Skip to main content
Glama
73,225 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"A framework for web penetration testing" matching MCP servers:

  • Professional Penetration

    AnGrY-Althaf
    F
    license
    -
    quality
    D
    maintenance
    Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.

  • security-framework-mcp

    zer0-kr
    A
    license
    A
    quality
    D
    maintenance
    Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.
    41
    12
    MIT

  • web-exposure-mcp

    Perufitlife
    A
    license
    A
    quality
    C
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    9
    1
    MIT

  • Web Check MCP

    ameobius-ai
    A
    license
    A
    quality
    B
    maintenance
    MCP server that exposes 31 OSINT checks from Lissy93/web-check as tools for website analysis, including SSL, DNS, headers, WHOIS, and security presets. Enables natural-language-driven web recon and health checks.
    8
    MIT

  • gef-mcp-for-ctf

    guaidao2
    F
    license
    -
    quality
    D
    maintenance
    GDB Enhanced Features MCP server for remote debugging and CTF exploitation with 41 specialized tools including ROP search, format-string detection, and memory patching.
    9

  • Mythic MCP

    johanrobbenites
    F
    license
    B
    quality
    B
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12
  • Snyk API & Web MCP Server by snyk

    Snyk API & Web MCP Serverofficial

    snyk
    A
    license
    C
    quality
    A
    maintenance
    Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.
    51
    7
    Apache 2.0
  • operant-mcp by operantlabs

    operant-mcpofficial

    operantlabs
    A
    license
    A
    quality
    F
    maintenance
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    51
    57
    23
    MIT

  • Tengu

    rfunix
    A
    license
    A
    quality
    D
    maintenance
    Turns Claude into a penetration testing copilot with 80 security tools, safety controls, and automatic reporting.
    80
    58
    MIT

  • Reports MCP Server

    izzy0101010101
    F
    license
    A
    quality
    -
    maintenance
    Enables management of penetration testing reports and vulnerabilities through a REST API, supporting CVSS 3.1 scoring, HTML formatting, and secure JWT authentication for comprehensive security assessment documentation.
    9
    3

  • MCP Pentest

    adriyansyah-mf
    A
    license
    C
    quality
    D
    maintenance
    An automated penetration testing framework that enables intelligent security assessments through reconnaissance, vulnerability scanning, and controlled exploitation. Features AI-driven workflow management with comprehensive reporting for authorized security testing.
    27
    9
    7
    BSD 3-Clause

  • Kali MCP Server

    Vasanthadithya-mundrathi
    F
    license
    C
    quality
    D
    maintenance
    Provides access to 20+ Kali Linux penetration testing tools through isolated Docker containers, enabling network scanning, vulnerability assessment, password cracking, web security testing, and forensics through natural language commands.
    26
    1