Skip to main content
Glama
117,443 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Help with Writing Articles" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    C
    maintenance
    MCP server that enables Claude Code to drive the Konsulto cybersecurity audit platform from the CLI, including reading and writing findings, managing evidence, and handling scope and assets.
    19
    149 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Static security scanner for AI-generated (vibe-coded) Supabase and Next.js apps. Runs as an MCP server so an LLM can scan, explain findings, and produce fixes while it writes code, all locally and offline.
    5
    66 npm
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.
    8
    2
    -
  • F
    license
    A
    quality
    C
    maintenance
    Enables AI assistants to natively execute and manage 600+ Kali Linux security, penetration testing, and forensic tools, including search, help documentation, structured scanners, and workspace management.
    8
    1
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to perform pay-per-call security verification of wallets, tokens, contracts, dApps, agents, and more via a remote endpoint with no installation.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP clients to drive IDA Pro through a stability-hardened server that hosts multiple headless idalib instances, with per-session isolation, configurable HTTP/stdio transports, and API-key authentication.
    212
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables network security scanning using Nmap through MCP protocol. Supports quick port scans, full port scans with service detection, and custom Nmap commands with async task management.
    3
    MIT
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables authorized penetration testers to run reconnaissance, web fuzzing, vulnerability scanning, brute-force/password cracking, traffic capture, privilege-escalation audits, wordlist generation, and client-report workflows over stdio, HTTP, or SSE with optional bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to orchestrate reconnaissance, web/content scanning, brute-force checks, traffic capture, privilege-escalation auditing, wordlist generation, and client reporting through MCP transports with optional bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables authorized penetration testers to run reconnaissance, enumeration, vulnerability scanning, brute-force checks, traffic capture, and exploitation workflows via MCP tools, with STDIO/HTTP/SSE transport support. It also manages engagement records and generates client reports.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to perform low-level Windows process memory research, including process attachment, memory scanning, reading/writing, pointer chasing, remote code execution, and inline hooking via MCP tools and Lua scripting.
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables autonomous AI agents and penetration testers to conduct authorized security audits with persistent cross-session memory, zero-trust secret scrubbing, dynamic OWASP/ASVS checklists, and hallucination-free exploit PoC generation from captured traffic.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes nmap, httpx, ffuf, and sqlmap to AI agents over MCP with mandatory scope enforcement, blocked cloud metadata and private addresses, and shell-free command execution. Enables authorized port scanning, HTTP probing, content discovery, and SQL injection verification with validated arguments and auditable output.
    MIT
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Exposes common CTF and cybersecurity tools (crypto, forensics, malware analysis, steganography, reverse engineering, pwn, OSINT) so LLMs can help solve capture-the-flag challenges in a controlled lab environment.
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, exploitation, brute-force, traffic capture, and reporting workflows through stdio, HTTP, and SSE transports with auth and engagement record management.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to drive recon and exploitation tooling — including nmap, gobuster, nikto, John the Ripper, hashcat, subfinder, ffuf, nuclei, hydra, and sqlmap — over stdio, Streamable HTTP, or SSE transports with bearer/OIDC auth. Also supports wordlist generation, engagement record capture, and automated client report creation with scope-of-work handling.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, exploitation, password cracking, web fuzzing, vulnerability scanning, traffic capture, and client-reporting workflows through MCP transports with auth support.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Passive security scanner that audits a running MCP server against the OWASP MCP Top 10 and grades it A-F. Read-only static analysis of the advertised tools, prompts and resources with console/JSON/SARIF output, and it also runs as an MCP server itself.
    54 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, exploitation, brute-force, traffic-capture, and reporting workflows through MCP tools over STDIO/HTTP/SSE transports with bearer/OIDC authentication and Dockerized host tooling.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables authorized penetration testers to orchestrate reconnaissance, scanning, brute-force, traffic capture, wordlist generation, and reporting workflows via stdio, HTTP, or SSE with optional bearer/OIDC auth and structured engagement records.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to execute reconnaissance, scanning, brute-force, traffic capture, and reporting workflows through integrated tools with STDIO/HTTP/SSE transports and optional bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables Antigravity to act as an automated Cheat Engine/memory editor for singleplayer Windows games, providing process attachment, memory scanning/reading/writing, freezing, pointer and AOB resolution, Lua scripting, Cheat Table support, and stealth-oriented operations such as low-footprint syscalls and DLL injection.
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, exploitation, brute-force, traffic capture, and reporting workflows through MCP-compatible stdio, HTTP, and SSE transports with integrated tools such as nmap, gobuster, nikto, John the Ripper, hashcat, and wordlist generation.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes the ghostsoc scan engine over MCP so agents can run the ghostsuite security tools against a target and list which adapters are installed. It returns findings normalized across tools, correlated into attack-path chains with lifted severity and a triage note, as one ranked report.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run and coordinate reconnaissance, scanning, brute-force, exploitation, traffic capture, and reporting tools through MCP, with stdio/HTTP/SSE transports and bearer/OIDC authentication.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to run reconnaissance, scanning, brute-force, exploitation, traffic capture, and reporting workflows through stdio, Streamable HTTP, or legacy SSE with bearer/OIDC auth.
    165 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes six security tools (scan_repo, scan_diff, list_findings, get_finding, verify_finding, list_detectors) over stdio or HTTP so AI coding agents can run SAST/SCA/secrets/IaC scans and inspect prioritized findings without writing to the repository. It also lets agents verify a finding by re-running its generated proof-of-concept in an isolated sandbox, returning a confirmed or unavailable verdict.
    18
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to search and resolve over 2,800 security commands with argument templates, allowing natural language interaction with a comprehensive command library for penetration testing.
    1
    MIT