Skip to main content
Glama
77,004 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"author:${url}" matching MCP servers:

  • web-exposure-mcp

    Perufitlife
    A
    license
    A
    quality
    C
    maintenance
    An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.
    2
    9
    1
    MIT

  • SQL Injection MCP Server

    vivashu27
    F
    license
    A
    quality
    D
    maintenance
    An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.
    13
  • Tensorfire by cignal-ai

    Tensorfireofficial

    cignal-ai
    A
    license
    Not graded
    quality
    B
    maintenance
    MCP server for security-testing AI models, exposing garak vulnerability scanning and URL/MCP-endpoint scanning as callable tools. It lets agents probe LLM endpoints for jailbreaks, prompt injection, and data leakage, and classify URLs or screen remote MCP endpoints for prompt-injection payloads.
    1
    GPL 3.0

  • voyager-browser

    dir-ai
    A
    license
    Not graded
    quality
    B
    maintenance
    Read-only observation of a single live URL: parses static HTML to report security posture, forms, links, accessibility signals, and leaks, with described fixes. SSRF-gated and safe, never executes JavaScript.
    82
    MIT

  • ARL MCP Improved

    Shaoshi17
    A
    license
    Not graded
    quality
    C
    maintenance
    An MCP server for AI security analysis, enabling vulnerability scanning, sensitive information leak detection, and GitHub code leak monitoring via 48 tools.
    MIT

  • recon-mcp

    tobiasGuta
    A
    license
    Not graded
    quality
    B
    maintenance
    A local Python MCP server for safe, human-led bug bounty recon, providing lightweight helpers for scope checks, headers, robots.txt, sitemap.xml, JavaScript URL collection, endpoint extraction, URL deduplication, evidence notes, and manual test planning.
    MIT

  • OhSINT MCP Server

    GetSomeKelso
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to orchestrate OSINT reconnaissance pipelines, including subdomain takeover detection, URL harvesting, secret scanning, and JS analysis, by chaining 73 tools with smart target detection and deduplication.
    MIT

  • Xray MCP Server

    zhangning77-tech
    F
    license
    Not graded
    quality
    D
    maintenance
    Enables vulnerability scanning of web applications using the xray security scanner. Provides URL scanning capabilities with configurable crawlers, plugins, and POCs to detect security vulnerabilities through natural language interactions.
    1