Skip to main content
Glama
70,485 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"JavaScript" matching MCP servers:

  • F
    license
    A
    quality
    B
    maintenance
    Enables dynamic instrumentation of processes by attaching Frida, loading JavaScript scripts, calling RPC methods, and retrieving script output through MCP.
    6
    2
  • F
    license
    A
    quality
    C
    maintenance
    Provides WebAssembly-based, sandboxed tools for JavaScript execution, binary disassembly, file recovery, steganography, image optimization, data processing, PDF redaction, secret scanning, and semantic search.
    10
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for offensive-security tooling, enabling AI agents to run reconnaissance, CVE intelligence, JavaScript analysis, HTTP probing, and port scanning against authorized targets.
    10
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to run Shipcheck on local JavaScript/TypeScript repositories, scanning for launch risks like exposed env vars, unsigned webhooks, and missing security guardrails.
    1
    113
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    An anti-detection browser MCP server designed for JavaScript reverse engineering through the Camoufox engine. It enables AI assistants to perform dynamic debugging, function hooking, and network interception while bypassing sophisticated bot detection mechanisms.
    35
    401
    MIT
  • A
    license
    B
    quality
    A
    maintenance
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    47
    37
    MIT
  • A
    license
    -
    quality
    C
    maintenance
    Scans generated JavaScript/TypeScript code to detect AI-hallucinated or suspicious npm package imports before installation, providing a verdict of CLEAN, REVIEW, or BLOCK.
    44
    MIT
  • A
    license
    -
    quality
    B
    maintenance
    Read-only observation of a single live URL: parses static HTML to report security posture, forms, links, accessibility signals, and leaks, with described fixes. SSRF-gated and safe, never executes JavaScript.
    97
    MIT
  • A
    license
    -
    quality
    B
    maintenance
    Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
    19
    2
    MIT
  • A
    license
    -
    quality
    D
    maintenance
    Integrates ProjectDiscovery's Katana web crawler with Claude Desktop, enabling users to crawl websites, discover endpoints and hidden resources, extract JavaScript files, and perform reconnaissance with customizable depth, scope, and filtering options.
    MIT
  • A
    license
    -
    quality
    F
    maintenance
    Automatically approves or blocks specified MCP tool calls in Claude Desktop by injecting JavaScript that restores granular per-chat approval control. Provides configurable permanent approvals while maintaining security through per-server tool whitelists and blacklists.
    29
    MIT
  • F
    license
    -
    quality
    B
    maintenance
    Exposes reverse engineering capabilities via MCP protocol, enabling AI agents to automatically detect, analyze, trace, and deobfuscate JSVMP protected JavaScript code.
    2
  • F
    license
    -
    quality
    D
    maintenance
    Provides secure execution of arbitrary JavaScript code within a sandboxed QuickJS WASM environment, allowing language models or other MCP clients to safely run JavaScript code snippets without compromising the host system.
    4
  • A
    license
    A
    quality
    C
    maintenance
    Cross-repository code knowledge graph MCP server for Java, Kotlin, JavaScript, and TypeScript. Indexes source code into embedded KuzuDB via tree-sitter and exposes 30+ tools for call-flow tracing, multi-hop taint analysis (OWASP/CWE/PCI/STIG), entry-point reachability filtering, performance hotspot detection, and license compliance — without reading source files. 95% fewer tokens vs source-read
    33
    1
    MIT