Skip to main content
Glama
115,288 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Understanding Vector Search" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    D
    maintenance
    Unified vulnerability search MCP server for penetration testing agents, integrating 5 data sources (NVD, OSV, EPSS, CISA KEV, Exploit-DB+GitHub) and 10 MCP tools for CVE query, keyword search, batch query, EPSS scoring, KEV checking, exploit search, and comprehensive assessment with Chinese output.
    2
    -
  • A
    license
    A
    quality
    D
    maintenance
    Connects AI assistants to Solodit's 49,000+ blockchain vulnerability database, enabling search, browse, and lookup of audit findings directly from your AI workflow.
    4
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables searching and querying HackTricks pentesting documentation directly from Claude, with tools for quick lookup, grouped search results, page outlines, section extraction, and cheatsheet mode.
    7
    59 npm
    11
    MIT
  • F
    license
    A
    quality
    D
    maintenance
    Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.
    8
    2
    -
  • A
    license
    A
    quality
    D
    maintenance
    Enables users to retrieve and display CVE vulnerability information from the National Vulnerability Database (NVD) with support for keyword search and detailed lookup.
    2
    83 npm
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants and agents to search bug bounty programs, retrieve policies and scopes, and check targets against active scope across HackerOne, YesWeHack, and Intigriti using personal API credentials.
    5
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    AI-powered penetration testing reasoning engine (MCP server) for attack path planning, step scoring, and tool recommendations using Beam Search and Monte Carlo Tree Search.
    1
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to interact with the FlagForge REST API, allowing them to search solved CTF challenges, work on live event challenges, record evidence, submit flag candidates, and write markdown writeups.
    19
    ISC
  • A
    license
    C
    quality
    D
    maintenance
    An AI-powered penetration testing reasoning engine that provides automated attack path planning, step-by-step guidance for CTFs/HTB challenges, and tool recommendations using Beam Search and MCTS algorithms.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to look up files, URLs, IPs, and domains through the VirusTotal v3 API, returning detection reports alongside analyst-pivot relationships such as contacted hosts, dropped files, resolutions, and threat actors. Adds corpus search, sandbox behaviour summaries, cursor-paginated relationship traversal, and a choice of stdio or HTTP streaming transport.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to query the VirusTotal v3 API for detection reports and analyst-style pivots on files, URLs, IPs, and domains, including contacted hosts, dropped files, resolutions, and threat actors. Provides relationship paging, corpus search with VTI-style modifiers, sandbox behaviour summaries, and supports both stdio and HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server providing 15 OSINT tools over free, public sources for AI agents, enabling domain reconnaissance, subdomain discovery, DNS lookups, host profiling, CVE search, and more without API keys.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying CVE vulnerability data from the NIST National Vulnerability Database, including CVE lookup, product/version search via CPE filters, CVSS severity scores, and recent high-severity disclosures.
    394 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables certificate transparency log search via crt.sh, allowing users to query SSL/TLS certificates, enumerate subdomains, and retrieve certificate details with no API key required.
    1
    BSD Zero Clause
  • A
    license
    Not graded
    quality
    A
    maintenance
    Gives AI agents access to the VirusTotal v3 API so they can look up hashes, URLs, IPs, and domains and receive detection reports with relationship pivots like contacted hosts, dropped files, and threat actors. Includes cache-first URL scanning, corpus search, sandbox behaviour summaries, and cursor-paginated relationship traversal over stdio or HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables searching Exploit-DB exploits and shellcodes by text and filters, retrieving metadata and source previews, and exact CVE search.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A Model Context Protocol server that enables AI assistants to search and retrieve information about security exploits and vulnerabilities from the Exploit Database, enhancing cybersecurity research capabilities.
    33
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables querying aggregated vulnerability records from CIRCL's Vulnerability-Lookup, resolving IDs across multiple feeds such as MITRE CVE, NVD, GitHub Security Advisories, PySec, and vendor CSAF, with tools for lookup, search, and recent records.
    274 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Gives AI agents access to the VirusTotal v3 API to analyze files, URLs, IPs, and domains, returning detection reports plus the relationships an analyst would pivot on, such as contacted hosts, dropped files, resolutions, and threat actors. Supports full relationship paging, corpus search, sandbox behaviour summaries, and both stdio and HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    A security-focused MCP server that enables AI assistants to search PyPI packages, scan for vulnerabilities, audit dependencies, and ensure security across Python projects.
    335 PyPI
    3
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to analyze files, URLs, IPs, and domains through the VirusTotal v3 API, returning detection reports alongside pivots like contacted hosts, dropped files, resolutions, and threat actors. Supports relationship paging, corpus search with modifiers, sandbox behavior summaries, and both stdio and HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Gives AI agents access to the Shodan API and CVEDB for host reconnaissance (open ports, banners, TLS certificates), internet-wide device search with facets, DNS and reverse DNS lookups, and CVE/CPE vulnerability intelligence with CVSS, EPSS and KEV data. It marks which tools are free, reports remaining query credits, and supports both stdio and HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Exposes eleven read-only tools covering IP host details, device search with facets, batch DNS resolution, and CVSS/EPSS/KEV data over stdio or HTTP streaming transports.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.
    1
    MIT