Sanitize and validate incoming API payloads against OWASP security rules while dynamically activating industry compliance profiles.
MIT
457,387 tools. Updated 2026-08-14 10:25
"OWASP" matching MCP tools:
- Retrieve relevant grounding chunks from QA standards and knowledge bases including ISTQB, OWASP, IEEE, ISO, and the EU AI Act. Returns matching text, source, and category.Apache 2.0
- Analyzes Electron source code to detect dangerous patterns like shell.openExternal with user input, disabled webSecurity, and other OWASP-style vulnerabilities specific to Electron.MIT
- Retrieve OWASP category details by ID for mobile app security testing. Provides specific OWASP Mobile Top 10 information to identify vulnerabilities.MIT
- Validates proposed payloads against OWASP security rules and compliance profiles, rejecting non-compliant or malicious data before ingestion.MIT
- Generate a password policy document and validators (regex, JSON Schema, etc.) from your complexity constraints. Includes built-in compliance baselines such as NIST 800-63B and PCI DSS 4.0.MIT
Matching MCP Servers
- AlicenseAqualityAmaintenanceOWASP Agentic - MCP server providing AI-powered tools and automation by MEOK AI Labs5MIT
- Alicense-qualityCmaintenanceMCP server exposing the OWASP Web Security Testing Guide via semantic search and knowledge graph traversal.CC BY-SA 4.0
Matching MCP Connectors
OWASP MCP — keyless.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
- Scan project files for OWASP Top-10 vulnerabilities using pattern matching. Returns rule, severity, CWE, file, line, and message.MIT
- Run a comprehensive security scan on a repository using multiple parallel scanners to detect vulnerabilities, secrets, and dependency CVEs, and receive a deduplicated severity-ranked report.MIT
- Run a low-cost reality check on any claim to assess its plausibility and consistency. Receive a verdict, confidence score, and reasoning, with an abstention when uncertain.MIT
- Scan MCP servers from registry or repository URL to detect vulnerabilities including tool poisoning, command injection, and data exfiltration. Maps results to OWASP Agentic and MCP Top 10.Apache 2.0
- Map a regulatory requirement to its equivalents across frameworks such as EU AI Act, NIST AI RMF, and ISO 42001. See overlap strength and practitioner notes to reduce duplicate compliance work.Apache 2.0
- Scans an API against OWASP API Security Top 10 rules (BOLA, broken authentication, etc.) using an OpenAPI 3.x spec and returns a findings report with remediation hints.MIT
- Verify high-stakes claims via live web search and AI synthesis, returning verdict, confidence, reasoning, cited evidence; abstains rather than guessing.MIT
- Analyzes a user query to recommend the most helpful MCP servers and pre-built workflow templates, providing rationale and cost estimates for efficient tool selection.Apache 2.0
- Fetch OWASP ZAP vulnerability alerts, filter by URL and risk level, and view risk details, solutions, and evidence.MIT
- Track untrusted data flows from sources to dangerous sinks, flag unsanitized paths with CWE IDs and fix suggestions. Framework-aware triage for data-flow security analysis.MIT
- Generate a security findings report by aggregating taint analysis results and mapping them to a compliance framework such as OWASP, CWE, PCI DSS, or STIG.MIT
- Map security findings or observations to OWASP LLM Top 10 (2025) categories with rule-based keyword and regex matching, returning top matches with evidence snippets and confidence scores.MIT
- Search across indexed offline security knowledge bases from HackTricks, OWASP, and more. Retrieve ranked matches with source and snippet to ground answers in real documentation.MIT
- Send crafted requests to a target URL to actively discover vulnerabilities via OWASP ZAP. Returns scan status and alert count.MIT