"A tool for image editing and graphic design" matching MCP servers:

• mcp-tool-poison-guard

  princeruhulofficial

  A

  license

  -

  quality

  B

  maintenance

  MCP server that detects and guards against tool poisoning and prompt injection attacks in tool descriptions and schemas. It provides risk scoring, pattern detection, safe rewriting, and audit reports with zero external API cost.

  Last updated 2026-08-05

  MIT

• gef-mcp-for-ctf

  guaidao2

  F

  license

  -

  quality

  C

  maintenance

  GDB Enhanced Features MCP server for remote debugging and CTF exploitation with 41 specialized tools including ROP search, format-string detection, and memory patching.

  Last updated 2026-07-07

  9

• Burp Suite for AI Agent

  whoismemas

  A

  license

  A

  quality

  B

  maintenance

  Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

  Last updated 2026-07-30

  11

  MIT

• codex-buddy-for-claude

  leo919cc

  A

  license

  -

  quality

  D

  maintenance

  Enables Claude Code to leverage OpenAI models for expert code review, deep architecture analysis, and security audits, with automatic markdown report generation.

  Last updated 2026-03-12

  MIT

• CHAI pentest tool

  NIHAR-SARKAR

  A

  license

  -

  quality

  B

  maintenance

  Cyber Host Artificial Intelligence (C.H.A.I) An autonomous penetration testing MCP (Model Context Protocol) server with an integrated AI decision engine, multi-provider LLM support, and an extensible plugin architecture.

  Last updated 2026-06-29

  8

  MIT

• GhostMap v2

  Samir12218415

  F

  license

  -

  quality

  B

  maintenance

  Exposes AI-augmented network reconnaissance and evasion capabilities as callable FastMCP tools, enabling natural language orchestration of host discovery, service fingerprinting, CVE mapping, and attack chain synthesis.

  Last updated 2026-06-09

  1

• Mythic MCP

  johanrobbenites

  F

  license

  -

  quality

  C

  maintenance

  Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.

  Last updated 2026-08-04

• vibecheck

  ArisRhiannon

  A

  license

  A

  quality

  B

  maintenance

  Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.

  Last updated 2026-06-02

  1

  21

  2

  MIT
• 

  Polygraphofficial

  polygraphso

  A

  license

  A

  quality

  A

  maintenance

  Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.

  Last updated 2026-07-20

  4

  76

  7

  Apache 2.0

• mcp-security-toolkit

  actions-marketplace-validations

  A

  license

  A

  quality

  B

  maintenance

  Provides security audit primitives for MCP servers, agent tool schemas, and system prompts, along with pentest utilities like JWT inspection and HTTP diffing.

  Last updated 2026-08-02

  14

  MIT

• meok-mcp-injection-scan-mcp

  CSOAI-ORG

  A

  license

  A

  quality

  A

  maintenance

  Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

  Last updated 2026-06-19

  5

  MIT

• js-reverse-mcp

  jenn619

  A

  license

  A

  quality

  B

  maintenance

  Chrome browser JS reverse engineering MCP tool for CTF/Web security, enabling dynamic analysis and restoration of login encryption logic.

  Last updated 2026-06-24

  31

  912

  16

  Apache 2.0

• theHarvester MCP Server

  schwarztim

  A

  license

  A

  quality

  F

  maintenance

  Enables AI assistants to perform domain reconnaissance using theHarvester OSINT tool, including email harvesting, subdomain discovery, DNS brute force, and Shodan integration, via SSH on a Kali Linux host.

  Last updated 2026-05-09

  8

  1

  MIT

• Xploit47

  aloc999

  A

  license

  A

  quality

  B

  maintenance

  AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.

  Last updated 2026-07-17

  1

  1

  MIT

• Kali Linux MCP Server

  sfz009900

  F

  license

  A

  quality

  D

  maintenance

  A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.

  Last updated 2025-09-14

  5

  55

• MCP-Shield Pro

  tonysheesh

  F

  license

  A

  quality

  C

  maintenance

  Enterprise-grade zero-dependency security shield and runtime governance engine for MCP servers, providing OWASP MCP Top 10 audits, cryptographic tool call signing, AIBOM generation, and inline parameter firewall protection.

  Last updated 2026-08-01

  3

• MCP Server Pentest

  9olidity

  A

  license

  B

  quality

  F

  maintenance

  A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.

  Last updated 2025-03-24

  12

  369

  22

  MIT

• MCP Object-Authz Lab

  WRG-11

  A

  license

  B

  quality

  B

  maintenance

  A self-hostable, vulnerable-by-design MCP server for learning how object-level authorization bugs (BOLA/IDOR) appear in multi-tenant tools.

  Last updated 2026-08-04

  7

  MIT

• ce-mcp

  IMRX44

  A

  license

  B

  quality

  C

  maintenance

  Enables AI agents to programmatically control Cheat Engine for memory scanning, editing, cheat table management, and reverse engineering tasks.

  Last updated 2026-06-26

  42

  MIT

• DefectDojo MCP Server

  jamiesonio

  A

  license

  B

  quality

  D

  maintenance

  Provides a Model Context Protocol server implementation that allows AI agents and other MCP clients to programmatically interact with DefectDojo, a vulnerability management tool, for managing findings, products, and engagements.

  Last updated 2025-04-01

  11

  15

  MIT