Vulnerability scanning MCP servers

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup.

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Deterministic code security scan + tx preflight, paid in USDC via x402.

Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

MCP server for the Frame security scanner: scan, verify, fix, exploit, packs and separation logic.

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

Dependency audits, live CVE scans, migration detection and stack health across 9 languages.

Observability, tracking, and root-cause for Security Wave scans and findings.

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

MCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

Code, package, docs, paper and vulnerability search. 17 tools, keyless lanes.

Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

MCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.

CVE scanning for npm/pip/cargo dependencies via OSV

Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.

Local dependency graph: callers, entry points and file:line evidence for what a change affects.

Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

Deploy a repo to a live app from chat: servers, Postgres, domain, email, Stripe, security scan.

Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

MCP server for auditing Magento projects: update compatibility, module quality, dependency security

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

Scan a website for SEO, accessibility, performance and security issues, and read the report.

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

npm registry MCP server — package intelligence, security audits, dependency analysis

Read-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

CVE scanning for npm/pip/cargo dependencies via OSV

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).

Precision-first security scanning for Model Context Protocol servers.