Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

Codex Worker npm
A
mcp-codex-worker

MCP server bridge for Codex app-server

Security & Testing Score 93/100 7 findings 35/wk Cap. High
Reqable npm
A
reqable-mcp

NPX launcher for reqable-mcp Python MCP server

Security & Testing Score 93/100 1 finding 35/wk Cap. High
Qa Probe npm
A
qa-probe

Local QA agent — maps frontend routes to backend API calls, probes every endpoint live, scores pages 0–100, explains why data is missing. Works with any FastAPI/Express/Next.js app.

Security & Testing Score 93/100 2 findings 32/wk Cap. High
Laptop Care npm
A
laptop-care

Cross-platform laptop maintenance agent (MCP server) for Claude Desktop

Security & Testing Score 93/100 1 finding 26/wk Cap. High
Tram npm
A
tram-mcp

TestRail MCP server — browse the API, search test cases, and manage runs and results. Runs locally over stdio.

Security & Testing Score 93/100 2 findings 26/wk Cap. High
Check npm
A
@golproductions/check-mcp

Less hallucinations. A command firewall for AI agents: validates every shell command before execution, so fabricated commands are denied before they run.

Security & Testing Score 93/100 1 finding 24/wk Cap. High
Living Off The Land Lolbins npm
A
living-off-the-land-lolbins-mcp-server

Living off the Land binaries MCP server — GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, WADComs intelligence with attack graph reasoning, privilege escalation paths, defense evasion, detection engineering

Security & Testing Score 93/100 11 findings 23/wk Cap. High
Mobile Agent npm
A
mobile-agent-mcp

Drive iOS sims, Android emulators, and USB devices via MCP or shell. Maestro flows, screenshots, logs, adb, simctl. MCP + CLI.

Security & Testing Score 93/100 2 findings 23/wk Cap. High
Smart Agent Workflow npm
A
smart-agent-workflow-mcp

The only MCP that enforces tests before merge. Full-cycle development automation with testing gates, workflow orchestration, knowledge graph memory, and context health tracking.

Security & Testing Score 93/100 3 findings 23/wk Cap. High
Docforge npm
A
@precisionutilityguild/docforge

Agent-grade document production MCP server powered by Typst

Security & Testing Score 93/100 5 findings 22/wk Cap. High
Lighthouse Audit npm
A
mcp-lighthouse-audit

MCP server — Lighthouse audits: Core Web Vitals, performance opportunities, category scores

Security & Testing Score 93/100 1 finding 22/wk Cap. High
Mcpguard npm
A
@jacobmolz/mcpguard

Security proxy daemon for MCP servers — adds auth, rate limiting, PII detection, and audit logging

Security & Testing Score 93/100 1 finding 22/wk Cap. High
Testneo npm
A
@testneo/mcp-server

Model Context Protocol server for TestNeo quality workflows

Security & Testing Score 93/100 3 findings 22/wk Cap. High
Homescan npm
A
mcp-homescan

MCP server for home network discovery and vulnerability scanning

Security & Testing Score 93/100 1 finding 21/wk Cap. High
Quartermaster npm
A
@pbhamri/quartermaster-mcp

MCP server that seeds any repo with a customizable PM kit. Any PM, any product — connect YOUR GitHub, ADO, Kusto, IcM. 19 tools: scaffolding, repo-read, onboarding, custom profile creation, self-agent auto-reply. Never ships personal data — profiles are t

Security & Testing Score 93/100 2 findings 21/wk Cap. High
Skillaudit npm
A
skillaudit

Security scanner for AI agent skills — scan SKILL.md files for threats, exfiltration, and malicious patterns

Security & Testing Score 93/100 2 findings 21/wk Cap. High
Specmatic npm
A
specmatic-mcp

MCP server wrapper for Specmatic contract testing

Security & Testing Score 93/100 6 findings 21/wk Cap. High
Squirex.dev npm
A
@squirex.dev/mcp-server

SquireX MCP Server — Agentforce Capability Scanner for AI Coding Agents

Security & Testing Score 93/100 1 finding 21/wk Cap. High
Vibecheck Mcp npm
A
@vibecheck-mcp/mcp

MCP server for VibeCheck bug reports — gives AI assistants access to screen recordings, console logs, network requests, and more

Security & Testing Score 93/100 2 findings 21/wk Cap. High
Detox npm
A
detox-mcp

MCP server exposing Detox mobile E2E workflows to Claude Code

Security & Testing Score 93/100 3 findings 20/wk Cap. High
Guardian Intel npm
A
@abusix/guardian-intel-mcp-server

MCP server for Abusix Guardian Intel threat intelligence API

Security & Testing Score 93/100 1 finding 20/wk Cap. High
Hrbrmstr Kev npm
A
@hrbrmstr/kev-mcp

MCP server for CISA's Known Exploited Vulnerabilities catalog

Security & Testing Score 93/100 3 findings 20/wk Cap. High
Omnibridge npm
A
@15syedd/omnibridge

MCP-compatible sandboxed execution layer for AI agents with tamper-evident audit receipts

Security & Testing Score 93/100 4 findings 20/wk Cap. High
Parental Control npm
A
@gonzih/parental-control

MCP proxy for AI parental controls — content guardrails, spiral detection, parent notifications via Telegram/iMessage/WhatsApp

Security & Testing Score 93/100 2 findings 20/wk Cap. High