"A search query containing special characters and SQL injection-like encoding" matching MCP servers:

Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

A TypeScript implementation of a Model Context Protocol server that enables language models to securely query PostgreSQL databases, including those behind SSH bastion tunnels.

Enables AI agents to spawn, interact with, and orchestrate multiple concurrent terminal sessions via tmux.

Enables a Claude Code cloud session to run shell commands inside a chroot jail on your own computer and to call the MCP servers already installed there, with every request authenticated and relayed over a Cloudflare quick tunnel so no router port is opened and no SSH key or tunnel is ever handed to the cloud VM.

Provides secure filesystem access for AI models through the Model Context Protocol with strict path validation, file operations, directory management, and system command execution within predefined directories.

Enables AI clients to securely execute remote commands and transfer files over SSH through standardized MCP tools, with multi-host management, flexible authentication, and an admin console.

A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.

MCP server for running shell commands on a Linux development board via UART serial.

A self-hosted MCP server that enables AI coding agents to read, edit, search, and run code in local projects with human review loops and policy controls.

A cooperative guardrail for AI agents that blocks destructive shell commands, SQL statements, or cloud operations until a human approves them out-of-band, with a tamper-evident local ledger.

A production-ready MCP server that enables AI assistants to execute shell commands, manage files, monitor system resources, and automate complex workflows with advanced features like stock tracking and web automation.

An enhanced Model Context Protocol filesystem server that fixes common limitations and adds features like glob pattern search, head/tail reading, intelligent file editing with syntax validation, and new tools for delete and command execution.

Enables external agents to deliver queue, steer, and task messages to a running dsh web instance and query session status, with configurable trust and dangerous-command filtering.

Provides full control of a macOS system, enabling AI agents to execute shell commands, run AppleScript, manage files and processes, and perform human-like GUI interactions such as clicking, dragging, scrolling, and typing, with a screenshot-based perception loop.

An MCP server that provides OpenCode's native tools (file read/write/edit, search, shell, web fetch/search, and more) to compatible Code CLIs like Codex and Claude Code.

Comprehensive MCP server for filesystem operations, process management, interactive sessions, and async file search. Includes utilities for JSON repair, encoding fixes, duplicate detection, OCR, ZIP archives, and Markdown export.

A Model Context Protocol server that lets Windows-side AI agents operate on WSL distributions like a local environment, providing file read/write/edit, command execution, process management, log streaming, and content search via UNC paths and persistent shells.

Exposes local file I/O, a restricted shell whitelist, and SQLite helpers for safe integration with AI clients like Cursor and Claude Desktop.

Enables interaction with MariaDB databases through secure read-only operations. Supports database exploration, schema inspection, and SQL query execution with comprehensive logging and connection pooling.

Enables SSH remote command execution on any host using the system ssh binary, supporting existing configurations like ssh-agent, ProxyCommand, and jump hosts.