"Security testing, penetration testing, and code auditing services" matching MCP servers:

• MCP Testing Assistant

  mcpassistant

  -

  security

  -

  license

  -

  quality

  Enables automated testing and coverage reporting for MCP services with test execution, file generation, and mock service creation. Provides comprehensive testing infrastructure including Jest integration, coverage reports, and health checks for the MCP ecosystem.

  Last updated 2025-09-02

• Security Testing MCP Server

  avi686

  -

  security

  F

  license

  -

  quality

  Provides penetration testing tools including nmap, nikto, sqlmap, wpscan, and exploit database searches for educational and authorized security testing purposes using Kali Linux tools.

  Last updated 2025-09-25

• Accessibility Testing MCP

  joe-watkins

  -

  security

  F

  license

  -

  quality

  Enables accessibility testing of websites and HTML content using axe-core and IBM Equal Access engines. Supports WCAG compliance checking, multi-viewport testing, and provides detailed violation reports with remediation guidance.

  Last updated 2025-12-07

  1

• API Testing MCP

  cocaxcode

  -

  security

  A

  license

  -

  quality

  A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.

  Last updated 2026-04-07

  1

  MIT

• MCP Frontend Testing Server

  StudentOfJS

  A

  security

  A

  license

  -

  quality

  Provides tools for frontend testing including code analysis, test generation, test execution, and React component testing for Jest and Cypress frameworks.

  Last updated 2025-04-24

  4

  26

  MIT

• Tox Testing MCP Server

  that1guy15

  A

  security

  F

  license

  -

  quality

  An MCP server that executes tox commands to run Python tests within a project using pytest, allowing users to run all tests or specific test groups, files, cases, or directories.

  Last updated 2025-01-19

  1

  5

• Professional Penetration

  AnGrY-Althaf

  -

  security

  F

  license

  -

  quality

  Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.

  Last updated 2026-03-02

• Local Testing Agent MCP Server

  marcelkurvers

  -

  security

  A

  license

  -

  quality

  A multi-language testing automation server that enables AI assistants to discover, plan, and execute tests across six major programming languages. It provides comprehensive tools for repository scanning, automated test execution, and detailed coverage reporting.

  Last updated 2025-12-12

  MIT

• Des MCP Server Testing MCP

  Traia-IO

  -

  security

  F

  license

  -

  quality

  A standardized MCP server designed for testing integration with the Des MCP Server Testing API. It allows AI agents to interact with testing endpoints using tools implemented via the Model Context Protocol.

  Last updated 2026-03-16

• Java Testing Agent

  ALGeek01

  -

  security

  F

  license

  -

  quality

  Automates Java Maven testing workflows with decision table-based test generation, security vulnerability scanning, JaCoCo coverage analysis, and Git automation.

  Last updated 2025-11-16

• Browser Testing MCP Server

  RomanGod6

  -

  security

  F

  license

  -

  quality

  Enables automated browser testing of web applications using Playwright, supporting user interactions, form submissions, console monitoring, network request inspection, and visual verification through screenshots.

  Last updated 2025-08-09

• AI-Driven Remediation Testing

  Purv123

  -

  security

  F

  license

  -

  quality

  Orchestrates end-to-end testing of AI-powered incident remediation workflows through declarative YAML scenarios, fault injection, AI response evaluation, and automated command execution with comprehensive reporting.

  Last updated 2025-12-07

• mcp-services

  san-npm

  -

  security

  A

  license

  -

  quality

  Multi-tool MCP server for AI agents with 29 tools across web scraping, SEO analysis, screenshot and PDF generation, domain intelligence, content extraction, multi-chain EVM blockchain queries, and security toolkit. Free tier available with no auth required.

  Last updated 2026-03-10

  54

  1

  MIT

• Kali Security MCP

  SeaC-25

  -

  security

  A

  license

  -

  quality

  Integrates 193 Kali Linux security tools with AI for intelligent penetration testing, CTF solving, and vulnerability assessment through automated workflows and expert knowledge base.

  Last updated 2026-03-27

  33

  MIT

• MCP Java Testing Agent

  amyfan7

  -

  security

  F

  license

  -

  quality

  Automates Java/Maven test generation, JaCoCo coverage analysis, and Checkstyle checking through MCP tools. Enables iterative improvement of test coverage and code style until quality goals are met.

  Last updated 2025-11-22

  1

• Network Security Control

  JoshDoesIT

  -

  security

  A

  license

  -

  quality

  Enables automated review and analysis of network security controls (AWS Security Groups, Network ACLs) using natural language queries. Supports NSC configuration reviews, network segmentation testing, and identifying security gaps through conversational LLM interaction.

  Last updated 2025-11-25

  MIT

• Playwright Accessibility

  PashaBoiko

  A

  security

  F

  license

  -

  quality

  Enables comprehensive WCAG 2.0/2.1 accessibility testing of web applications using Playwright and axe-core. Supports natural language element finding, auto-discovery of interactive components, and generates detailed compliance reports with screenshots.

  Last updated 2025-12-02

  2

• trust-security

  Jaden-JJH

  -

  security

  A

  license

  -

  quality

  Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

  Last updated 2026-04-13

  2

  MIT
• 

  Beagle Security MCP Serverofficial

  beaglesecurity

  A

  security

  A

  license

  -

  quality

  Enables integration with Beagle Security API for managing security testing projects, applications, domain verification, and automated penetration tests. Provides 18 tools for creating, monitoring, and retrieving results from security assessments.

  Last updated 2025-07-09

  17

  MIT
• 

  RAD Securityofficial

  rad-security

  A

  security

  A

  license

  -

  quality

  CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.

  Last updated 2026-03-19

  65

  42

  6

  MIT

• AWS Security MCP

  groovyBugify

  A

  security

  A

  license

  -

  quality

  A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, inspect, and analyze AWS infrastructure for security issues and misconfigurations.

  Last updated 2025-07-25

  82

  Apache 2.0

• MCP Security Scanner

  anntsmart

  -

  security

  F

  license

  -

  quality

  Automatically discovers and tests MCP services for security vulnerabilities including command injection, SQL injection, SSRF, path traversal, and sensitive data exposure with detailed reports and remediation guidance.

  Last updated 2025-12-19

  1

• MCP Unit Test Sensei

  kourtni

  -

  security

  F

  license

  -

  quality

  An MCP server that enforces unit testing standards by linting code and guiding agentic coding tools (like Gemini CLI or Claude Code) to follow best practices in test-driven development.

  Last updated 2025-07-26

  3

• MCP Security Scanner

  JMitac

  A

  security

  F

  license

  -

  quality

  Enables comprehensive security scanning of code projects, detecting vulnerabilities in dependencies, code patterns (XSS, eval, etc.), and exposed secrets, with detailed reports in Spanish prioritized by severity.

  Last updated 2025-12-09

  4

  6

• Security Scanner MCP

  ongjin

  -

  security

  A

  license

  -

  quality

  Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.

  Last updated 2025-12-29

  18

  2

  MIT

• Security-Use MCP Server

  security-use

  A

  security

  F

  license

  -

  quality

  Enables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.

  Last updated 2026-03-01

  18

  3

• vmware-nsx-security

  zw008

  A

  security

  F

  license

  A

  quality

  AI-powered VMware NSX DFW microsegmentation and security. Manage distributed firewall policies, security groups, Traceflow, and IDPS with 20 MCP tools.

  Last updated 2026-04-17

  20

• Game Services MCP Server

  ag2-mcp-servers

  -

  security

  F

  license

  -

  quality

  An MCP server that enables interaction with Google Cloud Game Services API, allowing users to manage game server deployments, realms, and configurations through natural language.

  Last updated 2025-07-16

  1

• Local Services MCP Server

  ag2-mcp-servers

  -

  security

  F

  license

  -

  quality

  A Multi-Agent Conversation Protocol Server that provides access to Google's Local Services API, enabling interaction with local service businesses information through natural language commands.

  Last updated 2025-07-16

• Security Scanner MCP Server

  rupeedev

  -

  security

  A

  license

  -

  quality

  Enables comprehensive security scanning of code repositories to detect secrets, vulnerabilities, dependency issues, and configuration problems. Provides real-time security checks and best practice recommendations to help developers identify and prevent security issues.

  Last updated 2025-08-07

  2

  2

  MIT

• Databricks MCP Server

  ksavchyn

  -

  security

  F

  license

  -

  quality

  Enables interaction with Databricks workspaces using On-Behalf-Of authentication to test connectivity, retrieve user information, and perform operations on behalf of authenticated users.

  Last updated 2025-11-20

  1

• Azure Security MCP Agent

  chouaieb161

  -

  security

  F

  license

  -

  quality

  An AI-powered security agent that utilizes MCP tools and Groq LLMs to analyze Azure infrastructure, audit security groups, and identify storage misconfigurations. It enables users to perform natural language security assessments and ensure compliance with CIS Azure best practices.

  Last updated 2026-02-13

• Security MCP Server

  nordeim

  -

  security

  F

  license

  -

  quality

  Provides AI agents like Claude with secure, controlled access to network security tools like nmap for scanning private networks and lab environments. Features comprehensive safety controls, circuit breakers, and production-ready monitoring.

  Last updated 2025-10-06

• MCP Security Audit Server

  qianniuspace

  A

  security

  A

  license

  -

  quality

  Audits npm package dependencies for security vulnerabilities, providing detailed reports and fix recommendations with MCP integration.

  Last updated 2025-07-18

  1

  225

  52

  MIT

• OCI Core Services FastMCP

  adibirzu

  -

  security

  -

  license

  -

  quality

  A dedicated server for Oracle Cloud Infrastructure (OCI) Core Services that enables management of compute instances and network operations with LLM-friendly structured responses.

  Last updated 2025-09-04

  1

  MIT

• Zypin MCP

  zypin-testing

  A

  security

  -

  license

  -

  quality

  A lightweight MCP server for browser automation using Playwright with essential tools for navigation, form interaction, and web scraping. Provides 16 core browser automation tools with minimal setup and fast performance.

  Last updated 2025-09-24

  16

• Security Scanner MCP Server

  marc-shade

  A

  security

  F

  license

  -

  quality

  Enables comprehensive vulnerability scanning using Nuclei scanner with support for single targets, network ranges, and cluster-wide security assessments with customizable severity levels and automated scheduling.

  Last updated 2026-02-22

  8

• GoPlus Security MCP Server

  protocoldaemon-sec

  -

  security

  F

  license

  -

  quality

  Enables blockchain security analysis using GoPlus Security API, providing rug pull detection, phishing site detection, NFT security analysis, and token security assessment across 14+ blockchain networks. Supports comprehensive security analysis for addresses, tokens, and smart contracts through natural language queries.

  Last updated 2025-10-08

  2

• NotebookLM MCP Server

  Pantheon-Security

  A

  security

  A

  license

  -

  quality

  Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

  Last updated 2026-03-28

  31

  102

  39

  MIT

• MCP Cloud Services Server

  code-alchemist01

  A

  security

  A

  license

  -

  quality

  Enables AI assistants to manage multi-cloud resources (AWS, Azure, GCP) including resource operations, cost analysis, monitoring metrics, and security compliance checks through natural language commands.

  Last updated 2025-11-15

  26

  2

  3

  MIT

• SyntaAI SAP Security MCP

  SYNTAAI

  -

  security

  A

  license

  -

  quality

  Enables AI assistants to perform real-time SAP security audits and risk assessments by analyzing user roles, system parameters, and segregation of duties via RFC integration. It provides 17 specialized tools for monitoring security compliance and generating comprehensive audit reports directly from SAP systems.

  Last updated 2026-03-10

  2

  Apache 2.0

• Shrike Security MCP Server

  Shrike-Security

  A

  security

  A

  license

  -

  quality

  Protects AI agents from threats like prompt injection, jailbreaks, and SQL injection through a multi-layer scanning pipeline. It also enables PII redaction and rehydration to ensure data privacy during LLM interactions.

  Last updated 2026-03-27

  7

  30

  1

  Apache 2.0

• base-security-scanner-mcp

  lordbasilaiassistant-sudo

  A

  security

  F

  license

  A

  quality

  Smart contract security scanner for Base. Detect honeypots, rug pulls, hidden mints, proxy dangers, and generate audit reports.

  Last updated 2026-03-07

  8

  26

  1

• HHS Media Services API MCP

  ag2-mcp-servers

  -

  security

  F

  license

  -

  quality

  A Multi-Agent Conversation Protocol Server that provides a natural language interface to the U.S. Department of Health & Human Services (HHS) Media Services API, allowing users to access health-related data and media resources through conversational AI.

  Last updated 2025-07-16

• Smart Code Reviewer

  renjismzy

  A

  security

  A

  license

  -

  quality

  Enables comprehensive code analysis including quality assessment, security vulnerability detection, refactoring suggestions, complexity calculations, and automatic documentation generation for multiple programming languages.

  Last updated 2025-08-14

  5

  MIT

• Code-MCP

  millsydotdev

  A

  security

  F

  license

  -

  quality

  Turns AI assistants into full-stack software engineers with 36 tools for cognitive reasoning, code validation, project scaffolding, and AI/IDE configuration generation across 130+ programming languages, databases, and frameworks.

  Last updated 2025-12-08

  35

  15

  MIT

• Playwright MCP Server for

  o0x1024

  -

  security

  A

  license

  -

  quality

  Enables LLMs to perform browser automation tasks including web scraping, taking screenshots, and executing JavaScript using Playwright. It facilitates real-time interaction with web pages and the generation of automated test code.

  Last updated 2025-12-19

  4

  MIT

• mcp-server-security-snapshot

  Seiya-wasabi

  A

  security

  A

  license

  A

  quality

  An MCP server that gives Claude and other AI agents the ability to audit any public URL's HTTP security headers. What it checks: * HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy * HTTPS enforcement and redirect chain depth * Presence of security.txt, robots.txt, sitemap.xml Payment model: * 0.05 USDC per scan, paid automatically on Base via the x402 proto

  Last updated 2026-03-21

  2

  2

  MIT

• Echo MCP Server

  piebro

  A

  security

  A

  license

  -

  quality

  A simple server implementing the Model Context Protocol (MCP) that echoes messages back, designed for testing MCP clients.

  Last updated 2025-04-17

  1

  2

  MIT

• MCP Security Tools Suite

  Ap6pack

  -

  security

  -

  license

  -

  quality

  Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.

  Last updated 2025-08-30