- Conduid
- Marketplace
- #ai-security
MCP servers tagged ai-security
796 live MCP servers tagged "ai-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ai-security.
PortunusMCP
Zero-trust, risk-aware gateway proxy for the Model Context Protocol (MCP) — enforces identity-scoped tool access, detects schema drift ("rug pull") attacks, scores tool-call risk,…
AI For Architect
🚀 24-week AI Engineering journey with Python, LLM APIs, MCP servers & production patterns. Streaming clients, multi-provider CLI, token tracking. Perfect for developers entering A…
Defense Bench
Vendor-neutral benchmark measuring how MCP security proxies/gateways DEFEND against 22+ attack vectors — crosswalked to NIST AI RMF & OWASP LLM/Agentic Top 10. CI-gated, reproduci…
Injection Lint
Semantic prompt-injection & tool-poisoning linter for MCP servers. Precision-first, 100% local — tells real injection apart from legitimate tool descriptions.
Trustlint
Security contract testing, tool-poisoning detection, and drift gates for Model Context Protocol servers.
Ephorate AI Governance And Monitoring
Open-source control plane for AI agent security & governance — runtime policy enforcement, tamper-evident audit, prompt-injection detection (SIEM/EDR) and compliance mapping (NIST…
Secops
Security operations as conversation. An MCP server connecting 13 security platforms (Wiz, Kodem, GitHub, Okta, SentinelOne, Apono, Twingate, Pluto, Panorays, Abnormal, Slack, Mond…
Agentmoat
A security layer for AI agents: detects prompt injection, firewalls dangerous tool calls, scores inter-agent trust, and keeps a tamper-evident audit log. Works with the Anthropic…
Llmesh
Security-first local LLM swarm over MCP with signed peer discovery, fail-closed validation, audit trails, and Docker-based PoC nodes.
Sigstore Cosign MCP
🔌 Exposes Sigstore cosign + Rekor transparency log verification.
Bom
MCP-BOM: a reproducible attack-surface benchmark for Model Context Protocol servers — NeurIPS 2026 ED submission
Detection Lab
Detection-engineering for MCP: working Sigma rules for the OWASP MCP Top 10 + isolated home-lab + zero-dependency validator (git clone && python3 validate.py).
Cinch AI Security
MCP server + cross-harness skills for building and operating AI agents safely. Grounded in NIST AI RMF, CISA, OWASP, CUSTODY, LASM.
Local MCP Toolbox
Secure, read-only MCP tooling for local environment inspection with policy controls, redaction, and auditing.
Bedrock Security MCP
ARCHIVED: development moved to github.com/AUAggy/agent-sec-scanners (packages/bedrock). npm package unchanged. MCP server + CLI auditing AWS Bedrock security posture: IAM, logging…
Toolbastion
A zero-trust security gateway that inspects, approves, and audits MCP tool calls before execution.
Exploit Validator
Proves whether AI agent (MCP) tool configurations are actually exploitable - not just risky-looking. Existing scanners infer risk from manifests; this one validates it in a sealed…
Loomdb
An agent-native database. Sessions are branches an agent can fork, merge, and rewind; every write records what it was derived from; and taint-and-recall tells you exactly what a p…
Safemcp Gateway
MCP security gateway with zero dependencies - blocks prompt injection, path traversal and SSRF attacks on AI agents.
Pcap MCP
Secure MCP server for AI-assisted PCAP analysis with tshark, redaction and prompt-injection defense.
Cloak
Local, reversible secret & PII redaction proxy for MCP traffic — masks API keys/PII in JSON-RPC both directions with an audit log, and restores real values locally for debugging.
Wasphole
Open-source MCP honeypot with fake tools, canary credentials, session replay, and alerting.
Trust Issues
Adversarial security review for AI skills, repos, MCP servers, and packages before you install them. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO WI…
Xche AI App Security Pack
Free security guardrails for apps built with AI coding tools (Claude Code, Cursor, Lovable, Bolt). Drop-in rules + OWASP/LLM/MCP policy + secret-scanning hooks & CI gate.
AISecuritySecondBrain
AI/LLM security knowledge base — OWASP LLM Top 10, MITRE ATLAS, prompt injection, agentic security. An Obsidian vault: 92 interlinked, fully-cited pages.
Malskanner
Scan a repo for hidden prompt-injection before your AI agent trusts it — CLI, MCP server & GitHub Action. Run: npx malskanner <repo>. 0 false positives across 5,620 files.
Prompt Injection Defense
The language-level attack defense skill every agent should keep. Covers 12 attack categories. Works with Claude, GPT, Gemini, Copilot, and any LLM.
AgentInterdict
AgentInterdict — runtime enforcement for autonomous AI agents. Trust context. Verify authority. Interdict unsafe action.
Secchecker
Static security scanner and analyser for AI agents, MCP tools, and LLM applications - OWASP LLM Top 10, and infrastructure checks. Zero runtime dependencies.
AI Security Red Team Testing Guide 2026
AI Security: Red Team Testing Guide 2026
Revoke Probe
Local-first reachability check for AI coding-agent and MCP workflows
AI Security
Open-source, self-hosted Fastest AI security gateway for LLM and agent apps: guardrails, agentic PDP, semantic caching, MCP gateway.
Inkie Auto Mode
Don't let your agent delete the database. Hybrid static + LLM permission classifier for Claude Code, OpenClaw and Cursor.
Umai Core Ce
The open-source Kernel Semantic Firewall (KSF) for the AI ecosystem. Powered by eBPF and XDP.
Ramen AI Integrations
Pre-execution semantic firewall for AI agents. Signed policy verdicts, BYOK, zero-trust receipts.
Agentbouncer
Scan what your AI agent can actually do — before it does it. Open-source MCP security scanner.
Hacking The LLM AI Goat Red Team
Red teaming AI Goat™ to explore OWASP Top 10 for LLM Applications (2025), prompt injection, RAG poisoning, MCP-assisted auditing, and AI security vulnerabilities.
Secureagent
Comprehensive AI & Cloud Security Platform - Security scanning for MCP, LangChain, OpenAI, AWS, Azure, Terraform
Pipelock Verify Python
Python verifier for Pipelock action receipts (Ed25519-signed, chain-linked)
Roelint
Turn Rules of Engagement into a policy firewall for red-team commands and AI agents
Wardrail
Local security scanner for vibe-coded apps: stop API key leaks, Git-history secrets, and unsafe MCP or AI agent instructions before commit.
Nazarix
Verifiable audit evidence for AI in finance, biotech and production — a spec and single-file verifier. No vendor trust required.
AI Agent Audit
Offline Windows endpoint scanner for AI coding agent security posture (Claude Code, Cursor, Codex, Copilot, Grok)
Wazuh Enhanced
Enhanced Wazuh implementation: LLM chatbot assistant, PECA compliance detection rules, and custom plugins for interactive network graphs & NLQ search.
Giveago Sonnylabs
A hands-on AI security workshop that hacks and protects AI agents using MCP servers, featuring real vulnerability demos and prompt injection defense.
ODIN Project
Odin - Zero Trust AI Agent. Open-source autonomous LLM agent with CaMeL dual-LLM, IFC taint tracking, DID-based identity, 3-ring sandbox, 5-state circuit breaker, and 3-phase cogn…
Aip Gateway
Drop-in policy proxy for AIP delegation verification on MCP and A2A
Batesian
Active security scanner for A2A and MCP servers
Idprova
Cryptographic identity for AI agents — Ed25519 keys, delegated authority, hash-chained audit receipts. Rust core + Python/TypeScript SDKs.
Hackbot
A control plane for LLM-driven offensive security work, with a human in the loop. Bounded workers, content-addressed evidence, and a four-tier gate where two tiers are not models…