MCP servers and skills: search, filter by where they run, and compare.
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
SkillMIT★ 31No key
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
PythonNo licenseFew starsNo key
Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
Hosted by authorNo licenseFew starsNo key
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Hosted by authorNo licenseFew starsNo key
Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.
Hosted by authorNo licenseFew starsNo key
Premium agentic endpoint for binary-exploitation-shield-mcp.
Hosted by authorNo licenseFew starsNo key
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
SkillMIT★ 51No key
Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Ty
PythonMIT★ 377No key
13 production MCP servers for US government data — safety recalls, cybersecurity vulnerabilities, disasters, finance, and more
Hosted by authorMIT★ 6No key
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
Hosted by authorMITFew starsNo key
CVE ingestion + enrichment pipeline with an MCP server for AI agents.
PythonMIT★ 38No key
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
Hosted by authorMITFew starsNo key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
PythonMIT★ 9No key
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it
SkillMIT★ 3.1kNo key
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
Node.jsMIT★ 509No key
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gate
SkillGPL-3.0★ 1.0kNo key
Zero-key cybersecurity MCP server: grade any site security A+ to F, check if a CVE is actively exploited, get plain-English MITRE ATT&CK defenses. No API keys, no signups.
PythonMITFew starsNo key
AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simulation, and professional audit reports for Solidity & Vyper
SkillMIT★ 37No key
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.7kNo key
Mergen is an MCP server that gives your AI a real red team brain. It doesn't just run tools, it picks the right ones, chains them together, and actually makes sense of the output. Built by pentesters,
SkillMIT★ 16No key
Who stands behind it
