Skip to main content
Glama
21,838 servers. Last updated

MCP tools

MCP Connectors

Popular MCP Servers

  • operant-mcp by operantlabs

    operant-mcpofficial

    operantlabs
    A
    security
    A
    license
    A
    quality
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    Last updated
    51
    32
    7
    MIT
  • Sekrd Security Scanner by sekrdcom

    Sekrd Security Scannerofficial

    sekrdcom
    A
    security
    F
    license
    A
    quality
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    Last updated
    3

  • ThreatByte-MCP

    anotherik
    A
    security
    A
    license
    B
    quality
    An intentionally vulnerable case management system designed for security training that provides MCP tools for SOC analyst workflows like case handling and indicator search. It enables users to explore and demonstrate common security weaknesses such as prompt injection, SQL injection, and broken authorization in an MCP-integrated environment.
    Last updated
    22
    MIT

  • osint-mcp-server

    badchars
    A
    security
    A
    license
    B
    quality
    Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
    Last updated
    37
    169
    15
    MIT
    • Apple
    • Linux

  • MCP Interactsh Bridge

    tachote
    A
    security
    A
    license
    A
    quality
    Enables out-of-band interaction testing by integrating ProjectDiscovery's interactsh service as an MCP server. Allows AI agents to create callback domains, send probes, and capture DNS/HTTP interactions for security testing and verification workflows.
    Last updated
    4
    29
    2
    MIT

  • frida-mcp

    cbxss
    A
    security
    A
    license
    B
    quality
    An MCP server that enables AI-assisted mobile security testing by exposing Frida functionality for Android application research. It provides tools for hooking Java methods, manipulating memory, managing device processes, and executing custom Frida scripts.
    Last updated
    37
    10
    MIT

  • kali-mcp

    Hannes221
    A
    security
    A
    license
    A
    quality
    Provides an MCP interface to a full Kali Linux environment running in Docker, enabling AI assistants to execute security tools like nmap, sqlmap, and metasploit. It allows users to start/stop the container, run shell commands, and transfer files for security testing and educational purposes.
    Last updated
    7
    6
    3
    MIT

  • Shodan MCP Server

    GangGreenTemperTatum
    A
    security
    A
    license
    A
    quality
    Enables comprehensive security reconnaissance, vulnerability assessment, and threat intelligence gathering by integrating Shodan's API. It provides tools for searching internet-connected devices, performing DNS operations, and querying the Shodan exploit database.
    Last updated
    11
    Apache 2.0
    • Apple
    • Linux

  • BLT-MCP

    OWASP-BLT
    A
    security
    A
    license
    B
    quality
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    Last updated
    4
    9
    AGPL 3.0

  • VulneraMCP

    telmon95
    A
    security
    A
    license
    B
    quality
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    Last updated
    47
    27
    MIT

  • APVISO MCP Server

    Apviso
    A
    security
    F
    license
    A
    quality
    Enables interaction with the APVISO AI-powered penetration testing platform to manage targets, initiate scans, and retrieve vulnerability findings. It allows developers to integrate security testing workflows directly into MCP-compatible tools like Claude Code and Cursor.
    Last updated
    18
    14

  • MCP Shamash

    NeoTecDigital
    A
    security
    F
    license
    B
    quality
    Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.
    Last updated
    7

  • PentestMCP

    YoussefSahnoun
    A
    security
    A
    license
    C
    quality
    Enables LLMs to perform Active Directory penetration testing using tools like NetExec, Bloodhound, Nmap, Certipy, and John the Ripper. Automates vulnerability discovery, attack path analysis, and documentation generation for security assessments.
    Last updated
    26
    5
    MIT
    • Linux

  • Pentest MCP

    DMontgomery40
    A
    security
    A
    license
    D
    quality
    A Model Context Protocol server that integrates essential penetration testing tools (Nmap, Gobuster, Nikto, John the Ripper) into a unified natural language interface, allowing security professionals to execute and chain multiple tools through conversational commands.
    Last updated
    9
    69
    132
    MIT
    • Linux
    • Apple

  • Burp Suite MCP Server

    jayluxferro
    A
    security
    F
    license
    A
    quality
    Exposes Burp Suite's REST API to AI assistants, enabling users to trigger vulnerability scans, monitor progress, and manage security tasks through natural language. It also provides programmatic access to Burp's security knowledge base for querying vulnerability definitions and remediation advice.
    Last updated
    8
    1

  • Kali MCP Server

    azza39925
    A
    security
    F
    license
    A
    quality
    Enables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.
    Last updated
    19
    • Linux

  • CyberMCP

    ricauts
    A
    security
    A
    license
    C
    quality
    A Model Context Protocol server designed for testing backend APIs for security vulnerabilities like authentication bypass, injection attacks, and data leakage.
    Last updated
    14
    15
    MIT

  • BloodyAD MCP

    dcollaoa
    -
    security
    A
    license
    -
    quality
    Enables Active Directory enumeration and abuse operations through the bloodyAD tool. Supports LDAP queries, user/group management, DNS operations, and security testing directly from AI assistants.
    Last updated
    16
    MIT
    • Linux
    • Apple

  • MCPPentestBOT

    kannanprabu
    -
    security
    A
    license
    -
    quality
    Enables AI assistants to perform authorized security testing and penetration testing operations including SSL/TLS analysis, port scanning, vulnerability scanning, and HTTP security header audits through natural language interactions.
    Last updated
    1
    MIT
    • Linux
    • Apple

  • Nmap MCP Server

    flagify-com
    -
    security
    A
    license
    -
    quality
    Enables network security scanning using Nmap through MCP protocol. Supports quick port scans, full port scans with service detection, and custom Nmap commands with async task management.
    Last updated
    2
    MIT

  • reptor-mcp

    slvnlrt
    -
    security
    A
    license
    -
    quality
    An MCP server that exposes the pentest reporting and automation features of SysReptor as programmable tools for AI agents and automated workflows. It enables users to manage findings, projects, and templates through a standardized interface by wrapping the reptor CLI.
    Last updated
    6
    MIT
    • Linux
    • Apple

  • BBOT MCP Server

    marlinkcyber
    -
    security
    A
    license
    -
    quality
    Enables users to run and manage BBOT security scans through the MCP interface. Provides comprehensive tools for executing reconnaissance scans, monitoring progress, and retrieving results with support for concurrent scanning operations.
    Last updated
    2
    MIT

  • ExploitDB MCP Server

    Cyreslab-AI
    -
    security
    A
    license
    -
    quality
    A Model Context Protocol server that enables AI assistants to search and retrieve information about security exploits and vulnerabilities from the Exploit Database, enhancing cybersecurity research capabilities.
    Last updated
    19
    MIT
    • Linux
    • Apple

  • CTF MCP Server

    zemi-gh
    -
    security
    A
    license
    -
    quality
    Exposes common CTF and cybersecurity tools (crypto, forensics, malware analysis, steganography, reverse engineering, pwn, OSINT) so LLMs can help solve capture-the-flag challenges in a controlled lab environment.
    Last updated
    MIT
    • Linux

  • Kali Linux MCP Server

    ofryma
    -
    security
    A
    license
    -
    quality
    Enables AI assistants to perform penetration testing and security assessments by exposing 60+ Kali Linux security tools including network scanning, web security testing, password cracking, exploitation frameworks, and OSINT capabilities through an AI-friendly interface.
    Last updated
    2
    MIT
    • Linux

  • Endevor-MCP

    gglessner
    -
    security
    A
    license
    -
    quality
    A Model Context Protocol server providing 43 tools for Broadcom Endevor SCM interaction, enabling inventory browsing, element lifecycle management, and package workflows. It is designed for AI-driven mainframe operations and surgical, source-informed penetration testing of CICS applications.
    Last updated

  • Kali MCP Server

    letchupkt
    -
    security
    A
    license
    -
    quality
    Enables AI assistants to execute penetration testing commands and security tools on Kali Linux remotely. Supports automated reconnaissance, vulnerability scanning, and CTF solving through integration with 25+ offensive security tools like nmap, gobuster, and nuclei.
    Last updated
    16
    MIT
    • Linux