MCP servers and skills: search, filter by where they run, and compare.
Point an app at two logged-in users and it finds the broken access control (IDOR). Deterministic browser perception + cross-identity authz testing for AI agents — drives your real Chrome over MCP or r
PythonApache-2.0★ 3Few starsNo key
MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key
PythonMIT★ 1Few starsNo key
Keel is the MCP control plane for authorized pentests and bug bounty. Plug it into Claude Code, Codex, Cursor, OpenCode, Hermes, Copilot, and any other MCP client. Keel runs scoped recon, keeps the ta
PythonMIT★ 2Few starsNo key
Authorization-first, deterministic BOLA/IDOR validation for HTTP APIs
MCPLink only★ 1Few stars
Dynamic security testing for MCP (Model Context Protocol) servers
PythonMITFew starsNo key
Autonomous bug bounty hunting with Claude Agent SDK — 6 specialist AI agents, 19 MCP tools, one command
PythonMITFew starsNo key
Test an access-control matrix (role x endpoint) for IDOR/authz gaps
MCPLink onlyFew stars
Who stands behind it
