"Calibre-Web" matching MCP servers:

An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.

Enables controlled, evidence-first web application penetration testing and bug bounty workflows, including scope enforcement, reconnaissance, human-approved surface triage, OWASP WSTG test execution, and SHA-256 evidence capture.

A Node.js-based frontend security audit tool that performs comprehensive dependency security audits for both local projects and remote repositories. Generates detailed Markdown reports with vulnerability detection, risk assessment, and fix recommendations.

Enables AI agents to administer, inspect, and troubleshoot BI Platform 4.3 SP5 through REST Web Services, including Web Intelligence documents, universes, CMS security, schedules, and repository hierarchy.

Provides seamless integration with Fastly's Next-Gen Web Application Firewall API, enabling AI assistants to manage web application security through natural language interactions.

Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.

Turns any web API into a governed, agent-ready MCP server with lockfile-based approval, fail-closed enforcement, and full audit trail.

23 pay-per-call web analysis APIs as MCP tools. Security audits, tech stack detection, email verification, SEO analysis, SSL checks, performance monitoring. Supports x402 and Stripe MPP payments.

Enables Node 20+ developers to stand up single-file, zero-dependency MCP stdio servers whose destructive tools stay disabled by default, answering calls with a refusal and a dry-run preview until an environment variable turns them on. Also provides truthful empty/error results, secret redaction in logs, guarded stdout, and per-tool timeouts and cancellation.

Enables users to search the on-chain index of 378,000+ ERC-8004 agents and read Cybercentry verification results spanning token, code, media, web, and wallet dimensions.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

Enables autonomous AI agents to operate safely by intercepting risky tool calls, evaluating them against policy, and suspending them for human approval via Slack, Telegram, or a web dashboard.

Enables an AI agent to perform read-only inspection of Palo Alto Networks Panorama and PAN-OS firewalls for monitoring and troubleshooting, including inventory, health, network, logs, and policy queries. It communicates via the PAN-OS XML API over HTTPS and does not allow configuration changes.

Enables cloud AI agents to safely work on a Mac through MCP-style JSON-RPC by providing approval-gated command execution, jailed file access, signed requests, and a tamper-evident audit log. Risky actions require on-device approval, while files remain confined to a chosen folder with recoverable writes and deletions.

Real-time audit and approval system for Claude Code tool calls, enabling monitoring and control of AI agent actions with a web dashboard.

Enables multi-user, per-namespace storage of AES-256-GCM-encrypted credentials (SSH, web, API, DB) managed through a web console with TOTP 2FA, and lets AI clients save, list, retrieve, or server-side invoke those secrets over a remote Streamable-HTTP endpoint without ever exposing the values in chat.

Aggregates multiple backend MCP servers (Stdio, SSE, and Streamable HTTP) into a single hub, exposing their combined tools and resources through unified SSE or Streamable HTTP endpoints, or as a Stdio server, while routing requests to the correct backend. Adds API-key/bearer-token endpoint security, per-tool enable/disable and renaming, and an optional web admin UI with live config reload, install monitoring, and a web terminal.

Enables MCP clients to access deliberately selected Delta capabilities through independently scoped gateway profiles, without requiring a browser, Web plugin, or graphical session.

Protects AI agents from prompt injection attacks, jailbreak attempts, and common web vulnerabilities by screening untrusted input through semantic LLM analysis and static pattern matching.

Enables professional penetration testers to orchestrate reconnaissance, web scanning, brute-force testing, exploitation, traffic capture, hash cracking, wordlist building, privilege escalation audits, and client report generation via STDIO/HTTP/SSE transports with optional bearer/OIDC authentication.