"Searching PubMed references and formatting them in Markdown" matching MCP servers:

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

Enables users to run synthetic support-agent evaluations, preserve and inspect traces, score results deterministically, inject failures, and enforce release review gates through MCP tools, resources, and prompts.

Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.

GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.

Connects an AI assistant to an already-running mitmweb session so it can read, search, diff, replay, and generate code from the same network flows shown in the UI.

Gives AI assistants access to the Exploit Intelligence Platform for vulnerability and exploit intelligence. Supports searching CVEs, exploits, and generating pentest findings.

Enables AI agents to drive live Hack The Box labs through the real HTB Labs API — spawning, resetting and extending machines, submitting user and root flags with difficulty ratings, browsing challenges, and switching or downloading VPN configurations for the authenticated account. Every call hits the live API rather than cached content, with destructive actions annotated so hosts can gate them behind consent.

Provides Claude Code with access to a comprehensive bug bounty knowledge base including techniques, payloads, wordlists, and real-world reports through 14 tools for searching, retrieving payloads, and assessing report quality.

Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.

Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.

Enables interactive Ghidra reverse-engineering inside an AI client by rendering live decompiler, function browser, and call graph views. Users can click symbols to rename them and follow calls to navigate, all without leaving the conversation.

Enables AI assistants to run Kali Linux security tools in an isolated Docker container for tasks like network scanning, port checking, and service enumeration.

Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.

Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.

Enables AI assistants to search TryHackMe rooms and extract room overviews, task instructions, commands, and questions as clean Markdown for training and reference. Supports session-cookie authentication for subscriber content and includes curated foundational cybersecurity and Linux learning tracks.

Enables comprehensive security reconnaissance, vulnerability assessment, and threat intelligence gathering by integrating Shodan's API. It provides tools for searching internet-connected devices, performing DNS operations, and querying the Shodan exploit database.

Enables AI agents to interact with the FlagForge REST API, allowing them to search solved CTF challenges, work on live event challenges, record evidence, submit flag candidates, and write markdown writeups.

Enables AI coding assistants to run pre-publish security and code-quality scans across 17 categories, generate a 0–100 security score and Markdown report, quickly check critical vulnerabilities, and receive fix/refactor suggestions by finding ID.

Enables AI assistants to run authorized active authorization tests against remote MCP servers you own, including refresh token rotation and replay, redirect URI strictness, throttling, and consent CSRF checks, with JSON, SARIF, and Markdown reports.

Enables AI assistants to perform deep security audits of Java/Spring projects by searching for dangerous sink methods across built-in vulnerability profiles, inventorying project structure and dependency versions, and assessing the real exploitability of vulnerable components by layer. Results are grouped and tagged by external exposure so audits stay focused without overloading context.

Enables guided security evaluation of a virtual lab machine, including network scanning, HTTP/TLS analysis, OWASP Top 10 assessment, and Markdown report generation, without performing exploitation.

Connects AI assistants to AttackForge's Self-Service API with full endpoint coverage, response size optimization, and local caching for efficient use in long conversations.

Professional vulnerability report generator that creates standardized, well-formatted security reports with AI-generated content, supporting CVSS scoring, evidence management, and markdown export.

Enables AI clients to manage ADB devices and packages, detect packers, pull APKs, and unpack hardened Android apps via static extraction, BlackDex, or Frida, then convert DEX files to smali. Supports listing, reading, and regex-searching smali classes to locate APIs and other reverse-engineering targets.

Enables AI agents to symbolically execute binaries and solve them mathematically — unflattening OLLVM control flow, using Z3 and angr to derive exact inputs that reach target branches, tracing taint to dangerous sinks, devirtualizing bytecode VMs, and hot-patching live process memory without touching disk.

Enables management of penetration testing reports and vulnerabilities through a REST API, supporting CVSS 3.1 scoring, HTML formatting, and secure JWT authentication for comprehensive security assessment documentation.

Enables local-first static and optional controlled dynamic analysis of Android APK artifacts, with provenance-aware downloads, Markdown reports, and structured security findings via MCP stdio tools.

Enables generating falsifiable fleet hypotheses, compiling them into minimal bounded probe plans with control cohorts, and evaluating observations to return supported, refuted, or inconclusive verdicts.

Enables AI agents to audit web headers and DOM code, API routes, and database queries for vulnerabilities such as XSS, BOLA/IDOR, and SQL/NoSQL injection, returning scored CWE findings. It also automatically synthesizes secure drop-in replacement code with unified git diffs for review.

Enables read-only interaction with HackerOne, providing tools for searching and analyzing reports, exploring programs and scope, accessing earnings, and retrieving public disclosures.