Vulnerable MCP Server

Vulnerable MCP Server

Web Application Penetration Testing MCP

WinsecMCP

Windows Hardening MCP Server

SecureSshMcp

Secure Ssh Mcp - Allow AI Agent to perform Server Ops without exposing your Keys

MCP-Scan: An MCP Security Scanner

A security scanning tool for MCP servers

mcp-security-sandbox

MCP Security Playground - Hack with MCP Servers, MCP Clients. Try out different vulnerabilities and abuse LLMs and agents in a UI friendly experimentation lab

😎 Contributing

🔥🔒 Awesome MCP (Model Context Protocol) Security 🖥️

Security Operations Multi-Tool Platform (MCP)

All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.

🚀 Pentest MCP: A Comprehensive Tool for Professional Penetration Testing

NOT for educational purposes: An MCP server for professional penetration testers including nmap, go/dirbuster, nikto, JtR, wordlist building, and more.

Shield MCP

A shield for logging, deep debug and sanitization for MCP servers at development stage

Pentest MCP: Professional Penetration Testing Toolkit

NOT for educational purposes: An MCP server for professional penetration testers including nmap, go/dirbuster, nikto, JtR, wordlist building, and more.

Open MCP Auth Proxy

Authentication and Authorization Proxy for MCP Servers

OWASP MCP Server

🛡MobSF MCP Tool

This MCP server uses mobsf api's to scan and analyze the apk and ipa files.

Cloudsword

一款帮助云租户发现和测试云上风险、增强云上防护能力的综合性开源工具

mcpsshclient

An Agentic MCP server sshclient

Have I Been Pwned MCP Server

MCP Server Pentest

Metasploit MCP Server

Metasploit MCP Server

GUARDRAIL: Security Framework for Large Language Model Applications

GUARDRAIL - MCP Security - Gateway for Unified Access, Resource Delegation, and Risk-Attenuating Information Limits

Snyk MCP Server

MCP Server for Snyk Security Scanning

Security Audit Tool

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

better-auth-mcp-server MCP Server

Mirror of