Skip to main content
Glama
21,302 servers. Last updated

MCP tools

MCP Connectors

Popular MCP Servers

  • operant-mcp by operantlabs

    operant-mcpofficial

    operantlabs
    A
    security
    A
    license
    -
    quality
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    Last updated
    51
    149
    3
    MIT

  • ThreatByte-MCP

    anotherik
    A
    security
    A
    license
    -
    quality
    An intentionally vulnerable case management system designed for security training that provides MCP tools for SOC analyst workflows like case handling and indicator search. It enables users to explore and demonstrate common security weaknesses such as prompt injection, SQL injection, and broken authorization in an MCP-integrated environment.
    Last updated
    22
    MIT

  • Shodan MCP Server

    GangGreenTemperTatum
    A
    security
    A
    license
    -
    quality
    Enables comprehensive security reconnaissance, vulnerability assessment, and threat intelligence gathering by integrating Shodan's API. It provides tools for searching internet-connected devices, performing DNS operations, and querying the Shodan exploit database.
    Last updated
    11
    Apache 2.0
    • Apple
    • Linux

  • kali-mcp

    Hannes221
    A
    security
    A
    license
    -
    quality
    Provides an MCP interface to a full Kali Linux environment running in Docker, enabling AI assistants to execute security tools like nmap, sqlmap, and metasploit. It allows users to start/stop the container, run shell commands, and transfer files for security testing and educational purposes.
    Last updated
    7
    10
    3
    MIT

  • MCP Interactsh Bridge

    tachote
    A
    security
    A
    license
    -
    quality
    Enables out-of-band interaction testing by integrating ProjectDiscovery's interactsh service as an MCP server. Allows AI agents to create callback domains, send probes, and capture DNS/HTTP interactions for security testing and verification workflows.
    Last updated
    4
    27
    2
    MIT

  • VulneraMCP

    telmon95
    A
    security
    A
    license
    -
    quality
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    Last updated
    47
    26
    MIT

  • CyberMCP

    ricauts
    A
    security
    A
    license
    -
    quality
    A Model Context Protocol server designed for testing backend APIs for security vulnerabilities like authentication bypass, injection attacks, and data leakage.
    Last updated
    14
    15
    MIT

  • Pentest MCP

    DMontgomery40
    A
    security
    A
    license
    -
    quality
    A Model Context Protocol server that integrates essential penetration testing tools (Nmap, Gobuster, Nikto, John the Ripper) into a unified natural language interface, allowing security professionals to execute and chain multiple tools through conversational commands.
    Last updated
    9
    82
    130
    MIT
    • Linux
    • Apple

  • osint-mcp-server

    badchars
    A
    security
    A
    license
    -
    quality
    Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
    Last updated
    37
    44
    10
    MIT
    • Apple
    • Linux

  • frida-mcp

    cbxss
    A
    security
    A
    license
    -
    quality
    An MCP server that enables AI-assisted mobile security testing by exposing Frida functionality for Android application research. It provides tools for hooking Java methods, manipulating memory, managing device processes, and executing custom Frida scripts.
    Last updated
    37
    8
    MIT

  • BLT-MCP

    OWASP-BLT
    A
    security
    A
    license
    -
    quality
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    Last updated
    4
    9
    AGPL 3.0

  • PentestMCP

    YoussefSahnoun
    A
    security
    A
    license
    -
    quality
    Enables LLMs to perform Active Directory penetration testing using tools like NetExec, Bloodhound, Nmap, Certipy, and John the Ripper. Automates vulnerability discovery, attack path analysis, and documentation generation for security assessments.
    Last updated
    26
    5
    MIT
    • Linux

  • OSINT MCP Server

    Krisparenthetic284
    -
    security
    A
    license
    -
    quality
    A comprehensive reconnaissance toolset that provides AI agents with 37 tools across 12 data sources like Shodan and VirusTotal for automated intelligence gathering. It enables agents to perform domain reconnaissance, attack surface mapping, and cross-platform data correlation within a single conversational interface.
    Last updated
    44
    1
    MIT
    • Apple
    • Linux

  • Burp Suite MCP Server

    jayluxferro
    A
    security
    F
    license
    -
    quality
    Exposes Burp Suite's REST API to AI assistants, enabling users to trigger vulnerability scans, monitor progress, and manage security tasks through natural language. It also provides programmatic access to Burp's security knowledge base for querying vulnerability definitions and remediation advice.
    Last updated
    8
    1

  • Nmap MCP Server

    flagify-com
    -
    security
    A
    license
    -
    quality
    Enables network security scanning using Nmap through MCP protocol. Supports quick port scans, full port scans with service detection, and custom Nmap commands with async task management.
    Last updated
    2
    MIT

  • Bug Bounty MCP Server

    SlanyCukr
    A
    security
    F
    license
    -
    quality
    Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.
    Last updated
    40
    2

  • HydraΜCP

    HappyHackingSpace
    -
    security
    A
    license
    -
    quality
    A lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis.
    Last updated
    11
    MIT

  • MCPPentestBOT

    kannanprabu
    -
    security
    A
    license
    -
    quality
    Enables AI assistants to perform authorized security testing and penetration testing operations including SSL/TLS analysis, port scanning, vulnerability scanning, and HTTP security header audits through natural language interactions.
    Last updated
    1
    MIT
    • Linux
    • Apple

  • Kali MCP Server

    azza39925
    A
    security
    F
    license
    -
    quality
    Enables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.
    Last updated
    19
    • Linux

  • MCP Shamash

    NeoTecDigital
    A
    security
    F
    license
    -
    quality
    Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.
    Last updated
    7

  • HackerMCP

    R3verseIN
    -
    security
    A
    license
    -
    quality
    A module that enables AI assistants to access and utilize common penetration testing and security tools like Nmap and Metasploit through a simple interface.
    Last updated
    4
    GPL 3.0

  • BloodyAD MCP

    dcollaoa
    -
    security
    A
    license
    -
    quality
    Enables Active Directory enumeration and abuse operations through the bloodyAD tool. Supports LDAP queries, user/group management, DNS operations, and security testing directly from AI assistants.
    Last updated
    16
    MIT
    • Linux
    • Apple

  • Kali MCP Server

    letchupkt
    -
    security
    A
    license
    -
    quality
    Enables AI assistants to execute penetration testing commands and security tools on Kali Linux remotely. Supports automated reconnaissance, vulnerability scanning, and CTF solving through integration with 25+ offensive security tools like nmap, gobuster, and nuclei.
    Last updated
    16
    MIT
    • Linux

  • CTF MCP Server

    zemi-gh
    -
    security
    A
    license
    -
    quality
    Exposes common CTF and cybersecurity tools (crypto, forensics, malware analysis, steganography, reverse engineering, pwn, OSINT) so LLMs can help solve capture-the-flag challenges in a controlled lab environment.
    Last updated
    MIT
    • Linux

  • Endevor-MCP

    gglessner
    -
    security
    A
    license
    -
    quality
    A Model Context Protocol server providing 43 tools for Broadcom Endevor SCM interaction, enabling inventory browsing, element lifecycle management, and package workflows. It is designed for AI-driven mainframe operations and surgical, source-informed penetration testing of CICS applications.
    Last updated
    GPL 3.0

  • ZAP MCP Server

    LisBerndt
    -
    security
    A
    license
    -
    quality
    Integrates OWASP ZAP security testing with AI assistants through MCP, enabling automated vulnerability scanning and AI-powered security analysis during development. Supports multiple scan types including active, passive, and AJAX spider scans with real-time status updates.
    Last updated
    5
    MIT
    • Linux
    • Apple

  • MCP-PST-Server

    arch3rPro
    -
    security
    A
    license
    -
    quality
    Enables AI-assisted penetration testing by connecting MCP clients to a Windows API server for executing penetration testing tools like nmap, ffuf, nuclei, and other security tools. Allows AI agents to perform automated security assessments, solve CTF challenges, and assist with ethical hacking tasks through natural language commands.
    Last updated
    10
    MIT