"Understanding File Usage" matching MCP servers:

Enables AI agents to access VirusTotal intelligence through MCP, supporting file, URL, domain, and IP lookups, plus analysis, via remote HTTP or local stdio.

Publishes four flat, schema-light tools that let AI agents (including strict providers) search, describe, and invoke any of 139 reverse-engineering capabilities behind a persistent REA server. Enables file fingerprinting, inspection, and evidence-linked investigation of shipped software through plain-English requests, read-only by default.

Enables AI assistants to run Offensive360 SAST scans on local codebases, returning security findings with file/line, severity, and fixes, plus scan status tracking.

Provides anonymous, privacy-preserving tools for AI agents, including prompt-injection scanning, site file validation, endpoint liveness checks, attestation, and risk-pattern analysis.

A Model Context Protocol (MCP) server for Gobuster that enables AI assistants to perform directory/file, DNS, virtual host, S3 bucket, and TFTP enumeration on a remote Kali Linux host via SSH.

Adds security capabilities like port scanning, TLS inspection, DNS enumeration, process monitoring, secrets scanning, HTTP header auditing, and CVE checking to Claude Code and Cursor.

Enables AI agents to interact with a local Metasploit Framework instance through the Model Context Protocol for AI-driven red teaming, exposing RPC calls, persistent consoles, native process execution, interactive terminals, and local file access through 23 tools.

Enables structured HTTP request creation and local file ingestion for LLM integration with Burp Suite, reducing malformed requests and token costs.

Enables an AI agent to statically triage local binaries and APKs by extracting and classifying strings, flagging hardcoded secrets, detecting file types, checking exploit-mitigation flags, and auditing Android manifests. Results from all tools can be merged into a single structured report with a summary findings list.

Exposes seven MCP tools that let an AI coding agent detect a project's stack, fetch the priority security checks for that platform, search 2,057 OWASP-derived check cards with file-and-commit provenance, and record evidence-backed pass/fail results in a report.

A Model Context Protocol server for the Sliver C2 framework that exposes operator tools like listeners, implant generation, sessions, command execution, and file operations for LLM-driven adversary emulation.

Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.

Enables scanning a single-file Solidity contract before deployment by running Slither, Aderyn, and rug-pull/centralization heuristics in a sandboxed environment, then returning a Deployable / Fix first / Do not deploy verdict with plain-language explanations. Exposes one tool, scan_contract, with a per-caller daily limit.

Enables MCP clients to run and track scans, inspect quota usage, redeem existing studio report rights, and list or download generated reports through the associated REST API. It operates locally over stdio with API-key authentication and bounded retry/polling behavior.

Exposes an assess_repo tool that scans a repository, local folder, or npm/PyPI package and returns supply-chain risk findings with file, line, and code evidence — install-time scripts, dangerous patterns, secrets, AI-agent manipulation, impersonation and published-artifact mismatches — while never executing the target's code. Findings carry severities from info to critical so results can gate installs and CI jobs.

An MCP server that wraps Trivy and Gitleaks to provide file system vulnerability and secret scanning as tools for AI agents, enabling local, free security analysis.

Provides Claude with access to Shodan for IP address lookups, service discovery, and vulnerability scanning, allowing users to query information about hosts, count results, and check API usage.

Exposes a Kali pentesting sandbox to OpenCode agents, enabling health checks, command execution, browser automation, file transfer, finding capture, and report finalization for authorized security scans without requiring LLM keys for the server.

Enables SMB enumeration and interaction through MCP tools, including share listing, file operations, and remote command execution.

Provides deterministic, 100%-file-coverage security findings by running Semgrep, gitleaks, and osv-scanner on code repositories, enabling thorough security assessment of every file.

An MCP server that gives an LLM full control over a VMware-hosted Windows VM: lifecycle, snapshots, remote execution, file transfer, and kernel debugging.

MCP server for the pwncat post-exploitation platform. It exposes 40+ tools for session management, file operations, command execution, enumeration, privilege escalation, implants, and config to AI agents.

Enables AI agents to inspect local GGUF model files for structural, template-security, companion-file, and runtime-advisory risks before deployment, returning machine-readable verdicts via seven MCP tools.

Enables an agent to check a document file or a retrieved piece of text for text a person cannot see and for instruction-style payloads before the agent reads or acts on it, returning findings with location, reason and severity plus a blocked flag when the content should not be trusted. The hidden text itself is withheld from tool results by default so the payload is not delivered to the requesting agent.

Reverse engineering against a running Windows process instead of the file on disk: memory reads, pattern and value scanning, disassembly of the code that actually executed, resolved IAT thunks, caller-chain tracing, and structure recovery. Complements the Ghidra and IDA servers rather than replacing them — correlate_addr maps a runtime address back to a module and RVA.

Enables security testing and reverse engineering through MCP by exposing Nmap, nm, objdump, strings, and tshark for network scanning, symbol/binary analysis, string extraction, and traffic capture/analysis, plus isolated Docker sandbox command execution with configurable resources and file transfer.

Enables running Kali Linux security tools through an MCP client, including Nmap network scanning, nm symbol analysis, objdump binary disassembly, strings extraction, and tshark traffic capture. It also provides a Docker-based sandbox for isolated command execution with configurable resource limits and file copying.

Enables running Kali Linux security tooling through MCP, including Nmap network scanning, nm symbol analysis, objdump disassembly, strings extraction, and tshark traffic capture and pcap analysis. Also supports executing commands in an isolated Docker sandbox with configurable resource limits and bidirectional file copying.

Enables secure static analysis of Microsoft Office documents and related file types for malicious content, integrating with systems that support the MCP protocol.

Enables security researchers and developers to run Kali Linux tooling—Nmap scanning, nm symbol analysis, objdump disassembly, strings extraction, and tshark traffic capture—directly from MCP clients such as Claude Desktop, Cline, Goose, or Roo Code. Also provides Docker-based sandbox execution with configurable resource limits, network modes, and bidirectional file copying.