MCP servers and skills: search, filter by where they run, and compare.
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
PythonMIT★ 9No key
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
PythonAGPL-3.0★ 43No key
Check npm/PyPI/Go/Maven dependencies and lockfiles against OSV.dev — CVEs, CVSS, fixed versions. Apify Actor + stdio MCP server for AI agents.
Hosted by authorMITFew starsNo key
CIRCL Vulnerability-Lookup — aggregated vulnerability records
Hosted by authorMITFew starsNo key
MCP server for CIRCL's Vulnerability-Lookup (CVE Search) — query CVE, CWE, CAPEC and vendor vulnerability data.
Node.jsMIT★ 11No key
MCP server for Tenable Nessus vulnerability scanning.
Node.jsMIT★ 16No key
Software dependency vulnerability & CVE scanner
SkillLink only★ 9
A Model Context Protocol (MCP) server for scanning IP addresses for vulnerabilities. This server provides tools to perform security scanning on individual IPs or multiple IPs at once.
MCPLink only★ 5
Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Ty
PythonMIT★ 377No key
Queries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks from Security Command Center on Google Cloud. Use when retrie
OfficialSkillApache-2.0★ 21k in collectionNo key
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug boun
SkillMIT★ 13kNo key
Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). Focuses on SQL in
OfficialSkillMIT★ 40k in collectionNo key
Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring depe
OfficialSkillMIT★ 40k in collectionNo key
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security work
SkillMIT★ 788No key
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone,
PythonMIT★ 211No key
MCP server: 1,032 verified smart contract vulnerability findings from 10 Sherlock audit contests
Node.jsMIT★ 2Few starsNo key
MCP server that bridges AI agents to OpenVAS / Greenbone Vulnerability Management.
SkillApache-2.0★ 4Few starsNo key
MCP server for PyPI: search packages and audit dependency trees against OSV vulnerability data before an agent suggests them.
PythonMIT★ 3Few starsNo key
An AI driven debugging assistant specially designed for x32/x64dbg, it helps to double the efficiency of reverse engineering, vulnerability mining, and malware analysis, making it your intelligent cop
SkillGPL-3.0★ 82No key
MCP server that scans Solidity repos through a 7-gate verification framework (Al-Mizaan) to cut LLM false positives, benchmarked against Slither; free pattern-search from 1,032 reconciled Sherlock fin
Node.jsMIT★ 9No key
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Node.jsMIT★ 178No key
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gate
SkillGPL-3.0★ 1.0kNo key
Who stands behind it
