MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
🔍 Enable AI-driven network security scanning with a production-ready Nmap MCP server supporting diverse tools, scan types, and timing templates.
Apache-2.0 ★ 3 -
nmap-mcpgithub.com/Vorota-ai/nmap-mcpupdated this year
MCP server for AI-powered network scanning with Nmap. Port scanning, service detection, OS fingerprinting, and vulnerability scanning for AI agents. By Vorota AI.
Apache-2.0 ★ 17 -
NmapMCP is a robust integration of the Nmap scanning tool with the Model Context Protocol (MCP), enabling seamless network scanning capabilities within MCP-compatible environments
★ 9 -
MCP server with 30 network diagnostic tools: ping, traceroute, mtr, nmap, DNS, TLS, HTTP and system monitoring.
MIT ★ 16 -
security-mcp-suitegithub.com/guanpengzhang0-spec/security-mcp-suiteupdated this year
5 MCP servers that give AI agents autonomous security scanning — nmap, nuclei, trivy, sqlmap, gitleaks
MIT -
NOT for educational use: An MCP server for Nmap and John the Ripper, for professional penetration testers.
npm MIT -
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
AGPL-3.0 ★ 151 -
TUI and MCP server for triaging multi-scanner vulnerability findings: import Nessus and nuclei results into SQLite, launch nmap/NetExec/nuclei/Metasploit against affected hosts, and record verification verdicts across scans.
MIT ★ 71 -
MCP server for AI-driven penetration testing. Wraps 22 security tools (nmap, nuclei, sqlmap, Metasploit…) as 46 safety-hardened MCP tools for Claude and LLM agents. Written in Rust.
Apache-2.0 ★ 3 -
portfangithub.com/cognis-digital/portfanupdated this year
Summarize and diff nmap XML into prioritized, attackable findings
NOASSERTION -
Two-component system bridging Kali Linux penetration testing tools with AI agents via MCP. Flask API server executes 10+ security tools (Nmap, SQLMap, Metasploit, etc.) while MCP client provides seamless AI integration for automated security workflows.
MIT ★ 9 -
blhackboxgithub.com/valITino/blhackboxupdated this year
MCP-based autonomous pentesting framework — Claude, ChatGPT, or Ollama orchestrate 70+ Kali Linux tools (nmap, sqlmap, Metasploit & more) for recon, exploitation, and post-exploitation, Wireshark packet analysis, and headless Chromium evidence capture. Fully containerized, authorization-enforced, structured pentest reports out of the box.
MIT ★ 9 -
NetMap — Network Diagram MCPno update data
Visual network topology editor with AI agent integration via the Model Context Protocol. Open-source successor to netViz (CA Technologies, 1990–2012). Try it live: https://map.den.dance/ What makes it different: • One-click ops dashboard — click any web port (80/443/8080/…) on a node card to open the service in a new tab. Click an SSH port to drop `ssh user@host -p port` into your clipboard AND launch your system SSH handler (Terminal/iTerm/Termius/PuTTY). Your diagram is also your jump host. • AI agents edit the map — 44 MCP tools. Claude / Cursor / Claude Desktop session can build a diagram for you, search across nodes/ports/notes, run smart auto-layouts, export PNG/PDF — all by talking to the open browser tab. • `nmap -oX` import — run a network scan, hand the XML to the agent, get a map with nodes auto-typed from OS fingerprint + port profile (router/switch/firewall/server/printer/…). • CSV inventory import — drop in your asset spreadsheet, auto-detects columns (name/ip/type/ports/notes; aliases like `hostname`/`description` accepted). • Operator-grade node cards — per-node: open ports with service names, Docker services, DNS domains, free-form notes. All searchable cross-entity via the agent. • Smart auto-layout — force-directed (deterministic via seed), cluster-by-type, cluster-by-connection. • Multi-sheet, local-first — multiple maps in one workspace, everything in localStorage. No login, no cloud. Export JSON/PNG/PDF.
smithery -
tengugithub.com/rfunix/tenguupdated this year
AI-powered penetration testing MCP server
MIT ★ 65 -
kali-mcpgithub.com/Hannes221/kali-mcpupdated this year
MCP server that gives AI assistants access to a Kali Linux Docker environment for security testing
MIT ★ 5 -
A Model Context Protocol (MCP) server for scanning IP addresses for vulnerabilities. This server provides tools to perform security scanning on individual IPs or multiple IPs at once.
★ 6 -
RedVector AI - AI-powered penetration testing and cybersecurity automation framework for security researchers and ethical hackers.
NOASSERTION ★ 42 -
spectyn-secopsgithub.com/markl-a/spectyn-secopsupdated this year
Multi-agent SecOps research playground — red/blue team simulation built on phantom-mesh. MCP server exposing recon/exploit/detect/respond tools to Claude Code, Cursor, or any MCP-compatible runtime.
NOASSERTION -
One command to audit your own smart-home devices: who they phone home to, plaintext vs TLS, open ports, A-F grade and a local HTML/PDF report. CLI + MCP server, no cloud.
pypi MIT ★ 7 -
MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentralized applications with integrated AI automation and enterprise-grade security.
NOASSERTION ★ 7