"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.

Open-source sample MCP server built to be audited: ships a paid-tool x402 demo, a deliberately scannable surface, and documented security posture. From Payload, makers of the MCP Launch Readiness Audit (48-rule scanner with a fix for every finding, hardening templates, stress-test harness, readiness verifier, CI workflow, branded audit report) and the MCP Monetization Kit.

Enables security researchers to evaluate AI system defenses against prompt injection attacks through a comprehensive set of test vectors and analysis tools.

An MCP server for prompt injection boundary enforcement that scans URL content using a tiered LLM model strategy.

Blocks indirect prompt injection by tracking data provenance, not text patterns. Enables safe agent interaction with untrusted content.

An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.

Enables agents to scan untrusted text for jailbreak markers, prompt-override exploits, and indirect injection payloads, then cleanse it by replacing hostile command sequences with safe placeholders before the text reaches a prompt. Exposes tools for sanitizing input and itemizing detected threat patterns.

Gives AI coding tools reviewed access to PostgreSQL, MySQL, SQL Server, and SQLite databases, letting read-only queries run instantly while every data or schema change pauses for human approval in a review dialog. It also exposes schema introspection for agents and a way to open the connection manager.

Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

An MCP server that lets Claude query a mock business SQL database in plain language through read-only tools, with server-side guardrails that enforce SELECT-only queries and block access to sensitive payment data.

WAF for AI agents — block prompt injection before it reaches the LLM.

A governed SQL gateway for untrusted AI agents, providing controlled access to PostgreSQL, MySQL, and OceanBase with RBAC, field ACLs, row policies, and cost controls.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

Enables AI assistants to explore and analyse local CSV, Parquet or JSON files through validated read-only SELECT queries, with schema discovery, profiling and query-plan tools. Results are capped, timed, PII-masked and audit-logged inside a locked DuckDB sandbox that cannot write, reach the network or read other files.

Enables agents to run SELECT-only queries and inspect table metadata against configured databases via MCP Proxy, with timeouts, row and byte caps, and audit logging.

Enables assistants to inspect schemas and run bounded, read-only SQL queries over synthetic retail data with database-enforced guardrails, resource limits, and blocked write attempts.