Skip to main content
Glama
116,223 servers. Updated

MCP tools

MCP Connectors

"Lottery games and results" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.
    7
    125 npm
    11
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.
    8
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables Claude to scan a website's HTTP security headers and receive an A–F grade against OWASP best practices, including per-header pass/warn/fail results and copy-paste fixes for missing headers.
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to work with DefAudit, supporting project and scan listing, starting scans, retrieving results, and marking or unmarking false positives.
    7
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    This local MCP server keeps vulnerability intelligence, research scope, scanner results, evidence receipts, Bugcrowd VRT assessments, and report drafts in one SQLite ledger. It is built for authorized defensive research and does not scan, exploit, or submit reports.
    19
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI assistants to perform deep security audits of Java/Spring projects by searching for dangerous sink methods across built-in vulnerability profiles, inventorying project structure and dependency versions, and assessing the real exploitability of vulnerable components by layer. Results are grouped and tagged by external exposure so audits stay focused without overloading context.
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables an AI agent to statically triage local binaries and APKs by extracting and classifying strings, flagging hardcoded secrets, detecting file types, checking exploit-mitigation flags, and auditing Android manifests. Results from all tools can be merged into a single structured report with a summary findings list.
    6
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Exposes seven MCP tools that let an AI coding agent detect a project's stack, fetch the priority security checks for that platform, search 2,057 OWASP-derived check cards with file-and-commit provenance, and record evidence-backed pass/fail results in a report.
    7
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Enables an AI runtime to perform authorized static analysis of Android APKs over local MCP stdio, inspecting inventories, DEX/ELF headers and manifest details while decompiling with verified, checksum-pinned JADX and Apktool engines it can bootstrap itself. Reports results as evidence-backed observations, with literal text search, two-APK comparison and Markdown summaries, without ever executing the target APK.
    12
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Wraps the ScanMalware.com API to enable phishing triage, malware scanning, and certificate inspection through natural language, allowing users to submit scans, retrieve results, and analyze threats via MCP tools.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Exposes Keysight CyPerf network performance and security testing as 100 tools across 15 categories, enabling AI assistants to orchestrate tests, manage agents, and analyze results through natural language.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to run static heuristic scans over a repository path via stdio, surfacing review candidates with file:line evidence for web3 auth and payment vulnerability patterns. Results can be used as CI-style gates or triage input without any dataflow analysis or external dependencies.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables active, authorized security testing of remote MCP servers' OAuth authorization flows, reporting results as JSON, SARIF, and Markdown. It runs checks for refresh token rotation, redirect URI strictness, PKCE enforcement, token audience, throttling, and consent CSRF.
    1,744 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes an assess_repo tool that scans a repository, local folder, or npm/PyPI package and returns supply-chain risk findings with file, line, and code evidence — install-time scripts, dangerous patterns, secrets, AI-agent manipulation, impersonation and published-artifact mismatches — while never executing the target's code. Findings carry severities from info to critical so results can gate installs and CI jobs.
    24 PyPI
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories through an MCP tool, returning vulnerability results in text or JSON with configurable thresholds and dev dependency skipping.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables LLM coding harnesses to profile authorized repositories, select applicable defensive security techniques, and report coverage and plain-language results in markdown or SARIF while keeping scans read-only and authorization-gated.
    19 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to drive OWASP ZAP for authorized penetration testing and bug-bounty workflows, including authenticated scans and vulnerability triage through 67 curated safety-gated tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories via an MCP tool, returning vulnerability results in text or JSON with configurable thresholds, registry, dev-dependency skipping, and retries.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories through an MCP tool, returning vulnerability results with configurable thresholds, registry, dev-dependency skipping, retries, and text or JSON output.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides Claude with access to Shodan for IP address lookups, service discovery, and vulnerability scanning, allowing users to query information about hosts, count results, and check API usage.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables auditing npm, Yarn, and pnpm lockfiles from local project directories or remote Git repositories, returning vulnerability results in text or JSON with configurable thresholds and dev dependency skipping.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to dynamically instrument Android and iOS apps through Frida 17, exposing 40 tools for exploring apps, hooking Java/ObjC/native methods, tracing calls, bypassing SSL pinning, capturing TLS keys and plaintext, and inspecting memory. Results use Ghidra/IDA-style module+offset addresses and carry an evidence envelope, with optional UI automation through mobile-mcp.
    798 npm
    15
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables auditing of npm, Yarn, and pnpm lockfiles in local project directories or remote Git repositories (including private ones) through a stdio MCP tool, returning unified vulnerability results filtered by severity threshold in text or JSON. It supports custom registries, optional skipping of dev dependencies, audit retries, and Chinese or English reports.
    5 npm
    MIT