"Security testing and vulnerability assessment of MCP Server execution functions" matching MCP servers:

Enables accessibility testing of websites and HTML content using axe-core and IBM Equal Access engines. Supports WCAG compliance checking, multi-viewport testing, and provides detailed violation reports with remediation guidance.

An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: * HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy * HTTPS enforcement and redirect chain depth * Presence of security.txt, robots.txt, sitemap.xml Payment model: * 0.05 USDC per scan, paid automatically on Base via the x402 proto

A production-ready MCP server that provides AI agents secure access to Exa web search with OAuth-based authentication, scoping, and auditing via ScaleKit.

Enables LLMs to perform browser automation tasks including web scraping, taking screenshots, and executing JavaScript using Playwright. It facilitates real-time interaction with web pages and the generation of automated test code.

Enables comprehensive WCAG 2.0/2.1 accessibility testing of web applications using Playwright and axe-core. Supports natural language element finding, auto-discovery of interactive components, and generates detailed compliance reports with screenshots.

An MCP server that integrates multiple security and reconnaissance tools (Nmap, Cariddi, ParamSpider, Metasploit, web scraping) for AI systems, enabling automated network scanning, API discovery, vulnerability testing, and remote access via ngrok.

A production-ready HTTP API server for security testing and reconnaissance, integrating nmap, cariddi, paramspider, metasploit, and web scraping via FastAPI. It supports optional ngrok tunneling and exposes tools through REST endpoints.

Enables discovery of a company's public feature board (Canny, Featurebase, Frill, UserVoice, Productboard) from its domain and retrieval of its most-voted requests with votes, status, comments, and the integrations customers ask for. Supports monitoring runs that surface only new requests, status changes, and vote jumps since a prior run using a saved state key.

Complete Vinted MCP and CLI Server

A lightweight MCP server for browser automation using Playwright with essential tools for navigation, form interaction, and web scraping. Provides 16 core browser automation tools with minimal setup and fast performance.

MCP server exposing 30 tools for League of Legends player analysis, match review, and training-plan generation.

Lets an MCP client list and read pages a user has explicitly shared from a running Firefox session, including visible job listings and recruiter conversations, and search for text within those pages. Access is read-only, granted per page for 30 minutes from the toolbar, and ends on navigation, reload, tab closure, revocation, or client disconnect.

Aggregates security research articles from WeChat, QAX Butian, and Xianzhi community, with optional KimiCode web search. Supports smart deduplication, article fetching, and anti-bot measures.

Enables AI assistants to access PSG College of Technology e-campus portal data including CA marks, attendance records, timetable schedules, and course information through natural language queries.

Validates URLs and checks their reputation to help identify AI hallucinations and verify web page authenticity.

Classifies company sites as B2B or B2C and as SaaS, online store, agency, manufacturer, wholesaler, distributor, or marketplace, while matching your own buyer phrases and returning the quoted text and page as evidence. Runs deterministically on Apify, giving one row per domain with grace-free status rows for unreachable, blocked, or empty sites.

Enables users to search Reddit by keyword or subreddit, read thread URLs with comments, filter and sort results, and receive flat post and comment rows without needing a Reddit login or API key.

Enables querying Shopify App Store apps and Chrome Web Store extensions by category, keyword, or listing URL, returning ratings, reviews, pricing or user counts, and developer website, domain, address, and email. Filters by minimum rating or reviews and produces one row per listing ready for outreach or enrichment.

Enables users to convert a vendor partner directory (such as PartnerPage or the Shopify Partner Directory) or a trade body member list into one company row per listing, each carrying website, domain, tier, tags, and location for Clay-ready output. It runs the extraction on Apify, returning dataset rows for up to 20 directory URLs with optional deduping, detail enrichment, and a cost cap.

Enables users to check Google organic, map pack, and local finder positions for keywords across specified locations, returning per keyword/location rows with ratings, competitors, and rank changes. It runs searches from each location via Apify and can track history with a state key.

Enables users to turn beats or topics into a ready media list by finding recent news articles, reading their bylines, and returning one row per journalist with name, outlet, author page, article count, latest article, and proof links. Runs the work on Apify and supports filters for date range, country, language, outlet domains, and minimum article counts.

Given a company domain or name, it checks ten app marketplaces — HubSpot, Salesforce AppExchange, Slack, Zapier, Shopify, Atlassian, Chrome Web Store, Microsoft, Google Workspace, and WordPress — to report where the company is listed, with each listing's URL, installs, rating, review count, and match confidence. Useful for competitive research and partner-ecosystem audits across many domains in a single run.

Give it a product and a country and it searches Google for manufacturers, wholesalers, and distributors, reads each candidate company's own website, and returns only the ones whose pages back up the claim, with quoted evidence, the domain, and a confidence score. Directories, marketplaces, and social networks are filtered out, and a free summary row reports how many sites were found and checked when nothing qualifies.

Enables monitoring Google News for companies, brands, people, or topics, returning one row per article with headline, outlet, date, publisher URL, and a headline sentiment label. Supports watch-list state keys so repeat calls surface only articles that haven't been returned before, with a free summary row explaining empty runs.

Enables users to pull portfolio company lists from Y Combinator, a16z, Sequoia, Accel, and other investors or any portfolio page URL, returning one row per company with name, domain, website, description, and stage or batch. Runs on Apify and produces Clay-ready output, with YC results filterable by batch, industry, region, status, and search terms.

Enables watching competitor Shopify, WooCommerce, and SaaS pricing and changelog pages, returning only what changed since the last run as price, stock, product, plan, and changelog diffs. Runs on Apify with per-event pricing and saved state keys for separate baselines.

An MCP-native pipeline for collecting structured intelligence on higher education institutions using the WHED schema, enabling scraping, extraction, validation, and saving of profiles.

A fault-tolerant, stealth-enabled Model Context Protocol (MCP) server for web searching and content fetching. Built for AI Agents (Cursor, Claude Code, OpenCode), it uses a stealth browser engine to fetch pages, dynamically handles SPAs/React, and converts bloat into token-optimized Markdown.

📈 提供股票、加密货币的数据查询和分析功能MCP服务器

Enables web search via Serper API with advanced search operators and webpage scraping capabilities to extract content in plain text or markdown format.