#vulnerability

Zero-config security scanner for AI-generated apps. 25K+ vulnerability patterns. Works with Claude Code, Cursor and any MCP-compatible agent.

AI security intelligence on Base. Three paid MCP tools: CVE vulnerability lookup ($0.01), IP/domain reputation check ($0.01), and secret/credential scan ($0.05). Pay-per-call via x402 USDC on Base. No API keys required for callers. Hosted on Cloudflare Workers with per-tool x402 payment challenges.

Security intelligence MCP server with 29 tools. Domain recon + one-shot audit, CVE/EPSS/KEV lookup (340K+ CVEs), IP threat reports (AbuseIPDB + Shodan + ASN), bulk CVE/IOC lookups, IOC enrichment, SSL/email security scoring, code security scanning. Free tier 100 credits/hour, no API key required. 15+ GitHub stars, VS Code Marketplace extension, npm SDK, Smithery 98/100.

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

Security intelligence API for AI models. CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF detection), and code security checks (secrets, injection, headers). No API key required.

Security intelligence API for AI models. CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF detection), and code security checks (secrets, injection, headers). No API key required.

Security testing MCP server with 51 tools across 19 modules. Covers SQL injection, XSS, command injection, SSRF, path traversal, PCAP forensics, memory forensics (Volatility), reconnaissance, malware analysis, CloudTrail analysis, and more. Includes 8 methodology prompts for guided security workflows. Run via npx operant-mcp.

Security awareness for AI agents — so your agent knows what's dangerous before it acts. Powered by CVE, NVD, CISA KEV, and OSV.dev vulnerability data with 196 credential detection rules, returning allow/warn/block decisions in real time. Stop your agent from running vulnerable dependencies, leaking secrets, or accidentally deleting your filesystem.

Security scanner for AI agent skills. Detects credential theft, data exfiltration, prompt injection, reverse shells, dangerous capability combos, and hardcoded secrets. 14 rules, 80+ patterns, 22 secret detectors. Free API + CLI (npx skillaudit). Built by an AI agent.

SafeDep MCP Server protects AI coding agents from supply chain attacks by checking every open source package before installation. When your AI suggests a package, SafeDep validates it against our threat intelligence database, built from continuous scanning, behavioral analysis, and human security researcher verification. Malicious packages are blocked instantly. Safe packages install without friction. We detect threats in hours, not the 24-48 hours it takes for public disclosure. Same intelligence that caught Shai-Hulud and S1ngularity.

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

A Model Context Protocol (MCP) server that provides AI assistants with static code analysis capabilities using Joern's Code Property Graph (CPG) technology.

This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.

Python MCP server that allows interacting with the public ENISA vulnerability API (EUVDB) via the MCP (Model Context Protocol).

MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.

A lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis.

Model Context Protocol (MCP) server that provides tools for interacting with the Fluid API, enabling vulnerability management, organization insights, and GraphQL query execution.

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

MCP Server for Vulnerabilities based on OSV API

A Model Context Protocol (MCP) server for scanning IP addresses for vulnerabilities. This server provides tools to perform security scanning on individual IPs or multiple IPs at once.

MCP Server for using Garak LLM vulnerability scanner

Burp Suite Extension with MCP Server to enhance manual application security testing

Asterisk Model Context Protocol (MCP) server.