Security & Testing MCP Servers

MCPControl

100

Provides programmatic control over system operations including mouse, keyboard, window management, and screen capture functionality.

Archestra

96

Provides a secure runtime environment for fully-autonomous AI agents, designed for enterprise-grade deployment.

Node Code Sandbox

96

Executes arbitrary JavaScript code in isolated, ephemeral Docker containers with on-the-fly npm dependency installation.

Cycode CLI

95

Scans code repositories locally for secrets, Infrastructure as Code misconfigurations, software composition analysis vulnerabilities, and static application security testing issues.

Sonarqube

93

Integrates SonarQube with AI assistants via the Model Context Protocol, enabling access to code quality metrics and issue data.

BrowserStack

91

Enables developers and testers to use the BrowserStack Test Platform directly from their favorite AI tools for manual and automated testing.

SonarQube

91

Enables seamless integration with SonarQube Server or Cloud and allows for code snippet analysis within the agent context.

Deep Code Reasoning

90

Provides advanced code analysis and reasoning capabilities by orchestrating Google's Gemini AI and Claude Code for complex debugging and understanding distributed systems.

HTTP OAuth

89

Provides a reference implementation for creating a remote MCP server that supports Streamable HTTP & SSE Transports, authorized with OAuth.

Binary Ninja

87

Integrates Binary Ninja with LLMs for enhanced reverse engineering workflows via an MCP server and bridge.

Pentest

86

Integrates essential penetration testing tools into a unified natural language interface for security professionals.

VirusTotal

82

Query the VirusTotal API for comprehensive security analysis and relationship data.

Terminal Controller

82

Enables secure terminal command execution, directory navigation, and file system operations through a standardized interface.

Claude-C2

80

Enables command and control communication with Claude using a Python server and PowerShell client.

Radare2

80

Integrates radare2 with AI assistants through a MCP server for binary analysis.

iPhone

78

Automates iPhone tasks, including app control, UI interactions, and screenshot capture, via a streamable HTTP server using Appium.

Postman Runner

77

Executes Postman collections using Newman and exposes detailed API test results.

Jadx

76

Exposes Jadx API over HTTP for live interaction and automation of reverse engineering workflows.

Sandbox

76

Executes code and configurations from Large Language Models (LLMs) in secure, isolated Docker containers.

Shodan

75

Query the Shodan API and CVEDB to gather network intelligence and security insights.