- Conduid
- Marketplace
- #ai-security
MCP servers tagged ai-security
796 live MCP servers tagged "ai-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ai-security.
LLM Security Payloads
A defender's field guide to attacks on LLM apps — prompt injection, jailbreaks, system-prompt extraction, data exfiltration — mapped to OWASP LLM Top 10, each with its defense. EN…
Skillsentry
A semantic scanner for malicious MCP servers and agent skills — prompt-injection, tool-poisoning, rug-pulls, excessive agency.
Trifecta
Find and block the lethal trifecta that forms across your MCP servers.
Bfsi Agents Fraud Lab
Clerivon AI lab/pilot: multi-agent BFSI fraud detection (Monitor→Investigator→Adjudicator→Explainer→Feedback). Synthetic E2E demo — Streamlit, harness, SQLite/Postgres, Docker.
Awesome AI Agent Security
A curated, opinionated list of resources for securing AI agents, LLMs, and the Model Context Protocol (MCP) — attacks, defenses, tools, labs, and research. All links verified.
Fde101
A practical, book-style field guide for Forward Deployed AI Engineers covering LLMs, production RAG, agents, LangGraph, evaluation, LLMOps, security, code examples, and interview…
Openclaw Install Tools
Simplify OpenClaw setup with guided install steps, LAN file transfer, and AI-powered error diagnosis for macOS and Windows users.
Oath Playground
Model Context Protocol (MCP) authorization & OAuth security experiments
Bouclier AI
Open-source, certificate-free prompt-injection monitor and optional blocker for macOS AI coding agents — on-device detection; no accounts or passive app telemetry.
Security Pocs
Exploring MCP security: prompt injections, leaks, auth bypasses, OPA policies, and quirky edge cases. A playground for safe, educational, and cutting-edge model security experimen…
Malwar
Static analysis engine for detecting malware in agentic AI skill files
Secure Gateway
A hardened Model Context Protocol gateway with auth, tool allow-listing, output validation, and audit logging
AI Security Roadmap
Bilingual, evidence-led roadmap for LLM, RAG, agent, MCP, red-team, and blue-team security.
Praetor Security
Multi-engine static security analysis for code, repos, and AI agents: SAST, secrets, SCA, AI-security, and serialized-model/pickle scanning. Reports attack CHAINS and an agent cap…
Trustlogix
Trustlogix — independent third-party profile of a public API surface, by API Evangelist. TrustLogix is a data security and access governance platform that unifies data visibility,…
Silmaril
Silmaril — independent third-party profile of a public API surface, by API Evangelist. Silmaril is a Y Combinator-backed runtime security company that builds an AI application fir…
Secure Agent Starter
Starter for AI agents that never hold their own secrets: screen untrusted input and fetch API keys just-in-time with 1Claw. Part 1 runs with no account.
Envelope Harness
Two-arm attack harness for MCP tool-result integrity: control agent falls to injection-driven exfil, protected agent (signed envelope + Biba floor) holds. Companion to purplehooti…
Awesome Agent Security
A curated list for securing autonomous AI agents — configs, runtime, tools, MCP, and red-teaming
Consentinel
Static security auditor for MCP servers. Finds tools that can do irreversible or external damage and verifies each one actually enforces a human-in-the-loop safeguard — not just d…
Claude Code Templates
Build production-grade Claude Code project templates with specialized agents, reusable skills, rules, and hooks for faster app development
Webdock MCP
MCP server for Webdock.io — manage VPS servers, snapshots, SSH/shell users, scripts, and webhooks from any MCP-compatible AI client
Investigation Reports
MCP security investigation and hunting reports — reference material for detecting and investigating agent tool activity.
Deconvolute
Policy-as-code enforcement and observability for MCP tool calls. Wraps AI agent sessions with cryptographic integrity checks, argument-level CEL policies, and a full audit trail.
Agentgate MCP Firewall
Governance proxy for MCP tool calls with narrow independent verification for governed write_file and delete_file effects.
Striker
Deterministic exploit validation for MCP servers — enumerate attack surfaces, execute controlled security probes, and generate replayable evidence without an LLM in the loop.
Skill Auditor
security audit tool for MCP Servers & AI Skills
Agent Threat Scanner
面向 AI 智能体生态的安全扫描器，支持检测 Skills、MCP 服务、智能体配置及工具集成中的安全威胁。/ Privacy-first security scanner for AI agent artifacts, including Skills, MCP servers, agent configurations, and tool integr…
Claude Code Security
A 6-layer security framework for Claude Code workspaces: prompt injection detection, memory poisoning prevention, secrets scanning, behavioral audit logging, and pre-commit guardr…
Xclaude Gateway
Durable local audit trail for Claude Code and MCP tool activity. Records, classifies and keeps the history on your Mac.
Purplegate
purplegate — Red/blue-team CI gate for agentic-AI apps. Prompt-injection, secrets, SAST, deps, IaC/RLS, workflow injection, MCP checks. One signed GitHub Action, mapped to OWASP L…
Securemcp Lite
A lightweight local MCP firewall for AI agents that enforces YAML security policies on tool calls.
Supply Audit
Census and provenance audit for the public MCP server ecosystem: registry enumeration plus evidence-carrying static findings.
Ganimedes Project
A local, zero-dependency security gateway for MCP servers. Audit, block and approve what your AI agents actually do.
Aadvanced MCP Lab
Advanced MCP implementation with remote HTTP transport, filesystem roots security, server-initiated LLM sampling & OpenAI GPT-4o-mini integration — production-ready agentic AI arc…
Suprawall Plugins
🛡️ Official monorepo for SupraWall security plugins and framework integrations. Deterministic zero-trust guardrails for AI agents, including Prompt Injection protection, PII scrub…
Promptwall
A firewall for LLM traffic: detect prompt injection, jailbreaks, and secret/PII leaks. Zero-dependency Python library + CLI + MCP server.
Sentinel Scan Vscode
VS Code extension: inline MCP config security diagnostics (mcp.json / claude_desktop_config.json), free, powered by sentinel-scan-cli's OWASP-mapped heuristics
Vulnerability Detection
Self-contained MCP security server that scores AI agent tool-calls with a rule-based library + behavioral detector, giving explainable, MITRE-mapped verdicts for known attacks
Promptsonar
Static security scanner for AI prompts, MCP configs, and agent workflows. Zero LLM calls. Local-first. OWASP LLM Top 10 aligned.
Agent Security Action
GitHub Action to scan for AI agent security vulnerabilities — 190+ detection patterns for OWASP ASI Top 10, prompt injection, MCP security, and credential exposure
Action
Vibe Code Security CI
Webmcp Lint
Security and spec-correctness linter for WebMCP tool manifests.
Credscan
credscan — secrets scanner for your code and your AI agent's memory: source, staged git changes, and .claude/.cursor/.codex/MCP configs
Ctxguard
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
Correctover Scan
Security scanner for MCP servers and AI agents — detects credential leaks, RCE, SSRF and missing auth against OWASP AISVS 1.0; also scans published JS bundles/npm packages.
Mcpgawk
One gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your…
MCPGoat
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-comm…
Contextguard
Zero-trust governance middleware for Model Context Protocol deployments
Trust Anchor
Trust anchor and security infrastructure for Model Context Protocol integrations.