MCP server

Fray — WAF Security Testing MCP Server

io.github.dalisecurity/fray

Checked 25 Oct 2026, 21:11 UTC · Still published on its registry; checked against OSV.dev; never run by us

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

25 Oct 2026, 21:11 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add fray -- uvx fray@3.0.1

Claude Desktop

{"mcpServers":{"fray":{"command":"uvx","args":["fray@3.0.1"]}}}

Codex (config.toml)

[mcp_servers.fray]
command = "uvx"
args = ["fray@3.0.1"]

Gemini CLI

{"mcpServers":{"fray":{"command":"uvx","args":["fray@3.0.1"]}}}

Cursor

{"mcpServers":{"fray":{"command":"uvx","args":["fray@3.0.1"]}}}

VS Code

{"servers":{"fray":{"type":"stdio","command":"uvx","args":["fray@3.0.1"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting

Related MCP servers

• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• Cognita
  Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
• PromptBrake Free Tools
  Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
• Validoria
  Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.
• Propagation breaker for agent fleets
  Propagation breaker: egress quarantine + fingerprint outbreak telemetry for fleets.
• AgentDiet Domain OSINT, TLS Certificate & Security Headers Recon
  Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
• sebbi.pro - the proof layer for AI
  Score, seal and prove AI decisions in Bitcoin, plus 755 compliance checks, free to verify.
• IntoDNS.ai DNS & Email Security Scanner
  DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.dalisecurity/fray.svg)](https://aptlynx.net/servers/io.github.dalisecurity/fray)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents