MCP servers and skills: search, filter by where they run, and compare.
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
PythonNo licenseFew starsNo key
Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Ty
PythonMIT★ 377No key
CVE ingestion + enrichment pipeline with an MCP server for AI agents.
PythonMIT★ 38No key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
PythonMIT★ 9No key
Zero-key cybersecurity MCP server: grade any site security A+ to F, check if a CVE is actively exploited, get plain-English MITRE ATT&CK defenses. No API keys, no signups.
PythonMITFew starsNo key
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.7kNo key
Autonomous Offensive Security Agent for Red Team Operations
PythonApache-2.0★ 4Few starsNo key
MCP server exposing all Shodan API functionality.
PythonMIT★ 1Few starsNo key
MCP server for authorized pentest workflows: Nmap/Gobuster orchestration, context aggregation, AI-assisted triage, and reporting.
PythonMIT★ 23No key
MCP server exposing pwntools 4.15.0 functionality for binary exploitation tasks.
PythonMIT★ 1Few starsNo key
🔌 Exposes CISA Known Exploited Vulnerabilities over MCP — BOD 22-01 + EPSS overlay. MIT
PythonMITFew starsNo key
MCP Server per CVE PostgreSQL — Query CVEs, yanked releases, exploits e upgrade path per qualsiasi versione di PostgreSQL direttamente dal tuo AI assistant.
PythonApache-2.0Few starsNo key
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI
PythonMIT★ 27No key
Keel is the MCP control plane for authorized pentests and bug bounty. Plug it into Claude Code, Codex, Cursor, OpenCode, Hermes, Copilot, and any other MCP client. Keel runs scoped recon, keeps the ta
PythonMIT★ 2Few starsNo key
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
PythonApache-2.0★ 32No key
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
PythonAGPL-3.0★ 43No key
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
MCPLink only★ 1.0k
K8s misconfiguration exploitation toolkit
PythonApache-2.0★ 4Few starsNo key
L'administration française pour vos agents IA — serveur MCP open-source : communes, géocodage, risques (Géorisques), DPE, sur les API publiques de l'État, sans clé API.
PythonMITFew starsNo key
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
PythonApache-2.0★ 17No key
MCP server for Metasploit Framework via pymetasploit3. This server exposes all pymetasploit3 functionality as MCP tools, allowing LLMs to interact with Metasploit Framework through the msfrpc protocol
PythonMITFew starsNo key
Who stands behind it
