Burp Suite MCP server with 80+ tools for authorized web security testing

Professional WAF security testing toolkit

Benign EICAR-style diagnostic test server for calibrating MCP security scanners (Detonation Labs).

MCP server that lets LLMs drive HTTPToolkit for automated API security testing — replay, mutation, and audit on captured mobile, desktop, and CLI traffic

MCP server that wraps aircrack-ng, enabling AI assistants to run and automate WiFi security assessments (scanning, handshake capture, cracking) for authorized penetration testing.

AI-Powered MCP Penetration Testing Framework - 150+ security tools with adaptive task model

Guarded MCP tools for AI-assisted mobile build, Appium testing, security scanning, verification, and fix-retest loops.

RedVector AI - AI-powered penetration testing and cybersecurity automation framework for security researchers and ethical hackers.

The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.

A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.

The largest Claude Code plugin marketplace. 500 plugins, 600+ developer tools in one MCP server. Security, testing, DevOps, databases, frontend, backend, ML/AI, mobile, cloud, and more.

MCP server with coding skills and subagents — debugging, code audits (correctness, security, best practices, SQL migrations), feature planning, testing (React/Vitest, Deno, pgTAP), UI/accessibility audits, deep research, and doc generation. Works with Cur

Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed CVSS v4.0, CWE/ATT&CK mapping, SBOM, HTML/Excel reports. PowerShell engine, GUI, MCP server and agentic AI triage.

MCP server for Cloud Agent — an AI software engineer that writes code, opens PRs, reviews code, generates tests, runs security scans, and answers codebase questions. Connect from any MCP client (Claude Code, Cursor, Windsurf) and delegate engineering task

Security auditor for AI agents and MCP servers — config analysis, prompt injection testing, tool probing, data flow tracing

10 intentionally malicious MCP servers that exploit protocol features to attack AI clients. For security research and defense testing.

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial testing, and real-time threat detection.

55-tool MCP server for security scanning of MCP servers. Runtime inspection, AST-based SAST, config audit, dependency analysis, OWASP MCP Top 10 compliance. OAuth, TLS, fuzz testing, prompt injection, tool mutation detection. 100% local, zero external API calls.

MCP server interface for AI agent and MCP security auditing — config analysis, trust audits, prompt injection testing, tool probing, and data flow tracing

Drive any Electron app from your AI. MCP server with 93 tools, 4 recipe packages (Slack/Discord/Notion/Linear), security primitives, and a CLI mirror. The testing surface area Tauri structurally cannot match.

The QAEverest MCP server — an AI QA copilot for any MCP client. Generate test cases grounded in your codebase, build and run automation suites, test AI agents, and run security and performance checks from Claude Code, Cursor, VS Code, JetBrains or Claude

Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.

Argus — the QA layer for AI-assisted development. Claude-native (MCP) Chrome audits across 67 categories — errors, visual regressions, a11y, security, performance — no test files, secrets redacted by default (Aegis).

107 production-grade QA engineering skills for AI agents — frontend, API, performance, mobile, security, CI, and AI/LLM testing. MCP-ready: works with Claude Code, Claude Desktop, Cursor, Zed, Windsurf, and any MCP host.

MCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.

RedQuanta MCP transforms penetration testing into an intelligent, automated, and secure process. Built specifically for LLM integration and professional security teams, it provides enterprise-grade security orchestration.

A WebAuthn soft token simulator MCP for penetration testing and automated testing. This tool allows you to simulate WebAuthn authenticators (security keys, passkeys) for testing purposes without requiring physical hardware.

Two-component system bridging Kali Linux penetration testing tools with AI agents via MCP. Flask API server executes 10+ security tools (Nmap, SQLMap, Metasploit, etc.) while MCP client provides seamless AI integration for automated security workflows.

MCP server for Kali toolkit (docker) - 121 tools for AI-assisted security testing give agents access to all it needs!

MCP server for API testing: HTTP requests, endpoint health checks, JWT decode, URL parsing, security header analysis Install: npx @rog0x/mcp-api-tools

Automate Cisco Secure Firewall (FMC-managed FTD) with Python, Ansible, and Terraform, plus three MCP servers that let an AI agent search policy, trace object usage, and propose changes behind a preview-and-confirm gate. Read-only by default, TLS on by default, CSV-driven, lab-tested.

Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled; 19 tests; alpha companion to Voraxx.

Map and audit any mobile app from your AI agent. Every screen and the route to it, plus WCAG 2.2, performance, store and security audits, on Android and iOS. No SDK, no test IDs, no source code.

A comprehensive Model Context Protocol (MCP) server that provides web performance auditing, accessibility testing, SEO analysis, security assessment, and Core Web Vitals monitoring using Google Lighthouse. Enables LLMs and AI agents to perform detailed we

Open source security for AI agents: an OS-enforced egress wall on macOS, and on Ubuntu 24.04 x86-64 via a separate package; keys only the operator holds; a hash-chained audit record. One command wraps Claude Code, Cursor, Hermes, OpenClaw or Cline on tested config paths. No vendor in the path. Claims trace to the Assurance Matrix.

Secure Model Context Protocol server for inspecting, testing, and controlling Android devices through Orbital’s wireless bridge.

An autonomous application-security engineer that inspects, tests, investigates, verifies, explains, fixes, and retests software.

Test, explain & benchmark regexes + a library of security patterns

[pre-release, testing usage] A Model Context Protocol (MCP) server that enables AI Agents to request and manage Selenium browser instances through a secure API. Perfect for your automated browser testing needs! 🚀 [In development: creating usage examples and in-cluster setup]

🤖 Multi-agent AI dev team in Python: turns a feature request into a planned, coded and tested project. LLM agents for planning, backend, frontend, QA & security; a verifier runs real tests and loops failures back. FastAPI dashboard, MCP server, pytest, CI.

MCP servers for everyday development and security checks: OSV vulnerability lookup, security header grading, JWT decoding and verification, regex testing with ReDoS detection, cron explanation, JSON Schema validation, OpenAPI and Dockerfile linting, read-only git insights and llms.txt generation. TypeScript, stdio, zod-validated, no telemetry.

Turn your AI into a penetration tester with a security MCP server for offensive testing and attack simulation

MCP server that gives AI assistants access to a Kali Linux Docker environment for security testing

Let Claude control your Mac — windows, menus, keyboard, clipboard, browser tabs. 18 typed tools, 84 tests, security-first MCP server.

Hardened, self-hosted Excalidraw MCP server with SQLite persistence, multi-tenancy, auto-sync, security middleware, and 369 tests

MCP server for AI-powered code analysis — test generation, security audits, coverage analysis, and refactoring suggestions

Production-ready Mailchimp MCP Server starter for Claude, Cursor, and AI agents. Built with TypeScript, secure configuration, validation, tests, and Docker support.

Secure Model Context Protocol (MCP) server & gateway for Claude, Cursor, and ChatGPT. Unlimited local file editing, testing, and dev tools without cloud limits.

Multi-lens code review MCP server for Claude Code. 8 specialized reviewers run in parallel and return structured verdicts (security, performance, test quality, clean code, and more).

MCP server for AI-driven penetration testing. Wraps 22 security tools (nmap, nuclei, sqlmap, Metasploit…) as 46 safety-hardened MCP tools for Claude and LLM agents. Written in Rust.

Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server, and coding-agent plugins.

AI agents and skills for Flutter, Android, iOS, React Native and Kotlin Multiplatform — a Claude Code and Codex plugin and an MCP server for reviews, debugging, tests, architecture, security and Firebase.

Secure Node.js execution sandbox for AI. Allows coding agents & LLMs to dynamically run JavaScript, install NPM packages, and retrieve results, facilitating code generation, testing, and interactive assistance. MCP-compatible.

Build, install and test Android apps on a real phone over Wi-Fi. No adb, no Android SDK, no Android Studio. Pure TypeScript ADB, YAML flows, crash explorer, and a secure MCP server for Claude, Codex and local models.

The largest Claude Code plugin marketplace. 500 plugins, 600+ developer tools in one MCP server. Security, testing, DevOps, CI/CD, databases, frontend, backend, API design, ML/AI, mobile, cloud, serverless, authentication, monitoring, and more.

First MCP server for the Passare Public API - read funeral-home case data (cases, acquaintances, addresses, contacts) from Claude / Cursor / any MCP client. MIT, ruff + mypy --strict clean, 30 tests, JSONL audit logging per the Blackwell MCP security audit pattern.

RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-pasting.

Turn any laptop, desktop, VM, or server into a secure AI-agent workspace via MCP. Let ChatGPT, Claude, Grok, Qwen and other MCP clients read and edit files, run commands, test code, inspect systems, and complete real-world tasks.

Load-tested Isolyth's MCP tool-calling endpoint with 100 concurrent virtual users via Locust, sustaining ~535 req/sec at p95 latency of 160ms with 0% error rate; benchmarked WASM-sandboxed code execution against plain tool calls, showing only ~15-30ms of added latency overhead from sandboxing —proving security isolation came at min performance cost

Adversarial Co-Generation Engine — concurrent Builder+Breaker agents for production-grade AI code security