- Conduid
- Marketplace
- #vulnerability-scanner
MCP servers tagged vulnerability-scanner
146 live MCP servers tagged "vulnerability-scanner", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerability-scanner.
Hermes Security Suite
奇点造物 Genesisix-hermes — Agent安全三件套。检测(825规则/13层)+诊断(自愈)+防护(实时拦截)。
Mcpwatchman
Independent security and quality audit for Model Context Protocol servers — static analysis, dependency CVE scanning, and evidence-linked scores for every server in the official M…
BadHost CVE 2026 48710 Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
Crackq
Self-hosted password cracking queue — multi-user hashcat with audit log
Privacyshell
Hardened browser profile generator — Firefox / LibreWolf / Brave
Vakt
Open-source AST aware code scanner to find your app’s vulnerabilities.
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
Approvewarden
Scans any wallet for dangerous ERC-20/721/1155 token approvals and infinite allowances, scoring drainer exposure and emitting revoke transactions.
Intruder MCP Go
A Go stdio MCP server for Intruder.
Authscan
Static detector for self-rolled-auth failure classes in MCP servers. Part of VATA — receipts over promises.
Guard
Security scanner for MCP (Model Context Protocol) servers — find vulnerabilities before attackers do
Osv MCP
MCP server for Claude — audit open-source dependencies for known vulnerabilities
Audit
Security audit for AI-built projects. 130+ checks across OWASP Top 10. Auto-detects stack, loads relevant checks, grades your project A-F with exact fixes.
Doctor
Scan, Score, Install MCP Servers with confidence. The missing toolkit for the MCP ecosystem.
Security Scanner
Security scanner for Model Context Protocol (MCP) servers. Static + dynamic checks for path traversal, auth gaps, prompt injection surfaces. Produces SARIF output for GitHub code…
Mcpscan
Local CLI to discover shadow MCP servers on your local network & audit authentication status. Zero telemetry, local-only.
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
toan203/osv-ui
loop), applies fixes with explicit confirmation. Powered by OSV.dev.
Sec Nuclei MCP
MCP server for Nuclei - Vulnerability scanner integration for AI assistants via SSH to Kali Linux
Decoy Redteam
Autonomous red team for MCP servers. Sends adversarial payloads to your tools, proves exploitation, reports what's broken. 53 attack patterns across 6 categories. Zero dependencie…
cuttalo/depscope
mcp`.
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
RugProof
Smart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork simulation, audit cards, on-chain certificates. Solidity + Vyper · 38 commands · 19 ag…
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
Bearstrike AI
🐻 BearStrike AI: High-Signal Pentesting Console (MCP-First, Model-Agnostic). Build fast, low-noise security workflows with queue-first execution, skills-aware planning, and 150+ i…
Coldforge
Render personalized cold-outreach sequences from Markdown templates + a contacts CSV, with spam-score linting and per-send dry-run preview.
Skill Scanner
🔍 Discover and analyze AI skills in your projects with Skill Scanner to enhance development and improve security.
Piiscan
PII discovery across warehouses and lakes (data-side scanner)
AI Failure Observatory
Behavioral safety, vulnerability probing, and product-risk auditing platform & MCP server for Generative AI & Large Language Models.
Egresswatch
Server-side outbound connection auditor — eBPF/Falco wrapper
Milstdlint
Lint documents against MIL-STD / DoD formatting and classification-marking rules.
Sbomb
Generate a CycloneDX SBOM directly from an unpacked firmware root filesystem and flag components with known CVEs and EOL kernels.
Shark Security Lab
Reference MCP security lab: toxic tool metadata, multi-server mcp.json harness for static scan, localhost AAuth fixtures, YARA (OWASP Agentic ASI01–ASI10). Stress-test MCPShark an…
EAtheria Security
Self-hosted application security platform: SAST, DAST and SCA with AI false-positive validation. OWASP Top 10/CWE mapping, SBOM export, CI/CD integrations and MCP server.
Security Hunter MCP
🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Ge…
Security MCP Suite
5 MCP servers that give AI agents autonomous security scanning — nmap, nuclei, trivy, sqlmap, gitleaks
Panhound
Scans code, logs, fixtures, and S3 buckets for leaked PANs (Luhn-validated card numbers) and CVVs before they hit prod.
Licenselens
Dependency license + SBOM gate, developer-CLI first
DepGuard
Dependency vulnerability scanner over OSV.dev with CISA KEV actively-exploited flags. No API key.
Nsauditor AI Agent Skill
AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows. Works with Claude Code, Cu…
Ironward
Security scanning for the vibe coding era — MCP server + CLI + GitHub Action. 9 tools, 665 secret patterns, 27 static rules. Four tools run fully offline, no API key.
Jakk
Black-box security scanner for MCP servers — deterministic single-call probes, no LLM. 13 probes across 7 surfaces.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Zfuzz MCP
Security copilot for AI coding agents. 10 MCP tools — SAST, SCA, secrets, MCP/skill scanning — for Claude, Cursor & co. Rust-native, local, $0, Apache-2.0.
Secureagent
Comprehensive AI & Cloud Security Platform - Security scanning for MCP, LangChain, OpenAI, AWS, Azure, Terraform
OrchestAI
AI-powered codebase audit tool that scans for dependency vulnerabilities, deprecated API usage & generates comprehensive security reports. Uses MCP connectors for intelligent anal…
Qanvuli
Local vulnerability database and scanner for CVE, OSV, CWE, CAPEC, KEV and EPSS — CLI, TUI and MCP.
Mincode Vuln Arch
Minimal code generator + vuln auditor + architecture miner with a tamper-evident hash-chain vault. Zero deps. Agent-agnostic (CLI / pip / pyz / MCP / AgentSkills).
YeepForge
Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP serv…
Correctover Scan
Security scanner for MCP servers and AI agents — detects credential leaks, RCE, SSRF and missing auth against OWASP AISVS 1.0; also scans published JS bundles/npm packages.