Skip to main content
Glama

Open-Source MCP servers

Production-ready MCP servers that extend AI capabilities through file access, database connections, API integrations, and other contextual services.

9,479 servers. Last updated -

Matching MCP tools:

Matching MCP servers:

  • A
    security
    A
    license
    A
    quality
    Provides tools for frontend testing including code analysis, test generation, test execution, and React component testing for Jest and Cypress frameworks.
    Last updated -
    4
    21
    MIT License
  • -
    security
    F
    license
    -
    quality
    Enables automated testing and coverage reporting for MCP services with test execution, file generation, and mock service creation. Provides comprehensive testing infrastructure including Jest integration, coverage reports, and health checks for the MCP ecosystem.
    Last updated -
  • -
    security
    F
    license
    -
    quality
    Enables secure execution of penetration testing commands on Kali Linux through Server-Sent Events with intelligent command validation, real-time monitoring, and comprehensive audit logging. Designed for authorized security research and penetration testing workflows.
    Last updated -
    1
    • Linux
  • A
    security
    A
    license
    A
    quality
    A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
    Last updated -
    12
    521
    20
    MIT License
  • A
    security
    F
    license
    A
    quality
    A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.
    Last updated -
    5
    44
  • -
    security
    F
    license
    -
    quality
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    Last updated -
    2
    • Apple
    • Linux

Interested in MCP?

Join the MCP community for support and updates.

RedditDiscord
  • -
    security
    F
    license
    -
    quality
    A demonstration server that allows large language models to perform penetration testing tasks autonomously by interfacing with the Mythic C2 framework.
    Last updated -
    66
    • Apple
  • -
    security
    F
    license
    -
    quality
    An MCP server that integrates various penetration testing tools, enabling security professionals to perform reconnaissance, vulnerability scanning, and API testing through natural language commands in compatible LLM clients like Claude Desktop.
    Last updated -
    4
  • -
    security
    F
    license
    -
    quality
    Enables LLMs to execute common security testing tools like nmap, sqlmap, hydra, and metasploit through a secure Docker container. Provides controlled access to penetration testing utilities with configurable timeouts and tool discovery capabilities.
    Last updated -
  • -
    security
    F
    license
    -
    quality
    Enables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.
    Last updated -
    • Apple
    • Linux
  • -
    security
    F
    license
    -
    quality
    AI-powered cybersecurity automation platform with 150+ security tools and 12+ autonomous AI agents for penetration testing, vulnerability assessment, and bug bounty hunting. Enables comprehensive security testing through intelligent tool selection and automated workflows.
    Last updated -
  • -
    security
    A
    license
    -
    quality
    Provides a bridge between large language models and the Metasploit Framework, enabling AI assistants to access and control penetration testing functionality through natural language.
    Last updated -
    260
    Apache 2.0
    • Linux
    • Apple
  • -
    security
    A
    license
    -
    quality
    A module that enables AI assistants to access and utilize common penetration testing and security tools like Nmap and Metasploit through a simple interface.
    Last updated -
    3
    GPL 3.0
  • -
    security
    A
    license
    -
    quality
    Enables secure integration with Metasploit Framework for AI assistants, providing comprehensive access to penetration testing tools, module management, payload generation, and database operations. Designed for authorized security testing and defensive analysis with 28 specialized tools covering complete MSF functionality.
    Last updated -
    1
    MIT License
  • A
    security
    A
    license
    A
    quality
    An AI-powered penetration testing reasoning engine that provides automated attack path planning, step-by-step guidance for CTFs/HTB challenges, and tool recommendations using Beam Search and MCTS algorithms.
    Last updated -
    1
    MIT License
  • -
    security
    F
    license
    -
    quality
    Enables security auditing, penetration testing, and compliance validation with tools like Semgrep, Trivy, Gitleaks, and OWASP ZAP. Features strict project boundary enforcement and supports OWASP, CIS, and NIST compliance frameworks.
    Last updated -
    7
  • -
    security
    F
    license
    -
    quality
    Enables LLMs to execute Kali Linux security tools like nmap, sqlmap, and hydra in a secure, sandboxed environment. Provides both MCP and HTTP API interfaces for penetration testing and security assessment tasks.
    Last updated -
    1
  • -
    security
    A
    license
    -
    quality
    Enables AI assistants to interact with Metasploit Framework through 28 comprehensive tools for penetration testing and security analysis. Provides secure, structured access to MSF modules, database operations, session management, and payload generation capabilities.
    Last updated -
    1
    MIT License
  • -
    security
    F
    license
    -
    quality
    Provides comprehensive access to documentation for 600+ Kali Linux penetration testing and security tools through Claude Desktop, enabling users to search, explore, and get detailed information about security tools by category or functionality.
    Last updated -
    • Apple
  • A
    security
    A
    license
    A
    quality
    A Model Context Protocol server that integrates essential penetration testing tools (Nmap, Gobuster, Nikto, John the Ripper) into a unified natural language interface, allowing security professionals to execute and chain multiple tools through conversational commands.
    Last updated -
    9
    38
    86
    MIT License
    • Linux
    • Apple
  • A
    security
    F
    license
    A
    quality
    An MCP server that executes tox commands to run Python tests within a project using pytest, allowing users to run all tests or specific test groups, files, cases, or directories.
    Last updated -
    5
  • -
    security
    A
    license
    -
    quality
    Provides access to 13+ penetration testing and security audit tools through a unified MCP interface. Enables security professionals to perform vulnerability scanning, web fuzzing, network reconnaissance, and other security assessments through containerized tools like Nuclei, Nmap, SQLMap, and FFUF.
    Last updated -
    MIT License
    • Linux
  • A
    security
    A
    license
    A
    quality
    A simple server implementing the Model Context Protocol (MCP) that echoes messages back, designed for testing MCP clients.
    Last updated -
    1
    2
    MIT License
  • -
    security
    F
    license
    -
    quality
    An MCP server that enforces unit testing standards by linting code and guiding agentic coding tools (like Gemini CLI or Claude Code) to follow best practices in test-driven development.
    Last updated -
    1
    • Linux
    • Apple
  • A
    security
    F
    license
    A
    quality
    integrate rapidapi for testing
    Last updated -
    1
    2
  • A
    security
    A
    license
    A
    quality
    A comprehensive HTTP client MCP server for security testing, API testing, and web automation that provides full-featured HTTP tools with detailed logging capabilities.
    Last updated -
    8
    3
    MIT License
  • A
    security
    F
    license
    A
    quality
    MCP server that enables browser automation and web testing on ARM64 devices like Raspberry Pi, allowing users to navigate websites, take screenshots, execute JavaScript, and perform UI testing via Claude.
    Last updated -
    22
    2
  • A
    security
    F
    license
    A
    quality
    Enables browser automation and web testing on ARM64 devices like Raspberry Pi using system Chromium. Supports navigation, screenshots, form filling, JavaScript execution, and complete SaaS testing workflows through Claude Code integration.
    Last updated -
    22
    2
  • -
    security
    A
    license
    -
    quality
    AI-powered agent that integrates with coding assistants via MCP to automate web testing workflows, allowing developers to record tests, execute regression testing, and discover test flows using natural language prompts.
    Last updated -
    57
    Apache 2.0
    • Linux
    • Apple
  • A
    security
    F
    license
    A
    quality
    Provides programmatic access to BlazeMeter's performance testing platform through MCP tools. Enables users to retrieve test runs, analyze performance data, view error reports, and manage testing resources via natural language interactions.
    Last updated -
    8
    • Linux
    • Apple
  • -
    security
    F
    license
    -
    quality
    Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.
    Last updated -
    40