"Target" matching MCP servers:

An MCP server that provides cross-validated npm dependency fitness verdicts, including deprecation, malicious detection, and safe migration target inference.

Enables an agent to map MITRE ATT&CK techniques and actors to mitigating NIST 800-53r5 controls and severity-ordered DISA STIG fix/check steps for target systems. It answers questions about STIG mitigations, technique attribution, and applicable benchmarks once its local knowledge base is installed.

Enables checking URLs against PhishTank's phishing database, searching for phishing URLs by target or date, and retrieving phishing statistics, with built-in rate limiting and caching.

MCP server that enables LLMs to operate Acunetix/Invicti web vulnerability scanners through 15 tools, covering authentication, target management, scanning, vulnerability retrieval, and reporting via GraphQL and REST APIs.

Exposes the Firewalla MSP API as tools for Claude Code and other MCP clients, enabling natural-language management of Firewalla boxes, alarms, rules, devices, flows, target lists, and trends with full read/write capabilities.

Enables red-team and blue-team security workflows on BlackArch Linux by wrapping local tools like nmap, gobuster, nikto, and hydra as MCP tools, with scope-gating that prevents unauthorized scanning against any target not explicitly listed in a local scope.yaml file.

Enables read-only interaction with HackerOne, providing tools for searching and analyzing reports, exploring programs and scope, accessing earnings, and retrieving public disclosures.

A transparent proxy that intercepts high-risk tool calls and requires OTP-based human approval before they can be executed. It acts as a configurable circuit breaker between AI agents and target MCP servers to prevent unauthorized or dangerous actions.

An MCP server providing an append-only, hash-chained evidence ledger for agent actions, where every record is a tamper-evident receipt cryptographically bound to all prior records and persisted as human-readable JSONL local state. It exposes tools to append records, verify chain integrity (pinpointing tampering), query records by actor/action/target/time, and fetch ledger stats—with no update or delete capabilities by design.

Provides audit_plugin_health and prepare_semantic_review tools for deterministic inspection of Codex plugins and Agent Skills, generating evidence-backed reports without executing or transmitting target code.

MCP proxy server for SAP ABAP ADT that adds JWT authentication and forwards requests to target MCP servers.

Enables an agent to evaluate a target MCP server and verify attestations about it from inside the editor, using read-only, allowlisted tools that never send credentials.

A local observation-only MCP server for macOS that provides secure, atomic evidence capture with strict target approval and manifest-based output.

A collection of MCP servers for Kali Linux that empower AI Agents in reverse engineering and security testing, providing network analysis, target sniffing, traffic analysis, binary understanding, and automation capabilities.

A direct kernel debugger MCP server for Windows security research that connects to VM kernels via kdnet using DbgEng COM interfaces. It exposes over 60 tools for memory inspection, breakpoint management, and coordinated execution control between the host and target VM.

Enables AI assistants to orchestrate OSINT reconnaissance pipelines, including subdomain takeover detection, URL harvesting, secret scanning, and JS analysis, by chaining 73 tools with smart target detection and deduplication.

Enables authenticated access to an SSH server fleet and RAG knowledge base through MCP tools, with read-only checks running automatically and risky operations requiring human approval. Supports target registry IDs, policy enforcement, credential management, and hybrid knowledge search.

Provides AI assistants and MCP clients with API access to manage Firewalla MSP resources including boxes, devices, alarms, rules, flows, and target lists.

A FastMCP-based interface for Metasploit Framework, enabling AI agents to interact with Metasploit capabilities for exploitation, payload generation, target scanning, and session management.

Provides a 'scan_website' tool to analyze target websites for security vulnerabilities by consuming the Website Security Auditor REST API.