A
licenseA
qualityB
maintenanceRead-only MCP server for precise lookup, search, and versioned retrieval of OWASP testing guides (WSTG, MASTG, ISTG, AITG) with full provenance on every result.
Last updated
11
Apache 2.0
68,121 servers. Last updated
Search Relevance ↓
Recent Usage ↓
Date Added ↓
Date Updated ↓
Weekly Downloads ↓
GitHub Stars ↓
Recent GitHub Stars ↓
Matching MCP tools:
Matching MCP Connectors:
ai.zairalabs
io.github.foomworks
org.memoryapi
actor.apify.godberry--content-to-social-mcp
"A guide to conducting thorough web-based research" matching MCP servers:
- AlicenseAqualityCmaintenanceAn MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.Last updated2161MIT
Snyk API & Web MCP Serverofficial
AlicenseCqualityAmaintenanceConnects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.Last updated517Apache 2.0- Flicense-qualityBmaintenanceWraps Kali Linux penetration testing tools for authorized security assessments, driven by a local LLM via LM Studio.Last updated
- Flicense-qualityBmaintenanceA local-first MCP attack kit for authorized security research and red teaming, demonstrating exfiltration, agent manipulation, and other abuse patterns via pluggable cases.Last updated
- AlicenseAqualityBmaintenanceEnables AI assistants to search and analyze vulnerabilities and exploits from multiple intelligence sources, including NVD, CISA KEV, ExploitDB, Metasploit, and more, with tools for CVE research, exploit analysis, and report generation.Last updated17MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol (MCP) server for interacting with the Intigriti bug bounty platform's Researcher API. It enables AI assistants to manage bug bounty programs, submissions, and research workflow.Last updated83MIT
- AlicenseAqualityBmaintenanceEnables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.Last updated66632MIT
SecPipeofficial
FlicenseAqualityFmaintenanceEnables AI agents to orchestrate security research workflows by connecting to containerized security tools via MCP, allowing automated vulnerability analysis and pipeline execution.Last updated24803- AlicenseAqualityAmaintenanceSecurity scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.Last updated55165MIT
- AlicenseAqualityFmaintenanceEnables AI assistants to perform web content discovery scans using feroxbuster on a remote system via SSH, with support for recursive scanning, filtering, and background execution.Last updated8MIT
- FlicenseAqualityDmaintenanceAn MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.Last updated13
- AlicenseAqualityDmaintenanceA comprehensive MCP server for web security reconnaissance, providing tools for passive and active information gathering, DNS analysis, network scanning, and web application analysis.Last updated136MIT
- AlicenseAqualityDmaintenanceA Docker-based MCP server that grants AI agents direct access to a comprehensive Kali Linux penetration testing toolkit through an isolated container environment.Last updated10037MIT
- AlicenseAqualityDmaintenanceA comprehensive HTTP client MCP server for security testing, API testing, and web automation that provides full-featured HTTP tools with detailed logging capabilities.Last updated89MIT
- AlicenseBqualityCmaintenanceAn MCP server that enables AI-assisted mobile security testing by exposing Frida functionality for Android application research. It provides tools for hooking Java methods, manipulating memory, managing device processes, and executing custom Frida scripts.Last updated3715MIT
- AlicenseBqualityDmaintenanceProvides access to Shodan API functionality, enabling AI assistants to query information about internet-connected devices for cybersecurity research and threat intelligence.Last updated2347MIT
- FlicenseBqualityDmaintenanceProvides secure access to Kali Linux security tools through containerized execution, enabling network scanning, web application testing, and security assessments.Last updated141
- FlicenseBqualityBmaintenanceA community security-research MCP server providing Browser Session and OIDC authentication for Okta workspaces, enabling read-only exploration of Okta organizations and user identity.Last updated23
- AlicenseBqualityFmaintenanceA security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.Last updated1236922MIT