- Conduid
- Categories
- Security
Security MCP servers
Security MCP servers indexed by Conduid, ranked by trust score. 4.9K live listings from GitHub, npm, PyPI and the official registry, each with a 0–100 score, security checks, and install commands.
Agent Vault
Zero-trust credential manager for AI agents
i-am-bee/acp-mcp
An MCP server acting as an adapter into the [ACP](https://agentcommunicationprotocol.dev) ecosystem. Seamlessly exposes ACP agents to MCP clients, bridging the communication gap b…
VulnMCP
A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.
Repo Forensics
Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies.
Git Mob
CLI tool to help you automatically add Co-authored-by trailers to git commits during pair/mob programming
Pentest AI
The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.
Valhuntir
Valhuntir CLI — AI-augmented incident response platform
Ubon
Peace of mind for vibe-coded apps
Obsidian CLI Rest
Control your Obsidian vault programmatically. This plugin turns all Obsidian CLI commands into a local HTTP API and MCP server, letting you automate your workflow from scripts, to…
mopanc/depguard
the SBOM serializer is implemented natively against the public CycloneDX schema.
Bluerock
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache…
Code Guardian Report
Enterprise-Grade AI-Powered Security Analysis Platform
Superbrain
Session memory for Claude Code. Auto-captures every session into a plain Obsidian markdown vault. Zero config. MIT. macOS + Linux.
Unlost
Bridging code authorship and ownership
Heron
Open-source AI agent auditor. Know what your agents do before production.
ZeroGraph
ZeroGraph - pentest agent for whitebox code review
Js Recon
JS Enumeration & SAST
Offsec AI
offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.
Agent LibOS
Agent libOS provides a runtime substrate for self-evolving LLM agents with process-like execution, tool management, and security boundaries implemented through explicit capabiliti…
Mcpgrade
Lighthouse for MCP servers — score any MCP server on agent usability, not just spec compliance
Cyvisguard
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
Modelfuzz
🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.
Eodhd Claude Skills
Claude Code plugin for EODHD financial data — 150k+ tickers, 70+ exchanges, OAuth MCP server with 80 tools, 7 workflow skills, financial-analyst agent, 5 slash commands. MIT.
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Osim Schema
OSIM （Open Security Information Model）是 面向 AI 的开源安全数据标准化 项目，通过定义规范统一的安全数据 schema 语义层，破解行业数据碎片化难题，使安全团队、工具和 AI 系统能够在不同的数据源之间进行一致性推理和分析。致力于实现跨厂商、跨产品的安全数据无缝对接，为安全智能化升级与建立协同防御的核心数据打基础！
Cc Audit
AI-free static security scanner for Claude Code artifacts (Skills, Hooks, MCP configs). Detects data exfiltration, prompt injection, and supply chain risks with deterministic, rep…
ZAP MCP
VIBE CODING 😈 lol
Winforensics MCP
A comprehensive MCP server for Windows digital forensics on KALI Linux
Salesforce MCP Lib
Salesforce MCP Library is a local stdio bridge for Salesforce MCP endpoints using OAuth client credentials, featuring a reusable Apex MCP library and JSON-RPC 2.0 core.
Awesome AI Red Teaming Jp
AI Red Teaming / AI Safety に関する日本語リソースのキュレーションリスト
Frontend API
Ship product, not plumbing. Open source framework for AI-first SaaS — identity, OAuth, API auth, webhooks, notifications, and agents in one stack.
Vibegroup
Let your team's Claude Code agents talk to each other, end-to-end: ask what a teammate is building, flag a change before you ship it, or hand off work.
Nabu.NET
Nabu is an ASP.NET Core extension that makes it easy to expose existing application endpoints and actions as Model Context Protocol (MCP) tools, allowing AI agents and MCP-compati…
Pyauthenticator
TOTP authentication for Python, the command line, and automation.
Helios
An AI IDE secure coding MCP service
Maltego MCP
OSINT graphs are point-and-click busywork. maltego-mcp lets an LLM author the .mtgx and run the whois, DNS, ASN, and crt.sh lookups. Works on the Basic plan.
More MCP
Turn WordPress into an MCP server for Claude, ChatGPT & Gemini: OAuth 2.0 + API-key auth, 107 built-in tools, 36 toggleable integrations (WooCommerce, Elementor, ACF, SEO & more).
VirusTotal Threat Analysis
VirusTotal MCP Server是一个让AI结合威胁情报进行深入分析、基于 Model Context Protocol (MCP) 开发的 VirusTotal API 调用工具，为用户提供文件、IP地址、域名和URL的威胁情报查询功能，并将得到的数据喂给AI进行二次分析，提升威胁情报分析能力并给予处置建议。
Agent Codemode
Let the scripts your coding agent writes call your connected MCP servers (no extra auth)
Pipe Stock Analysis
Self-hostable read-only finance MCP server for Taiwan and global stocks. Bring your own FinMind and Finnhub credentials.
Sir Thaddeus
Private, local-first AI assistant for Windows with permissioned tools, durable memory, and evidence-driven small-model improvements.
Claudii Exploratores
OSINT suite for Claude — 898 curated OSINT tools as an Agent Skill + MCP server (classifier, URL builder, IBAN check, PII redactor). ALPHA.
Dsh Oomol
OOMOL Connector for DeepSeek Harness—discover connected apps and execute Actions through progressive MCP discovery without exposing provider credentials.
Burp MCP Security Analysis Toolkit
Burp MCP Security Analysis Toolkit
BridgeWard
Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injecti…
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
Jvd
Juniper Validated Designs — configs plus an interactive portal: snip library, BYOAI assistants, and a config generator.
Talk To Your Slides
PowerPoint Slide Editing Agent, accepted at ACL 2026 Findings
Arcjet Py
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Python…
AI Agent Hacking Writeups
A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.