Skip to main content
Glama
74,296 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Information about Figma, a design and prototyping tool" matching MCP servers:

  • mcp-tool-poison-guard

    princeruhulofficial
    A
    license
    -
    quality
    B
    maintenance
    MCP server that detects and guards against tool poisoning and prompt injection attacks in tool descriptions and schemas. It provides risk scoring, pattern detection, safe rewriting, and audit reports with zero external API cost.
    MIT

  • GhostMap v2

    Samir12218415
    F
    license
    -
    quality
    B
    maintenance
    Exposes AI-augmented network reconnaissance and evasion capabilities as callable FastMCP tools, enabling natural language orchestration of host discovery, service fingerprinting, CVE mapping, and attack chain synthesis.
    1

  • qualys-pci-mcp

    RobotDisco
    A
    license
    A
    quality
    B
    maintenance
    A read-only MCP server for the Qualys PCI Merchant API that lets LLM assistants answer questions about PCI compliance posture, such as which hosts are failing PCI or listing high findings.
    7
    Apache 2.0

  • vibecheck

    ArisRhiannon
    A
    license
    A
    quality
    B
    maintenance
    Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
    1
    6
    2
    MIT
  • Polygraph by polygraphso

    Polygraphofficial

    polygraphso
    A
    license
    A
    quality
    A
    maintenance
    Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.
    4
    157
    7
    Apache 2.0

  • mcp-http

    Llamatron2112
    F
    license
    A
    quality
    C
    maintenance
    Provides a generic HTTP client tool allowing AI agents to make arbitrary HTTP requests from their environment, with support for environment-variable placeholders for secrets.
    1

  • theHarvester MCP Server

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform domain reconnaissance using theHarvester OSINT tool, including email harvesting, subdomain discovery, DNS brute force, and Shodan integration, via SSH on a Kali Linux host.
    8
    1
    MIT

  • Xploit47

    aloc999
    A
    license
    A
    quality
    B
    maintenance
    AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
    1
    1
    MIT

  • FlipperTalk

    ReconGrunt
    A
    license
    A
    quality
    B
    maintenance
    Talk to your Flipper Zero from Claude Code — or any MCP client. Storage, app deployment, screen capture, button automation, JavaScript execution on the device, and honest answers about what is nearby.
    66
    MIT

  • MCP-Shield Pro

    tonysheesh
    F
    license
    A
    quality
    C
    maintenance
    Enterprise-grade zero-dependency security shield and runtime governance engine for MCP servers, providing OWASP MCP Top 10 audits, cryptographic tool call signing, AIBOM generation, and inline parameter firewall protection.
    3

  • Shodan MCP Server

    Cyreslab-AI
    A
    license
    B
    quality
    D
    maintenance
    Provides access to Shodan API functionality, enabling AI assistants to query information about internet-connected devices for cybersecurity research and threat intelligence.
    23
    47
    MIT

  • MCPGuard-Lab

    Lc517
    F
    license
    B
    quality
    C
    maintenance
    A security research MCP server for testing tool call safety with deterministic policies like allowlists, path boundary enforcement, SSRF prevention, output redaction, and prompt injection detection, without requiring external LLMs or API keys.
    6