- Conduid
- Marketplace
- #vulnerability
MCP servers tagged vulnerability
37 live MCP servers tagged "vulnerability", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerability.
Eip MCP
Exploit Intelligence Platform MCP Server
PoC In GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and re…
Agentic Tool
Github, Linear related MCP Server exposing a nuanced MCP Server Vulnerability at runtime
Awesome AI Agent Attacks
A curated timeline of real AI agent security incidents, breaches, and vulnerabilities (2024-2026). Every entry sourced and dated.
Fetch Cwe List
MCP (Model Context Protocol) server exposing fetch-cwe-list tools for LLM agents. Experimental/alpha — APIs may change.
Agentsid Scanner
Security scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.
Agentsid Scanner
Security scanner for MCP servers. Grades auth, permissions, injection risks, and tool safety. The Lighthouse of agent security.
Ave
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Orca AI Incident Archive
An open database of real-world AI agent incidents.
VulnMCP
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
Godig
🔌 CLI & MCP server for pkg.go.dev
AI Smart Contract Auditor
AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simulation, and professional audit reports…
Awesome Offensive MCP
A curated list of Offensive Security MCP Servers for Red Teaming & Pentesting.
Ddos Attack Script Demo
仅用于授权情况下验证安全产品的抗DDoS能力，请不要在未经网站所有者同意的情况下进行攻击。
supply-chain-mcp-server
90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDe…
Qualys
MCP server for Qualys security APIs - enables natural language interaction with vulnerability, asset, and cloud security data
Dtrack
Model Context Protocol server for OWASP Dependency-Track.
Server
MCP server for SixthWall AI code security scanner. Integrates with Claude Code for automatic vulnerability detection with Fix Packs.
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go…
Bounty Hunter MCP
Give your AI superpowers for bug bounty hunting. MCP server that turns Claude Code into a structured bug bounty toolkit — recon, live testing, intelligence, and report generation.
Supabase Security MCP
MCP server for Supabase security: audit, apply fixes, re-audit from any MCP client (Claude Code, Cursor, Cline).
Cve Lookup
Context for a CVE from EchelonGraph’s CVE Pulse API (CLI + MCP) — CVSS, CISA KEV, EPSS, SSVC, exploit and patch signals, product matching, vendor advisories and the internet-expos…
Circl Cve Search MCP Server
MCP server for CIRCL CVE Search API with intelligent risk assessment and comprehensive vulnerability analysis.
Cve Intel
Multi-source CVE Intelligence MCP Server — combines NVD, CISA KEV, and EPSS for AI-powered vulnerability analysis
Appwrite Security MCP
MCP server for Appwrite security audits inside Claude Code, Cursor, Cline.
Qanvuli
Local vulnerability database and scanner for CVE, OSV, CWE, CAPEC, KEV and EPSS — CLI, TUI and MCP.
Cpe Skills
Comprehensive CPE (Common Platform Enumeration) toolkit — SKILLS, Go SDK, CLI & MCP integration for parsing, matching, generation, storage and NVD integration. ≥91% coverage, 108…
Askcast Kiropower
A Kiro power for Ask CAST (MCP) to conversationally explore your Software Intelligence insights.
Veridano Skill
Claude Skill for real-time government cybersecurity intelligence from CISA, FBI, NIST, NSA
Firebase Security MCP
MCP server for Firebase Firestore Rules security audits inside Claude Code, Cursor, Cline.
Pocketbase Security MCP
MCP server for PocketBase security: audit collection rules, preview fixes from inside any MCP client.
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Server
NotCVE MCP server — live vulnerability intelligence for AI agents: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, affected versions, exploits and patches from 80+ sources.
Audit
Security scanner for MCP (Model Context Protocol) servers