retrieve current battery levels and charging status for AirPods, iPhone, mice, headphones and speakers tracked by AirBattery, optionally filtering by device or including Nearcast devices. It exposes a single read-only MCP tool over stdio for compatible clients such as Codex and Claude.

Enables LLMs to interact with remote servers via SSH, supporting command execution, file upload/download, and directory listing.

MCP server for managing remote servers via SSH, enabling command execution, file transfer, rsync, tunnels, health checks, backups, and database operations.

Enables AI agents to run WP-CLI commands on WordPress sites, including byte-faithful post and meta copying with checksum verification, over local Docker, Pantheon Terminus, or SSH.

A TypeScript-based server that enables programmatic management of pseudo-terminal sessions. It allows users to spawn, control, and interact with terminal processes in real-time through the Model Context Protocol.

Enables AI assistants to control running Neovim sessions via RPC socket, supporting command execution, state inspection, and LSP actions. Automatically discovers Neovim instances and supports multi-instance management on Linux and macOS.

Provides a set of tools to interact with Tecton clusters, manage feature stores, and execute Tecton CLI commands through the Mission Control Protocol.

A Python MCP server that lets MCP-compatible clients inspect and operate AWS through the AWS CLI, with command execution, suggestions, region lookup, and caller identity checks.

A production-ready MCP server that enables AI assistants to execute shell commands, manage files, monitor system resources, and automate complex workflows with advanced features like stock tracking and web automation.

Enables MCP clients to run Hayabusa detection scans over Windows event log (.evtx) files for forensic analysis and threat hunting.