wpscan-mcp-server
Verified Safeby sjinks
Overview
Provides an MCP interface for querying WordPress vulnerability data via the WPScan API.
Installation
node dist/index.jsEnvironment Variables
- WPSCAN_API_TOKEN
Security Notes
The server correctly retrieves the WPScan API token from environment variables, preventing hardcoded secrets. It acts as a wrapper for the legitimate WPScan API. No 'eval', obfuscation, or unusual network activities beyond the documented API interaction were found. The primary security consideration is trusting the WPScan API itself and ensuring the API token is securely managed by the user.
Similar Servers
mcp-watch
A comprehensive security scanner for Model Context Protocol (MCP) servers, detecting various vulnerabilities in their implementations.
mcp-server
This plugin implements a Model Context Protocol (MCP) server for WordPress, exposing WordPress's data and functionality through its REST API to AI clients.
intruder-mcp
Enables MCP clients to manage and query vulnerability scanning and security posture information from Intruder.io.
mcp-security-scanner
A Python-based penetration testing tool designed to scan and identify vulnerabilities in Model Context Protocol (MCP) servers.