Skip to main content
Glama
72,110 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Understanding the term 'throw' in web contexts" matching MCP servers:

  • The Box

    horizonfps
    A
    license
    -
    quality
    C
    maintenance
    A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.
    4
    2
    MIT

  • web-exposure-mcp

    Perufitlife
    A
    license
    A
    quality
    C
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    10
    1
    MIT

  • Web Check MCP

    ameobius-ai
    A
    license
    A
    quality
    B
    maintenance
    MCP server that exposes 31 OSINT checks from Lissy93/web-check as tools for website analysis, including SSL, DNS, headers, WHOIS, and security presets. Enables natural-language-driven web recon and health checks.
    8
    MIT

  • john-the-ripper-mcp

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.
    12
    MIT
  • Snyk API & Web MCP Server by snyk

    Snyk API & Web MCP Serverofficial

    snyk
    A
    license
    C
    quality
    A
    maintenance
    Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.
    51
    7
    Apache 2.0

  • NeuralReaper

    the-artist111
    A
    license
    -
    quality
    A
    maintenance
    AI-native security research platform that integrates Claude with MCP to execute real offensive security tools in an isolated Docker container, enabling natural language-driven recon, CVE scanning, Active Directory enumeration, and cryptographic posture assessment.
    1
    MIT

  • bloodhound

    The-bub
    F
    license
    B
    quality
    C
    maintenance
    Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD security insights.
    23

  • mcp-security-scanner

    badchars
    A
    license
    A
    quality
    A
    maintenance
    Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.
    55
    21
    5
    MIT

  • feroxbuster-mcp

    schwarztim
    A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to perform web content discovery scans using feroxbuster on a remote system via SSH, with support for recursive scanning, filtering, and background execution.
    8
    MIT

  • SQL Injection MCP Server

    vivashu27
    F
    license
    A
    quality
    D
    maintenance
    An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.
    13

  • vulnerable-notes-mcp

    rockysec
    A
    license
    C
    quality
    C
    maintenance
    A deliberately vulnerable MCP server for practicing exploitation of tool poisoning, command injection, and path traversal. Includes fixed versions and an agent demo to reproduce the issues in a controlled environment.
    2
    MIT
  • Cybrium MCP Server by cybrium-ai

    Cybrium MCP Serverofficial

    cybrium-ai
    A
    license
    -
    quality
    B
    maintenance
    Provides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.
    159
    Apache 2.0
  • PwnBridge by 1mr0-tech

    PwnBridgeofficial

    1mr0-tech
    A
    license
    -
    quality
    D
    maintenance
    Enables AI assistants to execute security testing tools on a Kali Linux machine over SSH, including reconnaissance, web app scanning, and static/dynamic analysis.
    12
    MIT

  • Kali MCP Server

    weirdmachine64
    A
    license
    -
    quality
    D
    maintenance
    Enables running Kali Linux security tools and commands in a containerized environment for semi-automated penetration testing, with background job management and out-of-band interaction detection.
    16
    Apache 2.0