"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

A TypeScript implementation of a Model Context Protocol server that enables language models to securely query PostgreSQL databases, including those behind SSH bastion tunnels.

Provides secure filesystem access for AI models through the Model Context Protocol with strict path validation, file operations, directory management, and system command execution within predefined directories.

Enables an AI agent to operate a spare Android phone through MCP: capture screenshots, inspect UI controls, tap/swipe, input Chinese text, launch apps, and optionally run rooted shell commands or transfer files. It also supports a live web console for remote viewing and control.

MCP server that gives AI agents isolated, named Linux computers with stable IDs and lifecycle control. Supports multiple backends like Docker, Fly Machines, Modal, and E2B, with a dashboard for managing sandboxes.

Unofficial Powershell MCP server

Self-hosted MCP coding server and unified local Control Center for ChatGPT web, enabling file editing, command execution, Git operations, and optional upstream MCP tools with conversation access controls.

A self-hosted MCP server that enables AI coding agents to read, edit, search, and run code in local projects with human review loops and policy controls.

Enables AI agents to execute SSH commands, read files, and list directories on remote hosts with a configurable command-safety policy.

An MCP server that enables secure terminal command execution, directory navigation, and file system operations through a standardized interface for LLMs.

MCP server for running shell commands on a Linux development board via UART serial.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

A throwaway Docker sandbox for agents to run code and shell commands safely.

Enables a Claude Code cloud session to run shell commands inside a chroot jail on your own computer and to call the MCP servers already installed there, with every request authenticated and relayed over a Cloudflare quick tunnel so no router port is opened and no SSH key or tunnel is ever handed to the cloud VM.

An MCP (Multi-Agent Conversation Protocol) server that enables interaction with Google's Managed Service for Microsoft Active Directory through its OpenAPI, allowing users to manage identity resources through natural language.

An MCP server that provides tools to interact with CLI applications, enabling process management including start, stop, check status, send input, and read output.

Enables AI clients to securely execute remote commands and transfer files over SSH through standardized MCP tools, with multi-host management, flexible authentication, and an admin console.

Enables agents to use secrets without exposing them, by injecting values into commands and redacting them from all outputs and transcripts.

Enables file operations and bash command execution on the local workspace, securely exposed to ChatGPT via OpenAI Tunnel.

A server that enables programmatic interaction with an already running Abaqus/CAE GUI application, allowing users to execute Python scripts and retrieve message logs through the Model Context Protocol (MCP).