- Conduid
- Marketplace
- #agent-security
MCP servers tagged agent-security
378 live MCP servers tagged "agent-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with agent-security.
Agent Cve Scanners
Free offline scanners for 53 CVEs in 9 AI-agent frameworks + MCP tool pinning. No telemetry.
Agent Proof Kit
Deterministic proof gates and a raw-byte write firewall for AI agents — CLI, MCP, in-toto receipts, Codex CLI and Mistral Vibe.
Sleeper
Local-first agent tool-call assurance lab: injection → tool action → control gate → evidence.
Agentproof
Experimental assurance manifests and policy checks for AI agents and MCP integrations. Local CLI, synthetic fixtures and GitHub Action.
Agentkeys
Never-in-context credential broker with one-action revocation
Magon
Runtime control for AI agents: every tool call gets ALLOW, ASK or BLOCK.
Claude MCP Allow
Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
Skill Scan Gate
CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers…
Template
Secure MCP server template in TypeScript and Python: stdio by default, optional streamable HTTP behind bearer auth, rate limit and body cap, bound to 127.0.0.1; bounded file and n…
Firewall
Scan and gate Model Context Protocol servers for tool poisoning, rug-pulls, and indirect prompt injection.
Audit
Python security scanner for Model Context Protocol (MCP) servers — find prompt injection, over-broad permissions, weak input validation, and credential leaks before your AI agent…
Mcpauth
Drop-in token-auth gateway in front of unauthenticated MCP servers
Audit
See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.
Preflight
Capability-aware risk scoring for AI coding agent tool calls. Five-dimensional decomposition, session-graph composition, repo awareness, the Agent Control Plane and Confused Deput…
SkillScanner
Universal AI agent skill security scanner. 5-layer deep defense for prompt injection, MCP tool poisoning, encoding obfuscation. Zero dependencies. Bilingual EN/ZH.
Agentgate
An AI DevOps engineer you can give prod access to — it freezes before any risky action and waits for human approval, with a full audit trail. Gates any MCP agent too. Open source.
Ares
Offensive security framework for autonomous AI agents — recon, foothold, provenance desync, coherence-evasion pacing, recovery poisoning, and exfil, gated by signed attestations a…
Safe Skills
🛡️ Zero-trust security gate & vulnerability scanner for AI agent skills (Claude Code, Antigravity, OpenCode, Codex). Powered by NVIDIA SkillSpector.
Agentx Security SDK
Runtime action firewall for AI agents: the keyless Shield. Screens catastrophic tool calls (DROP TABLE, SSRF, secret exfil) in-process, no key. Watches by default; set the posture…
Agentsec Agenthalt
Universal kill-switch with evidence preservation
Trust Me Bro
Every skill you install says trust me bro. This one reads it first. Pre-install audit for agent skills, plugins, and MCP servers: lethal-trifecta reach, injection wording, provena…
Agent Skills State 2026
Study of 2,999 public agent skill, plugin and MCP repositories (October 2026): missing security policies, unpinned MCP servers, unrestricted shell in skills, front matter that fai…
emektor/toolwrit
chained audit log with RFC 3161 timestamp anchors. Also usable as a TypeScript or Python library.
MCP
Free, open-source guardrails and verifiable evidence for AI coding agents: Claude Code, Cursor, Codex, MCP, and GitHub. Scopebond Cloud is a separate proprietary hosted workspace.
Guard
Validates MCP manifests and built artifacts for provenance, security, and supply-chain compliance.
Agentscan
Security scanner for AI-agent configs: MCP servers, CLAUDE.md, settings, hooks. Zero-dependency static analysis.
Agent Proxy Laundering
No description published.