Skip to main content
Glama
72,221 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"A video-sharing website offering user-generated content" matching MCP servers:

  • web-exposure-mcp

    Perufitlife
    A
    license
    A
    quality
    C
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    10
    1
    MIT

  • vibecheck

    ArisRhiannon
    A
    license
    A
    quality
    B
    maintenance
    Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
    1
    6
    2
    MIT
  • Polygraph by polygraphso

    Polygraphofficial

    polygraphso
    A
    license
    A
    quality
    A
    maintenance
    Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.
    4
    157
    7
    Apache 2.0

  • CodeInspectus

    Synvoya
    A
    license
    A
    quality
    A
    maintenance
    Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry.
    6
    305
    39
    MIT

  • Web Check MCP

    ameobius-ai
    A
    license
    A
    quality
    B
    maintenance
    MCP server that exposes 31 OSINT checks from Lissy93/web-check as tools for website analysis, including SSL, DNS, headers, WHOIS, and security presets. Enables natural-language-driven web recon and health checks.
    8
    MIT

  • feroxbuster-mcp

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform web content discovery scans using feroxbuster on a remote system via SSH, with support for recursive scanning, filtering, and background execution.
    8
    MIT

  • Mythic MCP

    johanrobbenites
    F
    license
    B
    quality
    B
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12

  • ctxdebug

    DdUdle
    A
    license
    B
    quality
    A
    maintenance
    MCP server that connects WinDbg, IDA Pro, and x64dbg to AI assistants for reverse engineering and Windows security research, offering 160+ tools for debugging, analysis, and cross-debugger workflows.
    100
    16
    MIT

  • mcp-api-pentest

    josenieto
    A
    license
    B
    quality
    C
    maintenance
    Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.
    11
    MIT
  • PwnBridge by 1mr0-tech

    PwnBridgeofficial

    1mr0-tech
    A
    license
    -
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    12
    MIT
  • Helios by alibaba

    Heliosofficial

    alibaba
    A
    license
    -
    quality
    D
    maintenance
    MCP server that securely reviews AI-generated code for vulnerabilities such as SQL injection, command injection, and hardcoded credentials.
    11
    Apache 2.0

  • dangerous-skills-mcp

    olaservo
    A
    license
    -
    quality
    B
    maintenance
    A TypeScript MCP server delivering a vendored 'dangerous skills' corpus and adversarial fixtures over MCP for security-research testing, supporting SEP-2640 skill delivery with archive-safety hardening.
    2
    MIT

  • Kali MCP Server

    weirdmachine64
    A
    license
    -
    quality
    D
    maintenance
    Enables running Kali Linux security tools and commands in a containerized environment for semi-automated penetration testing, with background job management and out-of-band interaction detection.
    16
    Apache 2.0

  • MCP-Kali-Server

    lvyimu
    A
    license
    -
    quality
    C
    maintenance
    Enables AI-assisted penetration testing by connecting MCP clients to execute terminal commands on a Kali Linux machine, supporting tools like Nmap, Metasploit, and custom commands.
    MIT
  • Gorgon Scout by Gorgon-Cyber

    Gorgon Scoutofficial

    Gorgon-Cyber
    F
    license
    -
    quality
    A
    maintenance
    Gorgon Scout is a Windows web-application and API security scanner (DAST). This connector exposes it as MCP tools, so your AI assistant can record a target you are authorised to test, run the scan, stream findings, and produce a report. Capture needs no proxy or certificate setup, and it intercepts HTTP/1.1, HTTP/2, and HTTP/3 (QUIC). Works with the free Claude Desktop plan.

  • supership-scan

    andysalvo
    A
    license
    -
    quality
    B
    maintenance
    Predeploy security scanner for AI-generated code. 80+ vulnerability patterns across secrets, auth, injection, config, Supabase, and logging. Runs locally, code never leaves your machine. Optional x402 witnessed attestation.
    79
    Apache 2.0