Skip to main content
Glama
70,622 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"A guide to investing in managed funds and equities" matching MCP servers:

  • ghosthunt

    78degrees
    A
    license
    A
    quality
    B
    maintenance
    GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.
    4
    45
    MIT

  • mcp-security-scanner

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.
    55
    21
    5
    MIT

  • kali-mcp

    Hannes221
    A
    license
    A
    quality
    D
    maintenance
    Provides an MCP interface to a full Kali Linux environment running in Docker, enabling AI assistants to execute security tools like nmap, sqlmap, and metasploit. It allows users to start/stop the container, run shell commands, and transfer files for security testing and educational purposes.
    7
    9
    3
    MIT

  • osint-mcp-server

    badchars
    A
    license
    A
    quality
    C
    maintenance
    Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
    37
    803
    41
    MIT

  • DefectDojo MCP Server

    jamiesonio
    A
    license
    B
    quality
    D
    maintenance
    Provides a Model Context Protocol server implementation that allows AI agents and other MCP clients to programmatically interact with DefectDojo, a vulnerability management tool, for managing findings, products, and engagements.
    11
    15
    MIT

  • vulnerable-notes-mcp

    rockysec
    A
    license
    C
    quality
    C
    maintenance
    A deliberately vulnerable MCP server for practicing exploitation of tool poisoning, command injection, and path traversal. Includes fixed versions and an agent demo to reproduce the issues in a controlled environment.
    2
    MIT
  • PwnBridge by 1mr0-tech

    PwnBridgeofficial

    1mr0-tech
    A
    license
    -
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    9
    MIT

  • Kali MCP Server

    weirdmachine64
    A
    license
    -
    quality
    D
    maintenance
    Enables running Kali Linux security tools and commands in a containerized environment for semi-automated penetration testing, with background job management and out-of-band interaction detection.
    16
    Apache 2.0

  • MCP-Kali-Server

    lvyimu
    A
    license
    -
    quality
    C
    maintenance
    Enables AI-assisted penetration testing by connecting MCP clients to execute terminal commands on a Kali Linux machine, supporting tools like Nmap, Metasploit, and custom commands.
    MIT
  • Gorgon Scout by Gorgon-Cyber

    Gorgon Scoutofficial

    Gorgon-Cyber
    F
    license
    -
    quality
    A
    maintenance
    Gorgon Scout is a Windows web-application and API security scanner (DAST). This connector exposes it as MCP tools, so your AI assistant can record a target you are authorised to test, run the scan, stream findings, and produce a report. Capture needs no proxy or certificate setup, and it intercepts HTTP/1.1, HTTP/2, and HTTP/3 (QUIC). Works with the free Claude Desktop plan.

  • PocGenius

    rockmelodies
    A
    license
    -
    quality
    D
    maintenance
    Automatically generates pocsuite3-compliant POC (Proof of Concept) code from vulnerability information, with built-in safety features to prevent harmful payloads and ensure secure security testing.
    2
    MIT

  • mem-forensics

    jus1-c
    A
    license
    -
    quality
    C
    maintenance
    Enables AI agents to analyze memory dumps for forensic investigation, leveraging a fast Rust engine and full Volatility3 plugin coverage via the Model Context Protocol.
    1
    MIT

  • Hacking Buddy MCP

    ManuelBerrueta
    A
    license
    -
    quality
    D
    maintenance
    A proof-of-concept tool that integrates AI into security operations, allowing users to perform offensive security tasks like network scanning and reconnaissance through natural language commands to GitHub Copilot.
    5
    Apache 2.0