CyberMCP
If you are the rightful owner of CyberMCP and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
CyberMCP is a Model Context Protocol (MCP) server designed for AI-powered cybersecurity API testing, offering tools and resources to identify and mitigate vulnerabilities.
CyberMCP is a robust Model Context Protocol (MCP) server that empowers AI agents to conduct thorough security testing on backend APIs. It is equipped with 14 specialized security tools and 10 resources aimed at identifying vulnerabilities such as authentication bypass, injection attacks, data leakage, and security misconfigurations. The server supports integration with major AI-powered IDEs, facilitating seamless security testing workflows. CyberMCP is built with Node.js and TypeScript, ensuring a modern and efficient development environment. It provides comprehensive documentation and a structured project layout to assist developers in setup and customization. The server is licensed under the MIT License, promoting open-source collaboration and contribution.
Features
- 🔐 Authentication Testing - JWT analysis, bypass detection, OAuth2 flows
- 💉 Injection Testing - SQL injection, XSS vulnerability detection
- 📊 Data Protection - Sensitive data exposure, path traversal checks
- ⏱️ Rate Limiting - DoS vulnerability assessment
- 🛡️ Security Headers - OWASP security header validation
Tools
Certification Tool
basic_auth
,token_auth
,oauth2_auth
,api_login
,auth_status
,clear_auth
Certification testing tools
JWT vulnerability check, authentication bypass check
Injection testing tools
SQL injection check, XSS check
Data Leak Testing Tool
Sensitive data inspection, path traversal inspection
Security head testing tool
Safety head check