OWASP MCP servers

"OWASP" matching MCP servers:

• OWASP Cheatsheets MCP Server

  santosomar

  -

  security

  A

  license

  -

  quality

  A minimal Model Context Protocol server that provides access to OWASP security cheat sheets through a simple HTTP API, enabling users to list, retrieve, and search security best practices.

  Last updated 8 months ago

  5

  GPL 3.0

• MCP Shamash

  NeoTecDigital

  A

  security

  F

  license

  A

  quality

  Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.

  Last updated 5 months ago

  7

• VulneraMCP

  telmon95

  A

  security

  A

  license

  A

  quality

  AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.

  Last updated 2 months ago

  47

  13

  MIT

• DevStandards MCP Server

  ivangrynenko

  -

  security

  F

  license

  -

  quality

  Provides AI agents with access to 284+ development best practices, security guidelines, and coding standards across multiple languages and frameworks including comprehensive Drupal standards and OWASP Top 10 vulnerabilities.

  Last updated 8 months ago

  2

• VSGuard MCP

  harn1shmodi

  -

  security

  A

  license

  -

  quality

  Provides real-time OWASP ASVS security guidance and vulnerability scanning for AI coding agents. Enables proactive security during code generation by checking security requirements, scanning code for vulnerabilities, and suggesting secure code fixes.

  Last updated 2 months ago

  3

  MIT

• ZAP MCP Server

  LisBerndt

  -

  security

  A

  license

  -

  quality

  Integrates OWASP ZAP security testing with AI assistants through MCP, enabling automated vulnerability scanning and AI-powered security analysis during development. Supports multiple scan types including active, passive, and AJAX spider scans with real-time status updates.

  Last updated 2 months ago

  3

  MIT