Skip to main content
Glama
60,013 servers. Last updated

Matching MCP tools:

Matching MCP Connectors:

"Known" matching MCP servers:

  • VulnFeed

    novadyne-hq
    A
    license
    A
    quality
    A
    maintenance
    An MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.
    Last updated
    9
    1
    MIT

  • OSV-Scanner-MCP

    tedorigawa001
    A
    license
    A
    quality
    B
    maintenance
    Enables scanning Java (Maven) projects for known vulnerabilities via natural language, returning severity-sorted reports with CVSS scores and fix versions.
    Last updated
    1
    229
    Apache 2.0

  • Code Firewall MCP

    egoughnour
    A
    license
    A
    quality
    C
    maintenance
    A security filter that blocks dangerous code patterns by comparing normalized structural syntax trees against a blacklist of known threats using vector embeddings. It acts as a gatekeeper to prevent malicious code execution by identifying dangerous structures regardless of specific identifiers or literals.
    Last updated
    11
    MIT
  • deptrust by clidey

    deptrustofficial

    clidey
    A
    license
    -
    quality
    B
    maintenance
    deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service to trust or configure.
    Last updated
    175
    52
    MIT

  • MCP-Sentinel

    RoshiniMlakshmana
    A
    license
    -
    quality
    C
    maintenance
    A safety guard for AI assistants that inspects actions (file reads, queries, etc.) and classifies them as SAFE, SUSPICIOUS, or BLOCK with explanations, using both known-attack patterns and behavior-based zero-day detection.
    Last updated
    MIT

  • GuardX

    harshzagade
    A
    license
    -
    quality
    B
    maintenance
    A keyless, defensive code-security auditor that scans codebases for hardcoded secrets, audits dependencies for known CVEs, and checks passwords against breach data using k-anonymity.
    Last updated
    1
    MIT

  • cisa-kev-mcp

    CSOAI-ORG
    A
    license
    -
    quality
    B
    maintenance
    MCP server to query and manage CISA Known Exploited Vulnerabilities catalog with EPSS overlay, enabling vulnerability checks and remediation deadline tracking.
    Last updated
    MIT

  • CVE Risk MCP Server

    sarveshkapre
    A
    license
    -
    quality
    C
    maintenance
    Enables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.
    Last updated
    MIT

  • Risky Business MCP Server

    khizar-anjum
    F
    license
    -
    quality
    D
    maintenance
    Enables comprehensive cybersecurity vulnerability assessment by searching GitHub repositories for exploits, querying NIST NVD for CVE details, and accessing CISA's Known Exploited Vulnerabilities catalog. Supports complete vulnerability research workflows from threat intelligence gathering to proof-of-concept discovery.
    Last updated
    4