"Five9: Cloud Contact Center Software" matching MCP servers:

MCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.

Enables MCP clients to exercise HTTP tools against an upstream service, secured via bearer-token authentication, along with a resource and prompts.

Enables AI coding assistants to run static analysis on GitHub repositories, raw code snippets, or local directories to detect cloud cost leaks in Terraform/AWS configs, PostgreSQL migration table-lock hazards, and OWASP/Next.js API security gaps. Each finding returns structured severity, line-level detail, and drop-in fixes.

Enables AI agents to scan a repository or project for malware, supply-chain attacks, leaked secrets, and web, server, cloud, and CI/CD vulnerabilities, then confirm real findings with concrete attack scenarios and fixes. Exposes scan, guide, and reference tools plus a security-review prompt that runs locally.

Enables AI agents to perform offline cybersecurity research and penetration testing by querying a local knowledge base of curated security data, with tools for searching, answering, and status checking.

MCP server (Python, official MCP SDK, stdio) in the mcp/ folder: tools scan_tls and scan_tls_raw check whether a website negotiates post-quantum TLS (X25519MLKEM768 / ML-KEM) and report the key-exchange group, certificate and grade.

Enables AI assistants to directly invoke Kali Linux network tools for network maintenance and security assessment, with 19 tools including port scanning, DNS queries, and penetration testing.

Lets any MCP client, such as Claude, browse attack suites and probes, run a full assurance assessment with all reports written out, send custom prompts or multi-turn histories and get leak, PII and refusal checks back for adaptive attacks, and read findings from an earlier assessment. This enables agent-driven red-teaming of a chatbot, RAG app or AI agent without leaving the chat client.

Publishes four flat, schema-light tools that let AI agents (including strict providers) search, describe, and invoke any of 139 reverse-engineering capabilities behind a persistent REA server. Enables file fingerprinting, inspection, and evidence-linked investigation of shipped software through plain-English requests, read-only by default.

This server enables AI-assisted APK reverse-engineering entirely on-device, orchestrating jadx, apktool, adb, frida, and APKiD through a job/workflow engine, and exposing those agents as native MCP tools for Claude without any cloud dependency.

Enables AI assistants to scan websites, public repositories, and OpenClaw/CLAW skills for security vulnerabilities, including local skill-package analysis before installation, cloud scans, and remediation guidance.

A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.

Enables agents to inventory the Windows software installed on a machine and match it against current CVE sources (cvelistV5, CISA KEV, EPSS, NVD), turning the hits into a persistent to-do list prioritized by exploitation and severity. It also produces an AI effort assessment for each entry, either by sampling the client or by returning an evidence package the client writes back.

MCP server providing diagnostic tools to analyze software architecture, security, REST API compliance, and dependencies for multiple programming languages. Enables AI agents to run scans and audits on codebases.

A security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.

Enables AI agents to query the Shodan API and CVEDB for internet-connected device reconnaissance, returning open ports, banners, TLS certificates, cloud and location details, plus DNS records and subdomains. Also delivers vulnerability intelligence such as CVSS, EPSS, and KEV status for CVEs, products, and CPEs.

An MCP server that lets AI agents manage a local watchlist of the software and exact versions you run, then check them against vulnerability and exploitation data. It enables adding, updating and listing watched items, pulling current alerts or recent findings, and asking whether a given CVE affects anything on the list.

Exposes nmap, httpx, ffuf, and sqlmap to AI agents over MCP with mandatory scope enforcement, blocked cloud metadata and private addresses, and shell-free command execution. Enables authorized port scanning, HTTP probing, content discovery, and SQL injection verification with validated arguments and auditable output.

Enables AI agents to inspect and decompile software they have no source for — Android APKs, Electron bundles, .NET assemblies, and Go, Rust or WASM binaries — plus adb device interaction, through a token-guarded Streamable HTTP MCP endpoint, stdio MCP, or a CLI. Ghidra-powered native binary decompilation can be opted in at startup for ELF, PE and Mach-O targets.

Enables AI assistants to query the Vulners vulnerability database for CVEs, security bulletins, and software package audits through natural language.

Enables searching the NIST NVD for CVEs, retrieving full CVE details, checking software for known vulnerabilities, and searching the CPE database.

Enables AI assistants to query vulnerability management, security center, identity exposure, and cloud security data read-only, and to export Active Directory data from identity exposure into a BloodHound attack graph.

Enables agents to analyze software artifacts through 35 tools covering read-only reconnaissance, secret/string/symbol scanning, native and Dart AOT structure checks, exposure tiering, protection planning, attack-simulation design, and an append-only evidence ledger with mechanical verified gates that treat unresolved unknowns as blocking. Gated execution tools apply reviewed transforms only to a managed copy inside an authorized workspace, with one-time approval tokens, independent verification, before/after diffs, and rollback.

Enables searching and retrieving software and hardware weaknesses, attack patterns, mitigations, code examples, and reference hierarchies from the MITRE CWE and CAPEC catalogs, including CWE to CAPEC to ATT&CK mappings. Runs over STDIO or Streamable HTTP with no API key required.

Enables MCP-compatible agent hosts to delegate governed, read-only security audits and reviews of code, applications, agents, prompts, MCP configurations, and cloud environments through evidence-first findings and stable schemas.

AI-powered cybersecurity automation platform with 155+ security tools for network, web, cloud, and binary analysis, controllable via natural language through MCP-compatible AI assistants.

An MCP server that extends kali-mcp with cloud (AWS/Azure/GCP), API/GraphQL/JWT, OSINT, container/K8s, IaC/SAST, mobile, binary analysis, and reporting tools, all accessible via an HTTP MCP endpoint.

Enables auditors to scan cloud IAM policies for privilege-escalation paths, wildcards, and risky grants directly within Cursor or Claude Code, using a deterministic rule engine that runs entirely on local infrastructure.

Enables AI to scan AWS accounts, analyze attack paths, and verify security fixes on a read-only graph of cloud resources.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device search, host reconnaissance (open ports, banners, TLS certificates, cloud provider), domain and DNS lookups, and vulnerability intelligence with CVSS, EPSS and KEV data. Supports both stdio and HTTP streaming transports, with credit-aware free tools for counting queries and CVE research.