Skip to main content
Glama
72,300 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"OWASP" matching MCP servers:

  • owasp-mcp-scan

    CodingSelim
    A
    license
    -
    quality
    B
    maintenance
    Passive security scanner that audits a running MCP server against the OWASP MCP Top 10 and grades it A-F. Read-only static analysis of the advertised tools, prompts and resources with console/JSON/SARIF output, and it also runs as an MCP server itself.
    75
    MIT

  • bawbel-mcp

    bawbel
    A
    license
    A
    quality
    A
    maintenance
    Bawbel MCP Server lets any agent scan MCP servers and skill files for security vulnerabilities mid-conversation. Seven tools covering server-card scanning, conformance scoring, rug pull detection, and AVE threat intelligence queries. Powered by the AVE standard with OWASP MCP Top 10 mapping on every finding. Free, Apache 2.0, no API key required.
    10
    1
    Apache 2.0

  • WAF MCP Server

    KratosUAE
    A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to monitor, analyze, and configure OWASP ModSecurity CRS via Docker, with tools for overview, drill-down, and rule/IP management.
    15
    MIT
  • @squirex.dev/mcp-server by SquireX-dev

    @squirex.dev/mcp-serverofficial

    SquireX-dev
    A
    license
    A
    quality
    D
    maintenance
    MCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.
    16
    34
    Cryptographic Autonomy 1.0 (Combined Work Exception)

  • nemesis-shield

    eobi
    A
    license
    A
    quality
    B
    maintenance
    A Model Context Protocol server that gives AI coding agents 16 tools to secure what they build: install the one-line Nemesis Shield SDK, learn/approve/enforce app protection, put a domain behind a Cloudflare-like edge, guard LLMs (OWASP LLM Top 10), and create + score Omniguard business-logic fraud rules. Runs locally over stdio; the discovery tools work with no account.
    16
    0
    MIT

  • Orihime

    srinivasan-sundaresan95
    A
    license
    A
    quality
    C
    maintenance
    Cross-repository code knowledge graph MCP server for Java, Kotlin, JavaScript, and TypeScript. Indexes source code into embedded KuzuDB via tree-sitter and exposes 30+ tools for call-flow tracing, multi-hop taint analysis (OWASP/CWE/PCI/STIG), entry-point reachability filtering, performance hotspot detection, and license compliance — without reading source files. 95% fewer tokens vs source-read
    33
    1
    MIT

  • security-framework-mcp

    zer0-kr
    A
    license
    A
    quality
    D
    maintenance
    Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.
    41
    12
    MIT

  • Security Context MCP Server

    abreed05
    A
    license
    A
    quality
    D
    maintenance
    Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.
    4
    1
    MIT

  • AgentGate

    agentkitai
    A
    license
    A
    quality
    A
    maintenance
    Human-in-the-loop approval gateway for agent tool calls: agents request, policies decide, humans approve via Slack/Discord/web — with an OWASP-LLM-Top-10-tagged audit trail. Self-hostable.
    10
    18
    30
    MIT

  • MCP-Shield Pro

    tonysheesh
    F
    license
    A
    quality
    C
    maintenance
    Enterprise-grade zero-dependency security shield and runtime governance engine for MCP servers, providing OWASP MCP Top 10 audits, cryptographic tool call signing, AIBOM generation, and inline parameter firewall protection.
    3

  • DevSecOps MCP Server

    JesusDavidQuarksoft
    A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    6
    MIT

  • BLT-MCP

    OWASP-BLT
    A
    license
    B
    quality
    D
    maintenance
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    4
    9
    AGPL 3.0

  • VA-MCP

    KTTechUp-Team304
    F
    license
    B
    quality
    B
    maintenance
    An MCP server for checking OWASP Top 10 vulnerabilities during API development testing. It analyzes API information and returns security assessment results to help developers identify potential security issues.
    2
    1

  • mcp-hardened

    Nu1lstep
    A
    license
    B
    quality
    B
    maintenance
    A deliberately small MCP server that demonstrates security hardening against the OWASP MCP Top 10 with tools for file search, record queries, and document fetching, each defended against path traversal, SQL injection, and SSRF.
    4
    MIT

  • MEOK MCP Hardening MCP

    CSOAI-ORG
    A
    license
    B
    quality
    B
    maintenance
    Automated security red-team for any MCP server that scans manifests against OWASP LLM Top 10 and MCP-specific risks, returning a 0-100 hardening score and HMAC-signed report.
    7
    MIT

  • VulneraMCP

    telmon95
    A
    license
    B
    quality
    A
    maintenance
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    47
    38
    MIT

  • aegis-crew

    pvfOliveira
    A
    license
    B
    quality
    A
    maintenance
    A secure MCP server enabling tool calls (kb_search, read_doc, publish_report) through a zero-trust CapabilityBroker with OWASP LLM Top-10 guardrails and human-in-the-loop approval.
    3
    Apache 2.0