Print the OWASP-aligned check catalogue to support security audits and compliance.
MIT
605,840 tools. Updated 2026-09-24 05:25
"OWASP Dependency-Check" matching MCP tools:
- Scans codebases for security vulnerabilities including OWASP Top 10, ISO/IEC 27001, secrets, privacy compliance, and dependency issues.MIT
- Confirm Cognigate Runtime reachability via health endpoint, returning status, uptime, and dependency states (proof store, audit log, metrics). Pre-flight check before relying on remote governance operations.Apache 2.0
- Return server and dependency versions to verify the server is running and ensure version compatibility before using commit-check validation tools.MIT
- Scan Electron source code to detect dangerous patterns: shell.openExternal with user input, disabled webSecurity, missing navigation restrictions, and unrestricted window creation. Fix OWASP-style vulnerabilities before deployment.MIT
- Batch-verify package URLs in a single request to check dependency lists, lockfiles, or multiple candidates at once.MIT
Matching MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables MCP clients to query projects, fetch findings, trigger analysis, upload CycloneDX BOMs, and check async token status against an OWASP Dependency-Track instance via stdio.7 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables querying projects, fetching findings, triggering analysis, uploading CycloneDX BOMs, and checking async token status for OWASP Dependency-Track.7 npm1MIT
Matching MCP Connectors
OWASP MCP — keyless.
Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
- Retrieve OWASP category details by ID for mobile app security testing. Provides specific OWASP Mobile Top 10 information to identify vulnerabilities.MIT
- Check workspace binding, CLI dependency compatibility, persistent API-key status, approved models, and Canvas mode to confirm readiness without exposing secrets.MIT
- Remove a dependency from an issue by specifying the issue ID and the dependency ID.MIT
- Check Composer and npm dependency status to identify outdated or missing packages.MIT
- Sanitize and validate incoming API payloads against OWASP security rules while dynamically activating industry compliance profiles.MIT
- Add a dependency between two issues by specifying the relationship type ('blocks' or 'related'). Creates and returns the dependency row.MIT
- Check the liveness and health of the Run402 service by querying its public /health endpoint, which returns per-dependency status. No authentication required.MIT
- Assess a domain's externally observable OWASP posture: security headers, TLS, and version leaks. Get an A–F grade, with out-of-scope items explicitly flagged.MIT
- Scan MCP servers from registry or repository URL to detect vulnerabilities including tool poisoning, command injection, and data exfiltration. Maps results to OWASP Agentic and MCP Top 10.Apache 2.0
- Check credential vault status and loaded profiles to verify optional dependency availability without exposing secrets.MIT
- Fetch OWASP ZAP vulnerability alerts, filter by URL and risk level, and view risk details, solutions, and evidence.MIT
- Generate a security findings report by aggregating taint analysis results and mapping them to a compliance framework such as OWASP, CWE, PCI DSS, or STIG.MIT
- Removes a task dependency using its dependency ID. Retrieve the ID by listing dependencies first.ISCDestructive
- Search across indexed offline security knowledge bases from HackTricks, OWASP, and more. Retrieve ranked matches with source and snippet to ground answers in real documentation.MIT
- Audit npm packages by retrieving latest version, deprecation status, and weekly downloads from the npm registry for dependency health checks.MIT