Security & Testing MCP ServersSecurity & Testing

Evil Winrm Py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Vigil

Vigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.

Flutter Skill

AI-powered E2E testing for 10 platforms. 253 MCP tools. Zero config. Works with Claude, Cursor, Windsurf, Copilot. Test Flutter, React Native, iOS, Android, Web, Electron, Tauri, KMP, .NET MAUI — all from natural language.

BugTraceAI

Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.

Tracekit

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

H1 Brain

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Bld

Pure java build tool for developers who don't like dealing with build tools

Halofy

Halofy is the open access and governance layer for AI agents across your organization. Identity, policy, provenance, audit, and signed erasure.

JoySafeter

🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...

BurpMCP Ultra

AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client.

Guardana

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.

Arcgentic

Mechanical plan/dev/self-audit/external-audit gates for AI coding agents, with a configurable role-routing topology engine, an MCP-UI live status panel, and native-tooling Claude Code V2 dispatch. Claude Code, Codex, OpenClaw, and PyPI.

Vulnerable MCP Servers Lab

A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

Falcon MCP

Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting

Mirroir MCP

MCP server for controlling a real iPhone via macOS iPhone Mirroring...and any MacOs app. Screenshot, tap, swipe, type — from any MCP client.

Wazuh MCP Server

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

Mathema

Claim-Driven Development: turn software intent into verifiable evidence.

Agent Audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

MCP Server Wazuh

MCP Server for Wazuh SIEM

MobileRE Skill

AI Agent 驱动的移动端逆向技能集：Frida hook、一键脱壳、反检测绕过、内存 DEX dump、Ghidra MCP 符号/结构恢复。AI-agent skill system for mobile reverse engineering.

Node9 Proxy

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

Reversecore MCP

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

MCP Shell Server

Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging.

Dev Machine Guard

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.