Skip to main content
Glama
72,300 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"OWASP" matching MCP servers:

  • qai-consultant-mcp

    gvasile29
    A
    license
    A
    quality
    A
    maintenance
    Keyless, local MCP server bringing ISTQB / OWASP / IEEE / ISO / EU AI Act QA standards into your AI client. Standards-grounded retrieval, deterministic QA effort estimation, automated QA document quality review (0-100 rubric), and JUnit/CSV test-results flakiness analysis.
    2
    5
    4
    Apache 2.0
  • @squirex.dev/mcp-server by SquireX-dev

    @squirex.dev/mcp-serverofficial

    SquireX-dev
    A
    license
    A
    quality
    D
    maintenance
    MCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.
    16
    34
    Cryptographic Autonomy 1.0 (Combined Work Exception)

  • DevSecOps MCP Server

    JesusDavidQuarksoft
    A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    6
    MIT

  • BLT-MCP

    OWASP-BLT
    A
    license
    B
    quality
    D
    maintenance
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    4
    9
    AGPL 3.0

  • VA-MCP

    KTTechUp-Team304
    F
    license
    B
    quality
    B
    maintenance
    An MCP server for checking OWASP Top 10 vulnerabilities during API development testing. It analyzes API information and returns security assessment results to help developers identify potential security issues.
    2
    1

  • VulneraMCP

    telmon95
    A
    license
    B
    quality
    A
    maintenance
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    47
    38
    MIT

  • MCP Shamash

    NeoTecDigital
    F
    license
    B
    quality
    D
    maintenance
    Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.
    7

  • ZAP MCP Server

    LisBerndt
    A
    license
    -
    quality
    C
    maintenance
    Integrates OWASP ZAP security testing with AI assistants through MCP, enabling automated vulnerability scanning and AI-powered security analysis during development. Supports multiple scan types including active, passive, and AJAX spider scans with real-time status updates.
    5
    MIT

  • mcpwatch

    lazymac2x
    A
    license
    -
    quality
    C
    maintenance
    MCP server that audits other MCP servers. Run MCPWatch security scans from inside Claude Code or any MCP-compatible agent with 10 OWASP MCP Top 10 aligned checks and A-F letter grades.
    MIT

  • VSGuard MCP

    harn1shmodi
    A
    license
    -
    quality
    D
    maintenance
    Provides real-time OWASP ASVS security guidance and vulnerability scanning for AI coding agents. Enables proactive security during code generation by checking security requirements, scanning code for vulnerabilities, and suggesting secure code fixes.
    3
    MIT