"Resources for security testing, penetration testing, and bug bounty programs" matching MCP servers:

A read-only MCP server for bounded table discovery, deterministic profiling, and maintained-library statistical testing (Welch's t-test and two-proportion z-test) using SQLite, pandas, SciPy, and statsmodels.

Security Graph MCP Server

Enables interaction with Databricks workspaces using On-Behalf-Of authentication to test connectivity, retrieve user information, and perform operations on behalf of authenticated users.

MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.

Search the fastest-growing US horse boarding directory: 6,000 facilities and 3,800 trainers across 48 states, plus boarding price data by state.

Enables AI assistants to interact with Databricks workspaces, running SQL queries, managing jobs, and exploring schemas via the Model Context Protocol.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

MCP server that connects AI assistants to Redash, enabling listing of assets, read-only query execution, dashboard inspection, and alert management through the Redash API.

A safety-gated Python MCP server for Metabase that lets MCP clients and agents inspect Metabase, run governed queries, and create or maintain dashboards, cards/questions, collections, snippets, permissions, and other Metabase assets through the Metabase REST API.

Enables exploring Microsoft Fabric / Power BI workspaces and semantic models, and executing ad-hoc DAX queries.

Enables read-only, time-boxed Postgres queries with SQL validation and PII masking, supporting automated bug triage through Claude.

An MCP server that gives LLM clients access to a SQL Server database and the local filesystem, including file operations and image handling.

Enables AI interaction with Microsoft Access and SQLite databases to perform SQL queries, updates, and data management. It supports importing and exporting data via CSV and Excel files and includes tools for managing human-readable notes about database files.

Provides structured access to OCSF-normalized security data stored in Amazon Security Lake, enabling AI assistants to search for IP addresses, GuardDuty findings, and explore available data sources.

A FastMCP-based server designed for the banking and fintech domains, providing tools for database queries, Git operations, and deployment management. It features a modular architecture with reusable prompt templates and integrated security practices for sensitive data handling.

MCP server demonstrating elicitation for booking appointments and an interactive MCP App for viewing appointments with SQLite persistence.

Enables AI applications to run SQL queries and retrieve results from Oracle Database.

Enables secure access to Oracle databases with fine-grained access control, supporting multiple databases simultaneously with configurable access modes (readonly/readwrite/full) and table-level permissions for safe query execution and data management.

Provides access to MySQL databases with fine-grained access control, supporting multiple databases simultaneously with configurable access modes (readonly, readwrite, full) and table-level permissions using whitelists, blacklists, wildcards, and regex patterns.

A TypeScript-based server to interact with ArangoDB using the Model Context Protocol, enabling database operations and integration with tools like Claude and VSCode extensions for streamlined data management.