"A search for development-related topics or tools" matching MCP servers:

Community MCP server for the Cymulate security validation platform. It exposes the full Cymulate REST API (337 endpoints) as 106 semantic tools for BAS, exposure validation, attack surface management, and platform administration.

Enables guardrail and trust testing by exposing realistic malicious tool patterns such as shell execution, credential dumping, and data exfiltration, all without network access.

Enables AI agents to run passive, boundary, and gated active reconnaissance and web-security CLI tools (nmap, sqlmap, commix, httpx, ffuf, nikto, subfinder, and more) against authorized targets through a persistent, API-key-protected HTTP service. Scope gates, authorization windows, evidence capture, and a full audit trail are enforced in code so every tool call stays within the engagement's declared rules.

GDB Enhanced Features MCP server for remote debugging and CTF exploitation with 41 specialized tools including ROP search, format-string detection, and memory patching.

Enables MCP clients to invoke common Kali Linux pentesting tools directly as tool calls, with each binary executed safely without a shell.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.

Integrates 7 security tools (nmap, nuclei, dirsearch, sqlmap, hydra, Acunetix, Metasploit) via MCP protocol for AI-assisted penetration testing with enterprise-grade safety features.

Enables Claude Code to leverage OpenAI models for expert code review, deep architecture analysis, and security audits, with automatic markdown report generation.

Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and 10 MCP tools for CVE query, keyword search, batch query, EPSS scoring, KEV checking, exploit search, and comprehensive assessment with Chinese output.

Provides security tools (prompt injection detection, CVE lookup, version impact assessment) for MCP clients like Claude.

An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.

An MCP server that integrates multiple security and reconnaissance tools (Nmap, Cariddi, ParamSpider, Metasploit, web scraping) for AI systems, enabling automated network scanning, API discovery, vulnerability testing, and remote access via ngrok.

A production-ready HTTP API server for security testing and reconnaissance, integrating nmap, cariddi, paramspider, metasploit, and web scraping via FastAPI. It supports optional ngrok tunneling and exposes tools through REST endpoints.

Enables querying vulnerability data such as vendors, products, product-related CVEs, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and current database update information.

Enables querying the CVE-Search API to browse vendors, list products for a vendor, retrieve vulnerabilities for a vendor and product, fetch individual CVE records, get the latest CVEs with CAPEC/CWE/CPE expansions, and inspect current database version information. This gives MCP clients direct, structured access to public vulnerability data.

Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities for a vendor/product pair, look up individual CVE IDs, and fetch the latest 30 CVEs with CAPEC, CWE and CPE expansions. It also reports which databases are in use and when they were last updated.

Exposes a hardened Docker container with Kali Linux security tools (nmap, sqlmap, dig, whois, etc.) as MCP tools, enabling network reconnaissance, web analysis, and vulnerability scanning through natural language commands.

Enables users to query a vulnerability database for vendors, products, vulnerabilities by product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and database update information.

Enables users to query the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, list recent CVEs with CAPEC, CWE, and CPE expansions, and inspect database status.

Enables users to browse vendors and products, retrieve CVEs by ID, fetch the latest updated CVEs with CAPEC/CWE/CPE expansions, and inspect database update information via the CVE-Search API.

Enables users to browse vendors and their associated products, look up vulnerabilities by vendor/product or specific CVE ID, retrieve the latest CVEs with CAPEC, CWE and CPE expansions, and inspect current database information and update times.

Enables querying the CVE-Search API to browse vendors and products, retrieve vulnerabilities by vendor/product or CVE ID, fetch the latest updated CVEs with CAPEC/CWE/CPE expansions, and check current database information. It provides these capabilities through MCP tools for use in compatible clients.

Enables users to query vulnerability data, browse vendors and products, retrieve CVEs by ID or product, fetch recent CVEs with CAPEC/CWE/CPE details, and inspect database status.

Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.

Enables users to query the CVE-Search API by browsing vendors and products, retrieving vulnerabilities per vendor/product or CVE-ID, getting the latest 30 CVEs with CAPEC/CWE/CPE expansions, and checking database update information.

Enables querying the CVE-Search API to browse vendors and their products, retrieve vulnerabilities per vendor/product, fetch individual CVE details, and list the latest CVEs with CAPEC, CWE, and CPE expansions. Also exposes current database information and update timestamps for tracking vulnerability data freshness.

Enables querying the CVE-Search API to browse vendors and their products, look up vulnerabilities by vendor/product or CVE ID, and retrieve the latest CVEs with CAPEC, CWE, and CPE expansions. It also reports which databases are in use and when they were last updated.

Enables querying the CVE-Search API for vendors, products, vulnerabilities by vendor and product, specific CVE IDs, recent CVEs with CAPEC/CWE/CPE expansions, and current database metadata.

Enables querying the CVE-Search API for vendors, products, and vulnerabilities, including lookups by vendor/product, retrieval of individual CVE IDs, and the latest 30 CVEs with CAPEC, CWE, and CPE expansions, plus database status information.