Skip to main content
Glama
36,632 servers. Last updated

Matching MCP tools:

Matching MCP Connectors:

"OWASP" matching MCP servers:

  • MCP ZAP Server

    dtkmn
    A
    license
    -
    quality
    C
    maintenance
    Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
    Last updated
    56
    Apache 2.0

  • wasp-mcp

    sfeeney1897
    A
    license
    A
    quality
    C
    maintenance
    A Model Context Protocol server that lets Claude query arbitrary webpages with token-efficient, structure-aware retrieval, reducing token costs by fetching only relevant sections.
    Last updated
    3
    MIT

  • bawbel-mcp

    bawbel
    A
    license
    A
    quality
    B
    maintenance
    Bawbel MCP Server lets any agent scan MCP servers and skill files for security vulnerabilities mid-conversation. Seven tools covering server-card scanning, conformance scoring, rug pull detection, and AVE threat intelligence queries. Powered by the AVE standard with OWASP MCP Top 10 mapping on every finding. Free, Apache 2.0, no API key required.
    Last updated
    10
    1
    Apache 2.0

  • Orihime

    srinivasan-sundaresan95
    A
    license
    A
    quality
    B
    maintenance
    Cross-repository code knowledge graph MCP server for Java, Kotlin, JavaScript, and TypeScript. Indexes source code into embedded KuzuDB via tree-sitter and exposes 30+ tools for call-flow tracing, multi-hop taint analysis (OWASP/CWE/PCI/STIG), entry-point reachability filtering, performance hotspot detection, and license compliance — without reading source files. 95% fewer tokens vs source-read
    Last updated
    33
    MIT

  • security-framework-mcp

    zer0-kr
    A
    license
    A
    quality
    B
    maintenance
    Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.
    Last updated
    41
    10
    MIT

  • Security Context MCP Server

    abreed05
    A
    license
    A
    quality
    D
    maintenance
    Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.
    Last updated
    4
    1
    MIT

  • DevSecOps MCP Server

    JesusDavidQuarksoft
    A
    license
    B
    quality
    D
    maintenance
    An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
    Last updated
    6
    MIT

  • BLT-MCP

    OWASP-BLT
    A
    license
    B
    quality
    D
    maintenance
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    Last updated
    4
    9
    AGPL 3.0

  • VA-MCP

    KTTechUp-Team304
    F
    license
    B
    quality
    B
    maintenance
    An MCP server for checking OWASP Top 10 vulnerabilities during API development testing. It analyzes API information and returns security assessment results to help developers identify potential security issues.
    Last updated
    2
    1

  • VulneraMCP

    telmon95
    A
    license
    B
    quality
    D
    maintenance
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    Last updated
    47
    33
    MIT

  • MCP Shamash

    NeoTecDigital
    F
    license
    B
    quality
    C
    maintenance
    Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.
    Last updated
    7

  • ZAP MCP Server

    LisBerndt
    A
    license
    -
    quality
    C
    maintenance
    Integrates OWASP ZAP security testing with AI assistants through MCP, enabling automated vulnerability scanning and AI-powered security analysis during development. Supports multiple scan types including active, passive, and AJAX spider scans with real-time status updates.
    Last updated
    5
    MIT