Skip to main content
Glama
72,476 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"How to use the command features in Figma" matching MCP servers:

  • The Box

    horizonfps
    A
    license
    -
    quality
    C
    maintenance
    A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.
    4
    2
    MIT

  • john-the-ripper-mcp

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.
    12
    MIT

  • Kali SSE MCP Command Executor

    liyue1000
    F
    license
    -
    quality
    D
    maintenance
    Enables secure execution of penetration testing commands on Kali Linux through Server-Sent Events with intelligent command validation, real-time monitoring, and comprehensive audit logging. Designed for authorized security research and penetration testing workflows.
    1

  • NeuralReaper

    the-artist111
    A
    license
    -
    quality
    A
    maintenance
    AI-native security research platform that integrates Claude with MCP to execute real offensive security tools in an isolated Docker container, enabling natural language-driven recon, CVE scanning, Active Directory enumeration, and cryptographic posture assessment.
    1
    MIT

  • bloodhound

    The-bub
    F
    license
    B
    quality
    C
    maintenance
    Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD security insights.
    23

  • MCP Kali

    d0gesec
    A
    license
    -
    quality
    C
    maintenance
    Enables AI agents to execute any command in a Kali Linux environment, with features like interactive sessions, background tasks, and HTTP interception for security testing.
    4
    MIT

  • vibecheck

    ArisRhiannon
    A
    license
    A
    quality
    B
    maintenance
    Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
    1
    6
    2
    MIT

  • ghosthunt

    78degrees
    A
    license
    A
    quality
    B
    maintenance
    GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.
    4
    73
    MIT

  • frida-mcp

    Gindhar2112
    F
    license
    A
    quality
    C
    maintenance
    Automates Android app analysis using Frida via AI commands, connecting a rooted Android phone to a computer and running dynamic analysis scripts without manual command execution.
    10
    14

  • mcp-security-scanner

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.
    55
    21
    5
    MIT

  • kali-mcp

    Hannes221
    A
    license
    A
    quality
    D
    maintenance
    Provides an MCP interface to a full Kali Linux environment running in Docker, enabling AI assistants to execute security tools like nmap, sqlmap, and metasploit. It allows users to start/stop the container, run shell commands, and transfer files for security testing and educational purposes.
    7
    12
    3
    MIT

  • Kali MCP Server

    azza39925
    F
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to perform authorized penetration testing and security assessments by exposing 20+ Kali Linux security tools (nmap, sqlmap, gobuster, hydra, etc.) through a safe, validated interface with command allowlists, rate limiting, and input sanitization.
    19
    1

  • PyPen MCP

    eyenoticeall
    F
    license
    A
    quality
    D
    maintenance
    Enables LLM-powered browser automation and security testing with features like browser management, network monitoring, DOM manipulation, and captcha handling.
    52
    1

  • CrackMapExec MCP Server

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    An MCP server that provides AI assistants with access to CrackMapExec/NetExec network penetration testing capabilities via SSH to a Kali Linux host, supporting multiple protocols for enumeration, credential dumping, and command execution.
    11
    MIT

  • TrustHarness

    ofirtro
    A
    license
    B
    quality
    C
    maintenance
    Enables deterministic security testing of AI agents that use tools by serving synthetic MCP environments with poisoned data, fake secrets, and privileged actions. Records agent tool calls and evaluates security invariants (e.g., canary leaks, forbidden access, approval binding) without an LLM judge or real systems.
    8
    MIT