Skip to main content
Glama
72,442 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"A specific URL to visit" matching MCP servers:

  • web-exposure-mcp

    Perufitlife
    A
    license
    A
    quality
    C
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    10
    1
    MIT

  • CodeInspectus

    Synvoya
    A
    license
    A
    quality
    A
    maintenance
    Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.
    6
    305
    39
    MIT

  • nmap-mcp

    Vorota-ai
    A
    license
    A
    quality
    F
    maintenance
    A production-ready MCP server that wraps Nmap to enable AI agents to perform automated network security assessments, including port scanning, host discovery, service detection, OS fingerprinting, and vulnerability scanning.
    6
    13
    Apache 2.0

  • Bug Bounty MCP Server

    R-s0n
    A
    license
    A
    quality
    F
    maintenance
    Provides Claude Code with access to a comprehensive bug bounty knowledge base including techniques, payloads, wordlists, and real-world reports through 14 tools for searching, retrieving payloads, and assessing report quality.
    14
    16
    GPL 3.0

  • wpscan-mcp

    sjinks
    A
    license
    A
    quality
    C
    maintenance
    Enables querying the WPScan API for WordPress plugin, theme, core vulnerabilities, and specific vulnerability lookups through MCP tools.
    4
    12
    MIT

  • SQL Injection MCP Server

    vivashu27
    F
    license
    A
    quality
    D
    maintenance
    An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.
    13
  • Sekrd Security Scanner by sekrdcom

    Sekrd Security Scannerofficial

    sekrdcom
    F
    license
    A
    quality
    D
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    3

  • ya-frida-mcp

    1shin-7
    A
    license
    A
    quality
    C
    maintenance
    A comprehensive MCP server for Frida dynamic instrumentation, enabling AI agents to manage devices, processes, scripts, memory, and ADB operations.
    39
    24
    MIT

  • MEOK MCP Hardening MCP

    CSOAI-ORG
    A
    license
    B
    quality
    B
    maintenance
    Automated security red-team for any MCP server that scans manifests against OWASP LLM Top 10 and MCP-specific risks, returning a 0-100 hardening score and HMAC-signed report.
    7
    MIT

  • fuzzmind-frida-mcp

    fuzzmind
    A
    license
    C
    quality
    C
    maintenance
    A Frida MCP server for authorized dynamic analysis and application security research, exposing device/session management, script injection, process and memory inspection, and platform-specific workflows.
    100
    2
    MIT
  • Tensorfire by cignal-ai

    Tensorfireofficial

    cignal-ai
    A
    license
    -
    quality
    B
    maintenance
    MCP server for security-testing AI models, exposing garak vulnerability scanning and URL/MCP-endpoint scanning as callable tools. It lets agents probe LLM endpoints for jailbreaks, prompt injection, and data leakage, and classify URLs or screen remote MCP endpoints for prompt-injection payloads.
    1
    GPL 3.0
  • Cybrium MCP Server by cybrium-ai

    Cybrium MCP Serverofficial

    cybrium-ai
    A
    license
    -
    quality
    B
    maintenance
    Provides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.
    159
    Apache 2.0
  • PwnBridge by 1mr0-tech

    PwnBridgeofficial

    1mr0-tech
    A
    license
    -
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    12
    MIT

  • MCP-Kali-Server

    lvyimu
    A
    license
    -
    quality
    C
    maintenance
    Enables AI-assisted penetration testing by connecting MCP clients to execute terminal commands on a Kali Linux machine, supporting tools like Nmap, Metasploit, and custom commands.
    MIT