"A search for a string containing SQL injection and XSS payload characters" matching MCP servers:

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

A validation layer for AI coding assistants that enforces explicit LLM evaluations on plans, code diffs, and tests to ensure safer and higher-quality code.

MCP-first A/B testing server that enables agents to manage experiments (create, update traffic splits, read results, apply winning variants) from tools like Claude Code, with self-hosted Cloudflare backend.

MCP server that integrates sql-sop SQL linter into LLM clients, enabling linting SQL queries and listing lint rules via chat tools.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Provides a hand-written MCP server integrated with a LangGraph agent to benchmark multiple agent topologies and measure their failure rates.

Enables building and evaluating LangGraph agents over a protocol-level MCP server to measure failure rates across four agent topologies.

Generates a pytest suite from acceptance criteria withheld from the coding agent, so the tests can disagree with the code; qikly_run never returns the criteria. The CLI also scores an existing suite by planting faults, and ships as an agent Skill (qikly --install-skill). Runs locally (uvx --from "qikly[mcp]" qikly-mcp): your code and API key stay on your machine.

Enables controlled interception, review, and editing of web_search and fetch_page responses through a native desktop console, supporting live retrieval, synthetic or hybrid results, context sessions, and fault injection for AI agent robustness experiments.

Zero-dependency MCP server and CLI that proxies, inspects, and analyzes JSON-RPC message streams between MCP clients and servers.

Enables LLMs to interact directly with generated REST services by discovering and invoking CRUD tools and reading exposed resources for list and get-by-id data.

A shared, concurrency-safe ledger for LLM code audits. It enables multiple agents to collaboratively report, verify, and resolve bugs with deduplication and hallucination resistance.

Zero-sidecar MCP server embedded directly in the Godot 4 editor as a GDScript EditorPlugin — no Node or Python sidecar. Reflection-driven tools over any engine class, validate-before-write GDScript, scene/script/resource authoring, and a runtime play-test loop (play, screenshot, input, assert).

Validates .mcp.json and claude_desktop_config files to catch duplicate server names, missing binaries, invalid environment variables, and unreachable endpoints. Reports each problem along with how to fix it, so silently failing MCP servers can be diagnosed and repaired.

Enables users to query, create, update, and manage Digital.ai Agility assets through MCP tools, with secure Windows Credential Manager authentication and configurable write operations.

Enables AI assistants to operate directly inside a running Unity Editor project, creating scenes, generating scripts, simulating input, capturing screenshots, inspecting performance, and automating editor tasks through its built-in tools and resources.

Enables MCP clients to retrieve lab performance scores and field Core Web Vitals data for web pages via Google APIs.

Enables users to run synthetic support-agent evaluations, preserve and inspect traces, score results deterministically, inject failures, and enforce release review gates through MCP tools, resources, and prompts.

MCP server that brings Trustabl static reliability scanning into Cursor, letting agents inventory agents/tools, flag risky patterns, score production readiness, and write SARIF reports.

A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.