Security & Testing MCP Servers

Package Version

Provides LLMs with the latest stable package versions for multiple package registries when coding.

VirusTotal

Query the VirusTotal API for comprehensive security analysis and relationship data.

Shodan

Query the Shodan API and CVEDB to gather network intelligence and security insights.

Mcp-Gdb

Enables GDB debugging functionality within AI assistants like Claude through the Model Context Protocol.

Pentest

Integrates essential penetration testing tools into a unified natural language interface for security professionals.

Sandbox

Executes code and configurations from Large Language Models (LLMs) in secure, isolated Docker containers.

BrowserStack

Enables developers and testers to use the BrowserStack Test Platform directly from their favorite AI tools for manual and automated testing.

HTTP OAuth

Provides a reference implementation for creating a remote MCP server that supports Streamable HTTP & SSE Transports, authorized with OAuth.

Test Client

Facilitates the development and testing of MCP servers by acting as both a server for Claude and a client for servers under test.

Lighthouse

Measures webpage performance metrics using Google's Lighthouse, enabling AI assistants to optimize these metrics.

Falcon

Connects AI agents with the CrowdStrike Falcon platform, powering intelligent security analysis in agentic workflows.

iPhone

Automates iPhone tasks, including app control, UI interactions, and screenshot capture, via a streamable HTTP server using Appium.

JavaSinkTracer

Audits Java source code for vulnerabilities using function-level taint analysis, providing security insights to AI assistants.

Code Executor

Orchestrates multiple MCP tools on-demand, drastically reducing token usage for AI agent contexts.

FlowLens

Empowers AI coding agents with full browser context to streamline debugging and regression testing workflows.

AI for the Win

Provides a hands-on training program for security practitioners to build AI-powered tools for threat detection, incident response, and security automation.

Android Proxy

Provides an Android packet capture service that enables AI assistants to analyze HTTP/HTTPS traffic through natural language.

SysPlant

Generates Windows syscall hooking code across various methods and programming languages.

Claudit

Provides AI coding agents with powerful search capabilities across Solodit's extensive database of smart contract security findings.

Charles

Integrates Charles Proxy with MCP clients to provide structured analysis and real-time capture of network traffic.