"AI Agent Coder with Awareness of Various SDKs" matching MCP servers:

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Offers a control surface for AI agent security with four independent checks: source-code scanning, tenant isolation, LLM content verification, and deploy gating. Currently in pre-release, with no functional scanning engines yet.

Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows.

MCP server for AI-driven VAPT orchestration, enabling agents to plan and execute authorized security scans through a control plane that enforces scope, sanitization, budget, rate limits, human approval, and audit logging.

An authorization-first MCP-governed control plane for executing security-tool workflows in explicitly approved, sandboxed environments with auditable campaigns and AI collaboration boundaries.

Enables management of capture sessions, rules, certificates, and protocol communication through an MCP endpoint, controlling a sing-box core.

Enables a language model to inspect proxy history, run scoped scans and intruder jobs, and drive a proxied browser through Burp Suite for authorized security testing on test and staging environments. Scope, environment, mode, rate limits, refusals and secret redaction are enforced in gateway code with a tamper-evident audit log.

Enables AI agents to autonomously run over 150 cybersecurity tools for penetration testing, vulnerability discovery, bug bounty automation, and security research through MCP.

A read-only MCP server that lets agents scan a project's AI agent setup — Claude Code, Codex, Cursor, MCP servers and instruction files — and surface security findings such as the lethal trifecta, broad permissions, exposed secrets and unpinned packages.

Enables coding agents to scan a public URL in passive or authorized mode and receive only bounded, sanitized structured findings (severity, confidence, standard, evidence, remediation) with quarantined evidence instead of raw page dumps. A second tool lets agents inspect the scanner's safety boundaries and coverage without making any network request.

Security scanner for MCP servers. Detects prompt injection, command injection, auth bypass, and excessive permissions across tools, resources, and prompts.

Enables AI agents to plan and run authorized offensive security assessments across 150+ integrated tools, with full activity logging of every scan.

Autonomous pentests from one command: real security tools, working PoCs, and audit-ready reports, all driven via MCP.

Enables MCP-compatible agent hosts to delegate governed, read-only security audits and reviews of code, applications, agents, prompts, MCP configurations, and cloud environments through evidence-first findings and stable schemas.

Enables natural-language-driven security testing by orchestrating multiple pen-testing tools through MCP, with automated scan execution and AI-assisted vulnerability summarization.

Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.

A security scanner for AI coding agents and autonomous assistants that scans code for vulnerabilities, detects hallucinated packages, blocks prompt injection, and provides LLM-powered semantic code review via MCP or CLI.

Enables red-team and blue-team security workflows on BlackArch Linux by wrapping local tools like nmap, gobuster, nikto, and hydra as MCP tools, with scope-gating that prevents unauthorized scanning against any target not explicitly listed in a local scope.yaml file.

Enables structured robustness and security testing by scanning text for policy/safety issues and generating test suite outlines.

Enables real-time injection fuzzing and canary-based exfiltration detection over untrusted prompts, RAG context, and agent actions, with entropy analysis, outbound channel interception, least-privilege sandboxing, and cryptographic audit proofs.