MCP servers and skills: search, filter by where they run, and compare.
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
SkillMIT★ 31No key
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
SkillMIT★ 51No key
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
Hosted by authorMITFew starsNo key
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
Hosted by authorMITFew starsNo key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.7kNo key
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-C
Node.jsMIT★ 7No key
MCP server for authorized pentest workflows: Nmap/Gobuster orchestration, context aggregation, AI-assisted triage, and reporting.
PythonMIT★ 23No key
🔌 Exposes CISA Known Exploited Vulnerabilities over MCP — BOD 22-01 + EPSS overlay. MIT
PythonMITFew starsNo key
MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.
Hosted by authorMIT★ 33No key
Bring HackTricks pentesting knowledge into Claude Desktop. Search 1000+ security techniques, exploits, and payloads without leaving your AI assistant. MCP-powered, npx-ready.
Node.jsMIT★ 10No key
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI
PythonMIT★ 27No key
CISA Known Exploited Vulnerabilities with BOD 26-04 deadlines, SSVC prioritization, and the full ICS advisory corpus (CSAF) via MCP. Keyless. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
10 intentionally malicious MCP servers that exploit protocol features to attack AI clients. For security research and defense testing.
SkillMIT★ 9No key
RamiBot v3.8.0 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MCP tool orchestration, Docker terminal access, Tor proxy managem
SkillMIT★ 29No key
MCP server for the ThreatCluster threat intelligence API: incident clusters, IOCs, CVEs, ransomware leak-site victims and entity profiles as tools for Claude, Cursor, VS Code and any MCP client. Pytho
Node.jsGPL-3.0★ 1Few starsNeeds a key
C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for LLM agents.
SkillMIT★ 42No key
CISA Known Exploited Vulnerabilities catalog
Hosted by authorMITFew starsNo key
C.O.N.T.EX.T is designed to compress complex, multi-domain conversations into machine-optimized "Carry-Packets." These packets achieve a crystallization point of 0.15 entity/token, ensuring that a rec
SkillMIT★ 32No key
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. Built on Tauri + Rust
SkillMIT★ 51No key
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Pr
SkillMIT★ 11No key
DPO/SafeDPO/OPAD training + eval for teaching tool-using LLMs to refuse falsely-benign MCP exploits
SkillApache-2.0★ 4Few starsNo key
L'administration française pour vos agents IA — serveur MCP open-source : communes, géocodage, risques (Géorisques), DPE, sur les API publiques de l'État, sans clé API.
PythonMITFew starsNo key
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
PythonApache-2.0★ 17No key
Who stands behind it
