"OWASP" matching MCP servers:

SDK-free MCP server framework with self-implemented protocol engine (MCP 2026-07-28 + legacy), 19 built-in plugins, OWASP MCP Top 10 security, and zero external dependencies.

A secure-by-default framework for building MCP servers on Azure Entra ID, enforcing OWASP API Security Top 10 controls with authentication, authorization, and rate limiting.

Code review as an MCP server — structured code quality reviews with OWASP security scanning.

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

A Model Context Protocol server that gives AI coding agents 16 tools to secure what they build: install the one-line Nemesis Shield SDK, learn/approve/enforce app protection, put a domain behind a Cloudflare-like edge, guard LLMs (OWASP LLM Top 10), and create + score Omniguard business-logic fraud rules. Runs locally over stdio; the discovery tools work with no account.

Bawbel MCP Server lets any agent scan MCP servers and skill files for security vulnerabilities mid-conversation. Seven tools covering server-card scanning, conformance scoring, rug pull detection, and AVE threat intelligence queries. Powered by the AVE standard with OWASP MCP Top 10 mapping on every finding. Free, Apache 2.0, no API key required.

Enables asynchronous OWASP Dependency-Check vulnerability scanning of allowlisted repositories via three narrow tools for starting scans, checking status, and retrieving structured findings.

An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.

MCP server that audits other MCP servers. Run MCPWatch security scans from inside Claude Code or any MCP-compatible agent with 10 OWASP MCP Top 10 aligned checks and A-F letter grades.

Enables AI coding assistants to scan, review, and explain AI, agent, and MCP security issues, run AISVS verification, and access OWASP-anchored standards controls from the IDE via stdio.

Provides AI agents with access to 284+ development best practices, security guidelines, and coding standards across multiple languages and frameworks including comprehensive Drupal standards and OWASP Top 10 vulnerabilities.