"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

MCP server that integrates sql-sop SQL linter into LLM clients, enabling linting SQL queries and listing lint rules via chat tools.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Enables building and evaluating LangGraph agents over a protocol-level MCP server to measure failure rates across four agent topologies.

Provides a hand-written MCP server integrated with a LangGraph agent to benchmark multiple agent topologies and measure their failure rates.

Enables LLMs to interact directly with generated REST services by discovering and invoking CRUD tools and reading exposed resources for list and get-by-id data.

Zero-sidecar MCP server embedded directly in the Godot 4 editor as a GDScript EditorPlugin — no Node or Python sidecar. Reflection-driven tools over any engine class, validate-before-write GDScript, scene/script/resource authoring, and a runtime play-test loop (play, screenshot, input, assert).

Enables checking npm packages for known security vulnerabilities using the OSV API before installation. Supports both single package checks and bulk vulnerability scanning for multiple packages at once.

Enables red-team testing of AI agents against indirect prompt injection by fuzzing payloads with delimiter evasion and Unicode homoglyphs, detecting exfiltration canaries, enforcing least-privilege tool boundaries, and producing cryptographic audit proofs.

Validates .mcp.json and claude_desktop_config files to catch duplicate server names, missing binaries, invalid environment variables, and unreachable endpoints. Reports each problem along with how to fix it, so silently failing MCP servers can be diagnosed and repaired.

Enables real-time indirect prompt injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs over MCP.

Enables users to query, create, update, and manage Digital.ai Agility assets through MCP tools, with secure Windows Credential Manager authentication and configurable write operations.

Enables AI assistants to operate directly inside a running Unity Editor project, creating scenes, generating scripts, simulating input, capturing screenshots, inspecting performance, and automating editor tasks through its built-in tools and resources.

Enables MCP clients to retrieve lab performance scores and field Core Web Vitals data for web pages via Google APIs.

MCP server that brings Trustabl static reliability scanning into Cursor, letting agents inventory agents/tools, flag risky patterns, score production readiness, and write SARIF reports.

Static security linter for MCP servers. Scans tool definitions for vulnerabilities (path traversal, SQL injection, SSRF), scores description quality, and auto-rewrites descriptions for safer agent tool selection.

Security scanner for AI agent packages that enables AI agents to audit MCP servers and packages for vulnerabilities, prompt injection, and supply chain attacks.

Enables real-time code analysis for JavaScript, TypeScript, and Python through Claude Desktop and other MCP clients, detecting bugs, code smells, and security vulnerabilities with automated quick fixes.

A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.

Checks MCP servers by URL, npm package, or official MCP Registry search, reporting availability, response speed, exposed tools, resources, and prompts. It flags changes since prior runs as breaking, warning, or info using saved snapshots.

Windows桌面截图与窗口自动化工具，支持后台操作、不抢焦点，可截取窗口/屏幕、模拟鼠标键盘、点击菜单等。

A security audit server for Laravel projects that performs static code analysis, dependency CVE checks, and configuration audits. It enables developers to detect vulnerabilities like SQL injection and XSS while providing active attack simulations directly within MCP-compatible IDEs.

Checks the outcome after an agent handoff, when a request, 200 or ack only shows the handoff. Reads one field of one exact public HTTPS JSON record, with a same-site known-good control, for 20-120 s. Returns PROVED, DISPROVED or INCONCLUSIVE with a signed receipt you can verify. 5 free checks, then USD 1 per completed check, by card (Stripe Checkout) or existing Link wallet. INCONCLUSIVE is free.

Enables comprehensive security scanning of code projects, detecting vulnerabilities in dependencies, code patterns (XSS, eval, etc.), and exposed secrets, with detailed reports in Spanish prioritized by severity.

A simple server implementing the Model Context Protocol (MCP) that echoes messages back, designed for testing MCP clients.

Provides a framework for running multiple MCP servers using FastAPI, stdio, and streamable-http transports, with an echo tool for testing and integration with MCP Inspector.

Bridges AI models with WinDbg to analyze Windows crash dumps and perform remote debugging through natural language queries, enabling execution of debugger commands and automated crash analysis.

Enables security scanning of code projects to identify common vulnerabilities like XSS, injections, SSRF, and path traversal issues. Provides local, offline scanning with severity-grouped results and actionable fix suggestions for improving code security.

Maps Electron app IPC handlers to MCP tools and provides 33 built-in CDP tools for DOM automation, screenshots, interaction, and debugging, enabling Claude Code to directly control your Electron app.

Enables LLMs to perform browser automation tasks including web scraping, taking screenshots, and executing JavaScript using Playwright. It facilitates real-time interaction with web pages and the generation of automated test code.

Enables users to run synthetic support-agent evaluations, preserve and inspect traces, score results deterministically, inject failures, and enforce release review gates through MCP tools, resources, and prompts.