"OWASP" matching MCP servers:

• OWASP Cheatsheets MCP Server

  santosomar

  -

  security

  A

  license

  -

  quality

  A minimal Model Context Protocol server that provides access to OWASP security cheat sheets through a simple HTTP API, enabling users to list, retrieve, and search security best practices.

  Last updated a year ago

  5

  GPL 3.0

• MCP Shamash

  NeoTecDigital

  A

  security

  F

  license

  -

  quality

  Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.

  Last updated a month ago

  7

• BLT-MCP

  OWASP-BLT

  A

  security

  A

  license

  -

  quality

  Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.

  Last updated 13 days ago

  4

  9

  AGPL 3.0

• middleBrick

  middleBrick

  -

  security

  A

  license

  -

  quality

  Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

  Last updated 8 days ago

  4

  Apache 2.0

• VulneraMCP

  telmon95

  A

  security

  A

  license

  -

  quality

  AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.

  Last updated 4 months ago

  47

  26

  MIT

• DevStandards MCP Server

  ivangrynenko

  -

  security

  F

  license

  -

  quality

  Provides AI agents with access to 284+ development best practices, security guidelines, and coding standards across multiple languages and frameworks including comprehensive Drupal standards and OWASP Top 10 vulnerabilities.

  Last updated 10 months ago

  2