vulnerability-scanning MCP servers & tools

Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.

AI-powered security scanning using Black Duck Signal for vulnerability detection.

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

AI-powered penetration testing. Launch scans, review findings, download reports.

AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

Cybersecurity reconnaissance server for Claude. WHOIS lookup, DNS enumeration with subdomain brute-forcing, Nmap port scanning with service detection, SSL/TLS certificate inspection, technology stack fingerprinting, CVE lookup, and IP reputation checking. Runs fully locally via FastMCP.

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

Register/verify your domains, queue security scans (headers, TLS, DNS, ports, CVEs + AI-specific checks) and read findings, for AI agents. Install with npx -y eleion-scanner-mcp.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secr...

Visual CVE audit dashboard for npm, Python, Go, and Rust. Scan from Claude/Cursor, opens a browser UI for human review (human-in-the-loop), applies fixes with explicit confirmation. Powered by OSV.dev.

SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).

Security scanner for MCP servers with vulnerability detection and prompt injection analysis.

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

Security & trust layer for AI agents. Scan an MCP server or skill before you install it (scanmcpplugin, scanskill) — flags exfiltration, prompt-injection sinks, dangerous capabilities, install hooks and obfuscation → PROCEED/CAUTION/BLOCK. Plus vetendpoint (endpoint safety verdict before an agent calls or pays it) and 25 more tools: vuln scans, threat intel, compliance (SOC 2/ISO 27001/HIPAA), code security (SAST/secret/dependency), identity — 28 total. Per-call billing via API key or x402 USDC on Base; free discovery tier.

Dependency vulnerability scanner with EPSS exploit probability scoring. Scans lockfiles (npm, pip, Go, Cargo, Ruby, Composer, Gradle, NuGet, Mix), prioritizes by real-world exploit likelihood, recommends fix versions. 9 MCP tools for scanning, monitoring, and alerting. Free tier + x402 micropayments. pip install vulnfeed-mcp

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

A verified dependency-audit verdict any AI agent can call over MCP, not a raw scan.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from Git repos via MCP.

nmap - Network Port Scanner & Service Detection

Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.