"An open-source penetration testing framework" matching MCP servers:

A high-performance MCP server providing up-to-date documentation for Go, npm, Python, Rust, Docker, Kubernetes, Terraform, and more — fetched from official sources, not training data.

Lets AI agents see and control desktop applications through the accessibility layer, enabling clicking, typing, scrolling, dragging, and window/app management across macOS, Windows, and Linux entirely on the local machine.

MCP server that enables AI assistants to drive systematic literature review workflows, including screening, downloading, converting, and reviewing papers through natural language conversation.

Enables AI agents to interact with real terminal sessions across local and remote hosts, driving multi-turn interactive programs like TUIs, REPLs, and SSH prompts through MCP.

Model Context Protocol (MCP) server for GitLab — exposes 1006 GitLab REST & GraphQL API operations as MCP tools (42 meta-tools / 57 enterprise), 24 resources, 38 prompts, and 17 completion types for AI assistants. Written in Go, single static binary, stdio and HTTP transport.

Radar is an open-source Kubernetes observability and diagnostics MCP server. It exposes cluster health, workload diagnosis, logs, events, topology, audit findings, and remediation actions to AI agents through the Model Context Protocol.

Local, open-source multi-account MCP broker — one endpoint, every account. Add credentials once and switch identity without reconnecting, from any LLM client.

Read-only MCP tools for authenticated Open Science Framework projects, components, files, and contributors.

Connect Legacy Databases to AI Agents via Model Context Protocol. Open-source bridge for LLM data analysis.

Open-source MCP and LLM gateway that aggregates MCP tools behind a unified endpoint with governance, observability, and explicit execution controls.

Open-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers

Official MCP server built into Casdoor, the open-source identity and access management (IAM) and single sign-on (SSO) platform. It exposes Casdoor's users and applications as MCP tools over a JSON-RPC endpoint at /api/mcp, with per-tool authorization driven by OAuth scopes, and can also act as an MCP gateway that proxies and authorizes agent access to upstream MCP servers.

Open source SQL-native query and provisioning engine for cloud and SaaS infrastructure. Ships as a single signed binary with MCP tools for provider discovery, schema exploration, queries, and lifecycle operations.

Provides git-aware safe file operations, allowing AI agents to delete files while protecting git-tracked source code from accidental deletion.

Query WHOIS/RDAP information for domains, IP addresses, CIDR prefixes and ASNs. Results are normalized to RDAP-style (RFC 9083) JSON. Public instance of the open-source KincaidYang/whois server, which can also be self-hosted.

Description: Introduce Beelzebub, an MCP‑based honeypot framework that enables creating decoy tools to detect prompt injection and malicious agent behavior. Motivation: Strengthen the security of LLM workflows by adding a non‑intrusive detection mechanism.

An open-source MCP server that protects AI agents at runtime by evaluating every tool call against YAML policies and generating audit trails.

Source-code intelligence for agents, powered by OpenGrok and Go.

Perform DNS lookups, WHOIS queries, connectivity testing, TLS certificate analysis, HTTP endpoint monitoring, and hostname resolution, all from your trusty AI.

Enables AI agents to orchestrate 100+ security tools over MCP for authorized penetration testing, including recon, scanning, exploitation, attack-chain planning, and knowledge-base retrieval.