"NEC" matching MCP servers:

Enables AI agents to perform passive security scans on domains, checking email spoofing (DMARC/SPF/DKIM), TLS weaknesses, security headers, exposed files, and subdomain-takeover risk without needing an API key.

Enables AI clients to perform controlled diagnostics and configuration of Keenetic and Netcraze routers over LAN RCI or remote KeenDNS HTTPS, with read-only mode, guarded writes, and centralized secret masking.

Enables an AI agent to run a deterministic six-phase security and CVE audit of *.space.fast and drop.fast deployments, covering dependency inventory enriched with OSV, cve.now, CISA KEV and EPSS, secret and SAST scanning, live HTTP probes, and drift detection between local and deployed files. It returns fail-closed verdicts along with a unified diff remediation plan that can be applied after explicit user approval in the same chat session.

Enables deterministic auditing of agent skills, system prompts, and downloaded file collections against eight malicious-skill supply-chain patterns, returning line-numbered findings and pass/flag verdicts without using an LLM or network calls.

Enables LLMs and AI agents to perform defensive security posture assessments, privilege escalation surface audits, and post-quantum cryptography readiness checks through read-only diagnostic tools.

Enables AI assistants to connect to and manage Cisco IOS, Huawei VRP, and H3C Comware switches in natural language over Telnet, SSH, or serial console, with automatic vendor detection, pagination handling, and output sanitization. A companion real-time web console streams every command and device response live, and an optional hardened entry point adds read-only whitelists, approval codes, host allowlists, secret masking, and JSONL audit logging.

Enables AI agents to keep append-only, hash-chained audit ledgers of their work — starting a ledger, appending steps, verifying each link and reporting the first broken line, and replaying entries in order — so users can confirm what an agent claims it did was never edited. Also replays game recordings through versioned deterministic kernels and reports whether their chain head is reproduced, not reproduced, or broken.

Self-hostable MCP server for WhisperGraph — a graph of 7.39B nodes / 39B edges mapping DNS, BGP, GeoIP, WHOIS, and threat intelligence. Six read-only tools (Cypher query + schema introspection + threat assessment), six resources, eight investigation prompts. stdio and Streamable HTTP transports.

Enables passive security scanning of HAR files from QA test automation to detect missing security headers, insecure cookies, CORS misconfigurations, and leaked secrets, without making any live requests.

Look up any IP address with FindIP: geolocation, network and ASN, and VPN, proxy, Tor and datacenter detection. For websites that use FindIP Shield, list the recent risky visitor events and explain the reasons behind one event.

Enables agentic coding clients to enforce portable policy guardrails by evaluating proposed shell, file write, git, and network actions and returning allow, deny, or ask decisions.

Enables LLM-based assistants to diagnose network problems from PCAP/PCAPNG packet captures, offering tools for capture summaries, TCP conversation analysis, security anomaly detection, and JSON-RPC extraction without requiring Wireshark.

Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.

A Model Context Protocol (MCP) server for Kerberos abuse operations using Rubeus on Windows or Impacket on Linux/macOS.

Provides programmatic access to Mimikatz for credential extraction, Kerberos attacks, SAM/LSA dumping, and other Windows security assessment tasks through natural language.

An MCP server that provides AI assistants with access to CrackMapExec/NetExec network penetration testing capabilities via SSH to a Kali Linux host, supporting multiple protocols for enumeration, credential dumping, and command execution.

Enables AI-assisted vulnerability management by connecting Claude Desktop to local Nessus and Tenable Vulnerability Management, allowing natural-language queries for scan management, threat intelligence enrichment, and prioritized remediation planning.

MCP server for Technical SEO DNS record auditing, SOA expiry health checks, SSL/TLS inspection, and HTTP security header analysis. Enables comprehensive security audits and scoring via 10 tools.

Provides a zero-install security baseline for AI coding agents, with tools to retrieve curated security rules and check actions against them for self-correction.

Exposes Lacework API v2 alert operations as MCP tools, allowing AI agents to list, search, and manage alerts with flexible time ranges and authentication.

MCP server for searching NIST's National Vulnerability Database, enabling retrieval of recent CVEs, keyword/CPE/CWE searches, and detailed CVE information.

Enables Windows-native malware analysis and reverse engineering inside Flare-VM by exposing 50 tools for static and dynamic analysis, memory injection scanning, debugging, network simulation, and automated triage playbooks without requiring a Kali Linux host, WinRM, or SMB shares.

Presents a plausible, tool-rich workspace surface — file reading, credential listing, command execution, database queries, and configuration retrieval — that returns only synthetic results while logging every connection, tool call, and argument received. It enables researchers to measure what MCP clients and agents actually do when handed dangerous-sounding tools, including whether they follow injected instructions or complete a retrieve-then-use credential chain.

Enables blockchain security analysis using GoPlus Security API, providing rug pull detection, phishing site detection, NFT security analysis, and token security assessment across 14+ blockchain networks. Supports comprehensive security analysis for addresses, tokens, and smart contracts through natural language queries.

Enables AI agents to perform safe, authorized penetration testing by managing engagements, enforcing scope and risk policies, and orchestrating tools like Nmap, Nuclei, and Subfinder.