Skip to main content
Glama
113,154 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"google drive" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    D
    maintenance
    MCP server that enables Claude Code to drive the Konsulto cybersecurity audit platform from the CLI, including reading and writing findings, managing evidence, and handling scope and assets.
    19
    3 npm
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to drive live Hack The Box labs through the real HTB Labs API — spawning, resetting and extending machines, submitting user and root flags with difficulty ratings, browsing challenges, and switching or downloading VPN configurations for the authenticated account. Every call hits the live API rather than cached content, with destructive actions annotated so hosts can gate them behind consent.
    22
    54 npm
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Lets an AI assistant drive a self-hosted Sn1per install over local stdio, launching orchestrated scans and reading back structured findings, ports, subdomains and technologies. Enforces configured target scope, redacts secrets, and writes an audit log of every scan, cancel, delete and export request.
    10
    41 PyPI
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables MCP clients to drive Kali Linux ethical hacking tools for authorized penetration testing, with enforced engagement scope, exploitation gating, and full audit logging.
    24
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.
    8
    20
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP-native multi-agent security audits for Google Antigravity, orchestrating subagents for 0day research, static analysis, PoC verification, exploit chaining, reporting, and code remediation.
    15
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants and the WYRE Conduit gateway to access Telivy's security assessment data for MSPs, including external scans, deep-scan risk assessments, device inventory, M365/Google Workspace user exposure, PII summaries, and finding-level details.
    16
    Apache 2.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables agents to drive an end-to-end reverse-engineering loop on protected binaries: launch and dump live processes, rebuild memory images into file-aligned PEs with repaired imports, map Delphi RTTI methods, scan strings/entropy/xrefs, emulate code, and decompile through Ghidra or .NET. It also supports scripted live x64 and WOW64 debugging with breakpoints, registers, and module dumps exposed as callable tools.
    35
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to drive IDA Pro through a stability-hardened server that hosts multiple headless idalib instances, with per-session isolation, configurable HTTP/stdio transports, and API-key authentication.
    201
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables a language model to inspect proxy history, run scoped scans and intruder jobs, and drive a proxied browser through Burp Suite for authorized security testing on test and staging environments. Scope, environment, mode, rate limits, refusals and secret redaction are enforced in gateway code with a tamper-evident audit log.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Exposes 18 typed tools that drive real static-analysis engines (Ghidra, apktool, WABT, TShark, evmole, Rizin) over a single MCP endpoint to decompile binaries, audit APKs, scan EVM contracts, inspect WebAssembly, firmware, SQLite, and pcap data. Every call returns signed, verifiable evidence with an evidence_id, provider identity, SHA-256 artifact digest, and explicit limitations for security research, malware analysis, forensics, and CTF work.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to drive OWASP ZAP for authorized penetration testing and bug-bounty workflows, including authenticated scans and vulnerability triage through 67 curated safety-gated tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables professional penetration testers to drive recon and exploitation tooling — including nmap, gobuster, nikto, John the Ripper, hashcat, subfinder, ffuf, nuclei, hydra, and sqlmap — over stdio, Streamable HTTP, or SSE transports with bearer/OIDC auth. Also supports wordlist generation, engagement record capture, and automated client report creation with scope-of-work handling.
    172 npm
    GPL 3.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to drive a real Chromium browser over MCP using genuine mouse, keyboard, and wheel input, with accessibility snapshots, diffs, network logs, forked sessions, and replayable traces for bug bounty hunting.
    18
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI clients such as Claude, Cursor, Cline, and Codex to remotely drive IDA Pro over HTTP through 88 tools, covering Hex-Rays decompilation, disassembly, cross-reference tracing, type and struct reconstruction, C header import, memory reading and patching, and full dynamic debugging with breakpoints, registers, and stepping.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding assistants to drive live WinDbg/WinDbgX debugging sessions, including crash dump triage, live process attach, kernel debugging, multi-session management, and unrestricted debugger command execution with advanced reverse-engineering analysis tools.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Exposes the crackweb scanner's own commands as MCP tools, letting a client run vulnerability scans and crawls, drive an intercepting proxy, run an out-of-band callback listener, and perform offline JWT and hash analysis without shell quoting or managing background processes. Results return as structured data, including findings streamed while a proxy or listener is still running.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Exposes 238 schema-typed tools over streamable-HTTP MCP that let a client drive a Flipper Zero, an AWOK Biscuit (ESP32-C5) and an ESP32 Marauder — scanning, screen mirroring, storage, and other device operations — from natural-language or direct tool calls. Transmit/attack tools stay behind an explicit human confirmation gate.
    MIT