"A Kali Linux expert for security testing and vulnerability assessment" matching MCP servers:

Indexes commit history to create a queryable expert, providing insights into code evolution, developer intent, and hidden patterns beyond static code analysis.

Enables MCP-compatible AI clients to access local Linux files, run sandboxed commands and Git operations, capture screenshots, and manage authorized applications, with optional Unity and Blender integration.

Governed development control plane for VedaOps projects, letting authorized agents inspect, search, patch, test, lint, and coordinate registered software without exposing a general shell.

Analyzes codebases from local directories, GitHub, and Azure DevOps, providing intelligent context to AI coding assistants through repository structure, critical files, and semantic maps.

An MCP server that enables AI agents to perform comprehensive GitHub security audits across org settings, repositories, Actions workflows, secrets, supply chain, and access control using 39 tools and 45 checks.

Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.

Enables authenticated MCP clients to query Security Context tools against a git tag or commit ref while returning only vulnerabilities and fix fingerprints that predate that snapshot, so agents do not receive live bugs at the tag.

Odds are, most of what you want to build is already open source. Tell your AI agent what you're making, and it finds it: which repos to use as they are, which to adapt, and what's left for you to write. Every repo it names is real, licensed for your use or flagged, and checked live.

Enables read-only, evidence-led security audits of GitHub-hosted source code through explicit workflow primitives: repository reconnaissance, coverage-ledger planning, heuristic candidate leads, structured findings validation, independent verification gates, and JSON/Markdown report generation. It never clones, executes, or probes the target code, and marks runs incomplete until coverage and reviewer-verification gates pass.

Enables AI clients to audit GitHub repositories for Dependabot, code scanning, and secret scanning alerts, generate conservative remediation plans, and execute verified fixes through MCP tools with fail-closed mutation controls.

This MCP server enables users to sign in with GitHub and use AI agents to scan entire repositories for leaked secrets such as API keys, passwords, and tokens, delivering a report with the exact file and line plus remediation guidance.

Enables Codex and other MCP clients to read kickoff cards, acceptance criteria, Git evidence, and next steps, then append validated, audited progress events for resumable project handoffs.

Enables agents to read a project's kickoff card, acceptance criteria, AGENTS rules, handoff package, progress, Git trail, and next step, and to append validated, audited progress events with matching Git commits through short-lived scoped credentials.

Self-hosted MCP coding server and unified local Control Center for ChatGPT web, enabling file editing, command execution, Git operations, and optional upstream MCP tools with conversation access controls.

Enables Codex agents to read a project's kickoff card, acceptance criteria, handoff package, progress, Git trail and next step, then append validated, audited, idempotent progress events that become matching project-record Git commits. Access is scoped to one workspace and project through short-lived, revocable, hash-stored credentials that cannot touch members, keys, deletion, publication or deployment.

It enables AI agents to retrieve Git-backed project context, handoff packages, and next actions, then append validated, audited progress events as project-record commits.

It lets AI coding clients read a project’s kickoff card, acceptance criteria, AGENTS rules, handoff package, progress, Git trail, and next step, then append a validated, audited, idempotent progress event with a matching project-record Git commit.

Enables Codex to read a project's kickoff card, acceptance criteria, AGENTS rules, handoff package, progress, Git trail, and next step, and to append validated, audited, idempotent progress events with a matching Git commit.

Enables AI agents and humans to read a project's kickoff card, acceptance criteria, handoff package, progress, Git trail, and next step, then append audited, idempotent progress events that are committed to the project's Git record. Access is scoped per project through short-lived, revocable credentials, keeping high-risk actions outside the tool surface for human approval.

Enables users to safely read, write, edit, create directories, and list trees within a structured local Windows environment, with strict path validation and Git-based undo/version control.

Enables Codex projects to read Git-backed context, acceptance criteria, progress, and handoff packages, and to append validated, audited progress events with matching project-record commits.

Enables Codex users to retrieve Git-backed project context and append validated, audited progress events as matching Git commits, so work can resume safely across sessions.

Enables Codex agents to read a project's context — kickoff card, acceptance criteria, handoff package, progress, Git trail, and next step — over MCP, and to append one validated, audited, idempotent progress event that is committed to a Git-backed project record using scoped, short-lived credentials.

It reads a project's kickoff card, acceptance criteria, AGENTS rules, progress, Git trail, and handoff package, and appends validated, audited progress events tied to project-record Git commits. This gives Codex agents scoped, credential-bound access to resumable project context and safe handoffs.

Enables AI agents to read a project's kickoff card, acceptance criteria, AGENTS rules, handoff package, progress, Git trail, and next step, then append validated, audited, idempotent progress events that are recorded as a matching Git commit. This keeps project truth in Git so work stays visible, resumable, and safely handable between humans and agents through scoped, short-lived credentials.

Codebase Q&A agent with git-history awareness. Explore a repo with list_files, read_file, and search, plus git log, blame, and diff and a repo map to answer "why did this change?" questions. Runs locally as an MCP server for Claude Code and other MCP clients.

Manages isolated Git worktrees for each ZCode thread, enabling safe parallel development with automatic setup, snapshot-based removal, PR review, and background agent orchestration.

Enables users to manage self-hosted Git repositories from ChatGPT and compatible Codex clients via OAuth-secured connections, with independent browser approval for write actions. Supports repository, file, branch, issue, pull request, release, and workflow operations while excluding administrative tools.

A FastMCP-based server designed for the banking and fintech domains, providing tools for database queries, Git operations, and deployment management. It features a modular architecture with reusable prompt templates and integrated security practices for sensitive data handling.

Enables searching GitHub users and repositories, fetching details, and performing stock market technical analysis via AlphaVantage.