Skip to main content
Glama
72,394 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"API Documentation for Reference or Development" matching MCP servers:

  • gef-mcp-for-ctf

    guaidao2
    F
    license
    -
    quality
    D
    maintenance
    GDB Enhanced Features MCP server for remote debugging and CTF exploitation with 41 specialized tools including ROP search, format-string detection, and memory patching.
    9

  • mcp-api-pentest

    josenieto
    A
    license
    B
    quality
    B
    maintenance
    Enables AI assistants to perform automated security audits on APIs, detecting BOLA/IDOR vulnerabilities by comparing responses across user tokens.
    11
    MIT

  • api-redbox-mcp

    alfredojrc
    F
    license
    -
    quality
    B
    maintenance
    Provides a disposable, hardened Kali Linux sandbox with an MCP interface for LLM-driven security analysis of REST APIs, confining blast radius via container isolation.

  • RedTeam ML API MCP

    rnadjqaim
    A
    license
    B
    quality
    C
    maintenance
    Enables security teams to run controlled adversarial penetration tests against authorized ML/LLM API endpoints, scoring responses and generating evidence for compliance frameworks such as SOC 2, ISO 27001, and GDPR.
    6
    2
    MIT

  • Mythic MCP

    johanrobbenites
    F
    license
    B
    quality
    B
    maintenance
    Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.
    12
  • Snyk API & Web MCP Server by snyk

    Snyk API & Web MCP Serverofficial

    snyk
    A
    license
    C
    quality
    A
    maintenance
    Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.
    51
    7
    Apache 2.0

  • qrp-mcp

    StanimirTenev
    A
    license
    A
    quality
    B
    maintenance
    An MCP server that scans local codebases for quantum-vulnerable cryptography (secp256k1, Ed25519, RSA, etc.) and CI signing commands, classifying each finding as quantum-broken, post-quantum, or neither. It runs entirely locally with no network calls, providing a deterministic inventory for AI agents.
    2
    Apache 2.0

  • HackTricks MCP Server

    Xplo8E
    A
    license
    A
    quality
    D
    maintenance
    Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.
    7
    111
    8
    MIT

  • qualys-pci-mcp

    RobotDisco
    A
    license
    A
    quality
    B
    maintenance
    A read-only MCP server for the Qualys PCI Merchant API that lets LLM assistants answer questions about PCI compliance posture, such as which hosts are failing PCI or listing high findings.
    7
    Apache 2.0
  • agentseal-mcp-intel by getagentseal

    agentseal-mcp-intelofficial

    getagentseal
    F
    license
    A
    quality
    D
    maintenance
    Enables users to scan MCP servers for security threats, check installed servers, and analyze config files for risks, all from AI assistants like Claude, Cursor, or Windsurf.
    5
    24
    3

  • ghosthunt

    78degrees
    A
    license
    A
    quality
    B
    maintenance
    GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.
    4
    73
    MIT

  • re-apktool

    Heretek-RE
    A
    license
    A
    quality
    C
    maintenance
    MCP server for Android APK triage, providing tools to parse APK headers, list DEX classes, and decode AndroidManifest.xml using apktool or androguard backends.
    5
    1
    MIT

  • airlock

    ByJH
    A
    license
    A
    quality
    C
    maintenance
    A security gate MCP server that audits agent extensions (skills, MCP servers, tools) by scanning for risks, adversarial analysis, and sandbox execution, returning a trust verdict of allow, quarantine, or block.
    1
    MIT