"Website penetration testing and security vulnerability assessment tools" matching MCP servers:

A Model Context Protocol (MCP) server that provides testing and debugging tools for Stripe integrations, including test clock management, customer and product management, and subscription testing.

An MCP server over stdio that exposes strictly validated tools, using Pydantic models as both schema and validator and returning -32602 for invalid arguments.

MCP server for testing GitHub Actions workflows locally using nektos/act.

A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.

Enables automated testing and coverage reporting for MCP services with test execution, file generation, and mock service creation. Provides comprehensive testing infrastructure including Jest integration, coverage reports, and health checks for the MCP ecosystem.

MCP server that enables AI agents to programmatically run tests, query results, and receive intelligent recommendations about test execution strategy.

MCP server that provides a 216-rule, framework-aware Kotlin/JVM security analyzer, enabling AI coding agents to query real security findings while writing code.

An MCP server for automated website generation that transforms Excel spreadsheets and structured data into responsive portfolios, catalogs, and directories. It enables users to create complete websites, add pages, and generate components through natural language and template-based integration.

This server performs a comprehensive analysis of a website by fetching its HTML and scoring it across five categories: performance, SEO, design, functionality, and technology. It enables users to identify technical strengths and weaknesses in a webpage's structure and health.

A multi-language testing automation server that enables AI assistants to discover, plan, and execute tests across six major programming languages. It provides comprehensive tools for repository scanning, automated test execution, and detailed coverage reporting.

MCP server providing a searchable security knowledge base for AI coding assistants, enabling retrieval of secure-coding instructions and feature-specific security guidance.

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

Search and pull 620+ React and Tailwind sections into your project over MCP.

A starter TypeScript template for building MCP and ChatGPT Apps using the Skybridge framework, enabling rapid development and deployment of MCP servers.

Enables AI agents to submit npm, PyPI, Go, or Maven packages and manifests to the free OSV.dev database and receive per-package and per-advisory results with CVE mappings, CVSS scores, severities, and the versions that fix each issue. It also supports filtering by minimum severity, de-duplicating alias advisories, and machine-readable error/warning rows for CI gates and upgrade recommendations.

Relays a result screenshot to Slack so you can review a coding agent's output without opening the app.

MCP server that exposes tools to route natural language queries to typed IDs, describe catalog entries, and list repository verification commands for the m-dev-tools organization.

Enables coding agents to read and modify GitHub issues, project boards, pull requests, repositories, releases, and Actions through configurable toolsets, with read-only and write-confirmation controls.

Webhook management and testing tools for AI agents. Provides tools for sending, validating, generating, and debugging webhooks.

Fast, token-efficient web content extraction tool that converts websites to clean Markdown for AI agents, featuring smart caching, content extraction with Mozilla Readability, and polite crawling capabilities.

Enables AI assistants to keep Rojo serving and auto-connected for Roblox Studio projects and to import FBX, OBJ, GLB, or GLTF models through Studio's own 3D Importer on Windows.

Search and resolve MCP server packages on the mpak registry, enabling agents to discover servers, inspect tools, and check credential requirements before installation.

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

Lets an MCP client triage a local project for leaked secrets, missing Supabase row-level security, unauthenticated data-changing API routes, insecure browser-exposed environment variables, and other common web-app security mistakes without network access. It returns severity-ordered findings or a plain-English go/no-go summary with what to fix first.

An MCP server providing comprehensive HubSpot CMS development documentation, enabling users to get contextual information about building HubSpot websites through natural language.

A comprehensive suite of HTTP and API testing tools that enables AI agents to perform requests, check endpoint health, and decode JWTs. It also provides utilities for URL parsing and detailed security analysis of HTTP response headers.

MCP server for the Codex Security Cloud service, enabling agents to list, inspect, close, reopen findings, request PRs, and apply generated patches.

Enables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.

Enables MCP clients to research package vulnerabilities, CVE records, known exploitation, exploit probability, and package metadata through seven read-only tools backed by OSV, NVD, CISA KEV, FIRST EPSS, and deps.dev, returning source context and pagination.