- Conduid
- Marketplace
- #web-security
MCP servers tagged web-security
27 live MCP servers tagged "web-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with web-security.
Burpsuite MCP Server
BurpSuite MCP Server: A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functionalities.
Specification.website
Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agnostic, sourced, MIT.
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Open Reverselab
Open-source reverse engineering lab: 197-article knowledge base + MCP tools + CTF/APK/PE automation toolchain. Agent-native. Note:由于场景原因，目前有让几乎所有AI都会越狱的bug，暂时不修😉
Hx0 HawkEye
面向 Chrome/Firefox 的轻量级浏览器安全工作台：集成抓包、拦截改包、重放/Fuzz、敏感信息检测、HawkEye MCP 与浏览器级 Agent。（A lightweight Chrome/Firefox browser security workbench for capture, interception, replay/Fuzz, se…
Ctf MCP
MCP Server for CTF challenges - 126 tools for Web/Crypto/Pwn | CTF 挑战 MCP 服务器 - Web/密码学/二进制利用工具集
cli
Professional WAF security testing toolkit
Sa2web MCP
A runnable Playwright MCP wrapper for a DOM-based remote browser sa2web.
WonderSuite AI Bug Bounty
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. B…
Frx Director MCP
强模型（Claude/GPT）经 MCP 指挥 firefox-reverse 浏览器内置逆向 Agent —— 便宜 worker 执行工具、强模型只做方向修正；v0.4.0 支持 HTTP 常驻模式，多会话共享一个浏览器
SpectreWeb AI
Self-Learning AI for Manual Web Penetration Testing
Burp MCP Security Analysis Toolkit
Burp MCP Security Analysis Toolkit
Bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits e…
Js Reverse Ops
Production-grade JavaScript reverse-engineering skill: evidence-driven workflows, verbatim sandbox harnesses, 19 battle-tested playbooks, 136 scripts, public benchmarks
Zap MCP Server
Production-grade OWASP ZAP MCP server for authorized penetration testing and bug-bounty workflows (67 curated tools, authenticated scanning, target authorization policy).
Burp Autopilot
Drive Burp Suite autonomously from the CLI — MCP-transport client + companion Montoya extension for scans & scripted fuzzing
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
PentestAI
Autonomous web-pentest agent on consumer hardware — LangGraph + 23-tool MCP server + HippoRAG knowledge graph, driving a fine-tune-free Qwen2.5-Coder-14B on 12GB VRAM. Clears ever…
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
Santos Audit API
Scores any public URL on whether AI agents can discover, understand, call, and trust it. Machine-payable via x402 — USDC on Base, no account.
Surface Audit
Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.
BurpSuiteMcp
Local-first Burp Suite MCP extension for HTTP, WebSocket, Scanner and Collaborator workflows, with operator controls and complete AI activity auditing.
Ubag Protocol
Open reference implementation: agent identity + routing at the web edge (Ed25519 + ES256/JWKS). Python & Node.
YeepForge
Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP serv…
Http Security Headers MCP
Analyze and score HTTP security headers (CSP, HSTS, CORS, cookies) with actionable fix recommendations. Free MCP server — A+ to F grading for any URL. Built by Shakil Ahamed.
Anjian Agent
Local-first, authorization-gated web security assessment agent with MCP, Claude Code, local LLM support, evidence correlation, and Markdown reports.
Burp MCP Me262
MCP server for Burp Suite Pro — active scans, native fuzzer, Collaborator, reporting, scope-guarded. Works with Claude Code, Cursor, Cline, Windsurf & any MCP client.