"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

An MCP server for identifying SQL injection vulnerabilities in web applications using various techniques like error-based, time-based, and union-based scanning. It supports bulk URL processing, WAF bypass strategies, and authenticated testing across multiple database systems.

Enables security researchers to evaluate AI system defenses against prompt injection attacks through a comprehensive set of test vectors and analysis tools.

Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.

An MCP server for prompt injection boundary enforcement that scans URL content using a tiered LLM model strategy.

Blocks indirect prompt injection by tracking data provenance, not text patterns. Enables safe agent interaction with untrusted content.

Enables users to scan untrusted text, files, and directory trees for prompt-injection patterns and receive severity-ranked, explainable verdicts before content reaches an agent. It runs locally and returns clean, review, or blocked verdicts for safer agent input.

Demonstrates deceptive tool naming and unsanitized shell execution by exposing tools that perform OS fingerprinting and run local system commands through MCP. Intended for security research on vulnerabilities in the MCP ecosystem.

Enables natural-language querying and analysis of an e-commerce SQLite database via MCP, with read-only SQL execution, table inspection, and AI-generated answers.

Enables MCP clients such as GitHub Copilot, Codex, Claude... to explore a SQL Server 2017+ database read-only: databases, schemas, tables, views, procedures, functions, indexes and dependency graphs, plus filtered, grouped, sampled and paginated queries capped by row limits.

Runs SQL statements in memory against real PostgreSQL 18 and SQLite 3.49 engines after loading your schema and sample rows, returning each statement's own verdict: errors with line, column, and hints, constraint violations, or the resulting rows. It also compares both dialects to expose portability differences, all with no database server, network, or API key.

Enables AI clients to safely query PostgreSQL databases using plain English, with read-only access and built-in SQL safety checks.

Enables read-only SQL Server queries across multiple environments with secure keychain credential storage, catalog exploration, and built-in safety guards against destructive operations.

Provides read-only SQL Server access via MCP tools and a chat interface for natural-language database queries.

A governed SQL gateway that exposes typed tools to AI agents, compiling safe read-only queries from a semantic layer while blocking PII before execution, supporting SQL Server, Postgres, and SQLite.

Automatically scans SQLite databases and generates typed CRUD tools for each table, allowing natural language database interaction without exposing raw SQL.

Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

Formats SQL queries with support for 14 dialects, keyword casing, and tab width.

Enables AI assistants to safely explore and query MySQL, MariaDB, PostgreSQL, SQLite and StarRocks databases through read-only tools for schema listing, table description, schema search, row sampling, query execution, and plan explanation. Enforces least-privilege accounts, engine-level read-only sessions with timeouts, parsed SQL guardrails, and column masking so runaway or unsafe queries are refused.

A read-only MCP server for SQL Server and PostgreSQL that enables exploring and querying databases (schemas, tables, views, procedures, indexes, foreign keys) and running arbitrary SELECT queries.

An MCP server that connects LLMs to SQL databases for development assistance, enabling query execution, schema exploration, and data manipulation while providing safety controls against destructive operations.

An AI-powered SQLite assistant that converts natural language to SQL queries with full schema awareness, enabling users to interact with databases using conversational language.

WAF for AI agents — block prompt injection before it reaches the LLM.

A Model Context Protocol server that provides a standardized interface for interacting with SQL databases through the MCP protocol.

A Model Context Protocol server that provides AI assistants with comprehensive access to SQL databases, enabling schema inspection, query execution, and database operations with enterprise-grade security.

An extensible read-only MCP server for SQL databases, enabling schema exploration and safe SELECT queries via tools like list_schemas, list_tables, describe_table, and execute_query.

Enables an LLM agent to write and execute checked read-only SQL against databases containing personal data while receiving tokens instead of declared personal values, so it can still compare, group, count, and join without seeing the underlying data.

MCP server for querying H3Yun SQL data, enabling AI to execute read-only SQL queries and troubleshoot H3Yun business issues.

Enables AI agents to explore MySQL database schemas as structured models, inspect tables, columns, keys, revisions, and generate migration scripts through a read-only interface that never exposes row data or write access.

Enables static, database-free SQL health checks that return rule-based findings and verdicts, propose executable fixes, and verify rewrites are equivalent while comparing execution plans and suggesting indexes. Supports batch/file/git-diff review for CI gating, all at zero-dependency Tier0.

A Model Context Protocol server for interacting with MSSQL and PostgreSQL databases, offering tools for schema exploration and SQL execution. It features configurable query modes for safety and supports advanced authentication methods like Windows Auth and SSL.