"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

A TypeScript implementation of a Model Context Protocol server that enables language models to securely query PostgreSQL databases, including those behind SSH bastion tunnels.

Unofficial Powershell MCP server

Enables an AI agent to operate a spare Android phone through MCP: capture screenshots, inspect UI controls, tap/swipe, input Chinese text, launch apps, and optionally run rooted shell commands or transfer files. It also supports a live web console for remote viewing and control.

Self-hosted MCP coding server and unified local Control Center for ChatGPT web, enabling file editing, command execution, Git operations, and optional upstream MCP tools with conversation access controls.

MCP server that gives AI agents isolated, named Linux computers with stable IDs and lifecycle control. Supports multiple backends like Docker, Fly Machines, Modal, and E2B, with a dashboard for managing sandboxes.

Enables AI agents to execute SSH commands, read files, and list directories on remote hosts with a configurable command-safety policy.

MCP server for running shell commands on a Linux development board via UART serial.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

Enables a Claude Code cloud session to run shell commands inside a chroot jail on your own computer and to call the MCP servers already installed there, with every request authenticated and relayed over a Cloudflare quick tunnel so no router port is opened and no SSH key or tunnel is ever handed to the cloud VM.

An MCP (Multi-Agent Conversation Protocol) server that enables interaction with Google's Managed Service for Microsoft Active Directory through its OpenAPI, allowing users to manage identity resources through natural language.

An MCP server that enables secure terminal command execution, directory navigation, and file system operations through a standardized interface for LLMs.

An MCP server that provides tools to interact with CLI applications, enabling process management including start, stop, check status, send input, and read output.

Enables AI clients to securely execute remote commands and transfer files over SSH through standardized MCP tools, with multi-host management, flexible authentication, and an admin console.

Enables running planned batches of shell commands in parallel locally or over SSH, with dependency ordering, timeouts, cancellation, and per-task result collection.

Enables agents to use secrets without exposing them, by injecting values into commands and redacting them from all outputs and transcripts.

Enables file operations and bash command execution on the local workspace, securely exposed to ChatGPT via OpenAI Tunnel.

A server that enables programmatic interaction with an already running Abaqus/CAE GUI application, allowing users to execute Python scripts and retrieve message logs through the Model Context Protocol (MCP).

Give Claude direct access to your AWS account, SSH into your servers, run shell commands on your laptop, query your databases, and manage PM2 processes — all from a Claude chat. No Claude Code subscription needed. Your keys never leave your machine.

Enables a trusted operator to drive a Windows workstation remotely over OAuth-protected Streamable HTTP, running PowerShell commands and file edits with checkpoints, durable jobs, and native service support.

A throwaway Docker sandbox for agents to run code and shell commands safely.

A local MCP server that gives Claude in the browser tools to interact with a Fedora machine, including file operations, system diagnostics, build tasks, and root actions via Polkit.

Lets an AI agent work on a real Commodore Amiga over the home network: AmigaDOS Shell, files, ARexx, screenshots, mouse and keyboard, and windows, gadgets and menus by name. Includes a remote desktop to watch and take over, tuned for 68000 machines and slow links.

A cooperative guardrail for AI agents that blocks destructive shell commands, SQL statements, or cloud operations until a human approves them out-of-band, with a tamper-evident local ledger.

Provides AI coding agents with structured, evidence-based diagnostics about the local development environment, detecting tech stack, runtime mismatches, dependency state, services, ports, and Git status without exposing secrets or using network calls.

Enables AI agents to run shell commands, perform sandboxed file operations, and make HTTP requests through zero-trust guards that block command injection, path traversal, and SSRF while redacting secrets from inputs and outputs. Circuit breakers, per-session rate limits, and an append-only audit ledger prevent runaway loops, excessive token spend, and provide post-hoc traceability.

Enables interaction with MariaDB databases through secure read-only operations. Supports database exploration, schema inspection, and SQL query execution with comprehensive logging and connection pooling.

A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.

A server implementing Anthropic's Model Context Protocol (MCP) for Firebird SQL databases, enabling Claude and other LLMs to securely access, analyze, and manipulate data in Firebird databases through natural language.

A secure MCP server for Windows Subsystem for Linux environments, facilitating safe command execution with extensive validation and protection against vulnerabilities like shell injection and dangerous commands.