- Conduid
- Marketplace
- #ai-security
MCP servers tagged ai-security
630 live MCP servers tagged "ai-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ai-security.
Skrun
Policy-bound runtime execution and isolation engine for immutable AI agent skill artifacts
AI Osint
🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, an…
Penetration Testing
The ultimate OWASP MCP Top 10 security checklist and pentesting framework for Model Context Protocol (MCP), AI agents, and LLM-powered systems.
Panguard MCP Proxy
MCP Proxy — runtime interception for AI agent tool calls using ATR rules
Rampart
Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor, Codex, and any AI tool can do on your machine.
Antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a…
0
A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]
Audit Tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pu…
AgentScan
Security scanner for AI-agent configs: MCP servers, CLAUDE.md, settings, hooks. Zero-dependency static analysis.
Node9 Proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
Claudit Sec
Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled tasks, and permissions.
Veritensor
The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections.…
Helm AI Kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Halo Record
Tamper-evident runtime records for AI agents. Hash-chained, dependency-free, verifiable by anyone.
Clawseccheck
🦞 Local, read-only security scanner for OpenClaw. Finds config, prompt-injection and supply-chain risks — A–F grade.
Multi Agent Workflow Lab
Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
Guardana
Open-source AI security verification — model artifacts, live endpoints, MCP servers and recorded agent traces. One rule engine for your laptop, CI and production, mapped to OWASP/…
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
SecuritySkills
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
Awesome AI Agent Attacks
A curated timeline of real AI agent security incidents, breaches, and vulnerabilities (2024-2026). Every entry sourced and dated.
Vex MCP
MCP proxy that blocks tool poisoning, rug pulls, and excessive agency in real time
Shieldcortex
Trustworthy memory and security for AI agents. Memory firewall for any host that writes through it; runtime tool gates on Claude Code, OpenClaw, and Hermes.
Opena2a CLI
Unified CLI for the OpenA2A security platform
Eslint Plugin MCP SDK Security
ESLint plugin for Model Context Protocol (MCP) SDK security — catches tools registered without an input schema, handlers reading arguments the schema never declared, model-visible…
Farenhytee/database-sentinel
only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an `audit` prompt returns scored findings with fix SQL.
Control
Decide which MCP tool calls your AI agents can run: a local gateway with signed policies, one-time approvals and an evidence trail. Experimental alpha. Open source, Go.
Heimdall
Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.
Reap
reconnaissance for agent attack surfaces
agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
SafeAI
Static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and gov…
Awesome Security Agent Harnesses
AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.
AI Dfir Toolkit
A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider t…
Ave
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Jes
Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for prompt injection, jailbreaks and secret/P…
Box
Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.
Heddle
Heddle — The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.
Stroq
Local action firewall for AI coding agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions
Gomcp
🛡️ The only Open-Source RLM Memory Server with Mathematically Proven Safety. Persistent context, MCP tools & Sentinel Lattice protection for autonomous AI agents.
Mcpwn
Offensive security testing framework for MCP (Model Context Protocol) servers. Active red teaming with command injection, SSRF, RCE blind, tool poisoning detection + vulnerable la…
Sectinel
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any…
AgentVetter
Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided triage and fix. Scan what agents install; f…
OpenTrustBench
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Orca AI Incident Archive
An open database of real-world AI agent incidents.
LLM Shield Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-…
server
Passport & visa system for AI agent credentials. Detect, classify, and govern API keys, tokens, and secrets across MCP, OpenAI, Anthropic, LangChain, and more. Encrypted vault, po…
Aircrack MCP
MCP server that wraps aircrack-ng, enabling AI assistants to run and automate WiFi security assessments (scanning, handshake capture, cracking) for authorized penetration testing.
SentinelMCP
Stateless enterprise policy firewall & token-cost proxy for Model Context Protocol (MCP).
Openclaw Security Guard
🛡 Enhance OpenClaw security by auditing, monitoring, and protecting your installation with a reliable all-in-one tool.
Mitre Attack MCP
🔌 Exposes MITRE ATT&CK matrix lookup + tactic/technique mapper over MCP — MIT
Openclaw Superpowers
44 plug-and-play skills for OpenClaw — self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graphs, and MCP health monitoring. Your agen…