Security MCP servers

Bridge IDA Pro with LLMs for AI-assisted reverse engineering via MCP.

MCP server that lets LLMs decompile and analyze binaries through Ghidra.

JADX decompiler plugin that exposes Android APK reverse-engineering to MCP clients.

Official PortSwigger MCP server that connects Burp Suite to AI clients for web security testing.

Native Ghidra extension exposing reverse-engineering analysis tools over MCP.

Official Semgrep MCP server for scanning code for security issues.

Official SonarQube MCP server for code quality and security findings.

Official Bitwarden MCP server for vault access through the CLI and organization admin through the Public API.

Official HashiCorp Vault MCP server for managing secrets and secret mounts.

Official Trivy MCP plugin that lets agents scan projects for vulnerabilities and misconfigurations.

MCP server for querying the Open Source Vulnerabilities database.

Official GitGuardian MCP server to find and remediate hardcoded secrets across 600+ secret types.

Official MCP server for querying CloudTrail events and CloudTrail Lake during security and audit investigations.

Official MCP server for managing AWS IAM users, roles, policies, and permissions.