Skip to main content
Glama
79,387 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"An incomplete or malformed search query" matching MCP servers:

  • CVE Search MCP Server

    Arnabdaz
    F
    license
    A
    quality
    D
    maintenance
    Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.
    8
    2

  • touful-vuln-search-mcp

    touful
    F
    license
    Not graded
    quality
    B
    maintenance
    Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and 10 MCP tools for CVE query, keyword search, batch query, EPSS scoring, KEV checking, exploit search, and comprehensive assessment with Chinese output.
    2

  • websec-auditor

    sheiscypher
    F
    license
    Not graded
    quality
    B
    maintenance
    Passive website security and trust auditor that checks for security, SEO, AI surface, email, and other exposures, producing a score and remediation plan.

  • qrp-mcp

    StanimirTenev
    A
    license
    A
    quality
    B
    maintenance
    An MCP server that scans local codebases for quantum-vulnerable cryptography (secp256k1, Ed25519, RSA, etc.) and CI signing commands, classifying each finding as quantum-broken, post-quantum, or neither. It runs entirely locally with no network calls, providing a deterministic inventory for AI agents.
    2
    Apache 2.0

  • Cinch MCP Server

    nirhalfon
    A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query security checklists, protocols, and framework mappings to safely build and operate AI agents, with tools for checklist runs, protocol lookup, mapping lookup, and threat search.
    9
    CC BY-4.0

  • Xploit47

    aloc999
    A
    license
    A
    quality
    B
    maintenance
    AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
    1
    1
    MIT

  • pentest-mcp

    lucianoengel
    A
    license
    A
    quality
    B
    maintenance
    Enables MCP-compatible agents to query structured penetration testing engagement state captured from tmux sessions, including credentials, hosts, and command provenance with exact source bytes.
    15
    MIT

  • burp-mcp-plus

    titaniumtushar
    A
    license
    A
    quality
    D
    maintenance
    Enables structured HTTP request creation and local file ingestion for LLM integration with Burp Suite, reducing malformed requests and token costs.
    20
    6
    MIT

  • Shodan MCP Server

    Cyreslab-AI
    A
    license
    B
    quality
    D
    maintenance
    Provides access to Shodan API functionality, enabling AI assistants to query information about internet-connected devices for cybersecurity research and threat intelligence.
    23
    47
    MIT

  • TrustHarness

    ofirtro
    A
    license
    B
    quality
    C
    maintenance
    Enables deterministic security testing of AI agents that use tools by serving synthetic MCP environments with poisoned data, fake secrets, and privileged actions. Records agent tool calls and evaluates security invariants (e.g., canary leaks, forbidden access, approval binding) without an LLM judge or real systems.
    8
    MIT

  • EvalKit MCP Server

    tr4m0ryp
    A
    license
    B
    quality
    B
    maintenance
    Enables testing AI safety classifier robustness against query decomposition, obfuscation, and multi-agent attacks. Provides tools for full evaluation pipelines, query previews, and status checks.
    4
    4
    MIT

  • PentestThinkingMCP

    LT7T
    A
    license
    C
    quality
    D
    maintenance
    An AI-powered penetration testing reasoning engine that provides automated attack path planning, step-by-step guidance for CTFs/HTB challenges, and tool recommendations using Beam Search and MCTS algorithms.
    1
    MIT
  • EVIDIQ Sentinel MCP by evidiq

    EVIDIQ Sentinel MCPofficial

    evidiq
    A
    license
    Not graded
    quality
    B
    maintenance
    Scans remote MCP endpoints, manifests, and agent skills for security threats, providing deterministic scores, verdicts, and signed reports to verify agent infrastructure before trust or payments.
    1
    MIT
  • cveasy-mcp by CVEasy

    cveasy-mcpofficial

    CVEasy
    A
    license
    Not graded
    quality
    A
    maintenance
    Provides MCP clients like Claude with tools to query and manage security scans, CVEs, assets, findings, threat intel, and generate polished reports by acting as a lightweight adapter over the CVEasy backend API.
    2
    MIT