- Conduid
- Marketplace
- #ai-security
MCP servers tagged ai-security
796 live MCP servers tagged "ai-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ai-security.
NullSec RedTeam AI
Authorization-first, MCP-governed security execution for explicitly approved environments.
Skillshield
🔒 Security-scored directory for AI agent skills and MCP servers. 33,000+ scanned, 12% malware detection.
CogniGraph
BloodHound for AI agents - graph-native capability reachability analysis for MCP and agentic AI systems
PROJECT ARGUS
Local-first security evaluation and runtime policy gateway for AI agents, MCP servers, skills, and LLM deployments
AI Act Companion
Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-security generators (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) - runs as a Claude Code plugi…
Strongroom
Own your agent secrets — your agent holds a scoped, single-use lease, never the raw API key. strongroom injects the real secret only at egress, so a leaked prompt or poisoned tool…
Broude
Your AI coding assistant's security watchdog. Claude Code hooks that catch supply chain attacks, exposed secrets, and obfuscated commands.
Tokenfuse
TokenFuse — runtime control for AI agents: per-run budgets, loop detection, burn forecast, kill-switch. Observability shows the fire; TokenFuse is the automatic extinguisher.
Hermes Shield
Input sanitizer for AI agents — anti-prompt-injection shield
Haechi
Experimental self-hosted AI context enforcement layer for LLM, MCP, vLLM, Ollama, and agent traffic.
RayCodes SkillSpector
🛡️ Streamlit dashboard wrapping NVIDIA SkillSpector CLI — scan AI agent skills, Claude MCP tools & Cursor extensions for prompt injection, data exfiltration & 64 vulnerability pat…
Skillguard
Static security scanner for AI agent skills and plugins — flags prompt injection, hidden Unicode, exfiltration, and dangerous commands in SKILL.md/CLAUDE.md and scripts.
Fluiq SDK
Instrument any LLM app in 2 lines. Tracing, evaluation, security, and caching for OpenAI, Anthropic, Gemini, LangChain, MCP, and more.
Agentic Workflow Guard
Static analysis for AI automation workflows. Find prompt-injection paths, overpowered tools, and write-capable agent jobs before they run.
LogPoseSIFT
An autonomous, multi-agent DFIR orchestrator. LogPose utilizes custom MCP boundaries to safely execute SIFT tools and synthesize breach data into actionable timelines at machine s…
ZugaShield
7-layer AI agent security system — stop prompt injection, data exfiltration, and AI-specific attacks in under 15ms. Zero dependencies.
Mylonite
Open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.
Skill Trust
Transparency verifier for Agent Skills — verify that AI skills declare their behavior honestly. Scans code for network, filesystem, shell, and env access patterns.
Attenu Guard Ts
Attenu Guard for TypeScript — per-agent permissions on every tool call and sub-agent handoff (a sub-agent never holds more than its parent) with a hash-chained audit log verified…
Medops Rag
可审计、多租户的企业知识库问答 Agent：多模态文档解析、SQLite FTS5 混合检索、LangGraph 受控编排、MCP、来源引用、拒答与 Vue 3 控制台。
Skillguard CLI
Static security scanner for AI skills, agents, prompts, and MCP instruction files
LLM Security Skills
Agent Skills that turn your AI coding agent into an LLM security reviewer — prompt-injection testing, OWASP LLM Top 10 audits, MCP & RAG review, KVKK/PII checks. English + Turkish.
Pkgguard API
Open-source AI package security gate that blocks slopsquatting, hallucinated dependencies, and typosquats before npm, pip, uv, or cargo install
Agentattest
Open-source, tamper-evident compliance evidence for AI agents. Ingests from your gateway and framework, exports evidence mapped to EU AI Act, ISO 42001, and NIST AI RMF.
Legit Security
Legit Security — independent third-party profile of a public API surface, by API Evangelist. Legit Security is an AI-native Application Security Posture Management (ASPM) platform…
Ctxsentry
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
Oathe MCP
MCP server for Oathe AI security audits — check trust scores before installing MCP servers, plugins, or AI agent skills
Agent Sentry
An enterprise-grade AI Gateway Proxy securing autonomous agents. Features MCP-Guard (an AST-based containment firewall and Docker sandbox blocking 100% of subshell injections) and…
Agentic Filesystem MCP
A secure, highly capable MCP server written in Rust. It exposes a comprehensive suite of filesystem operations as tools for AI agents.
Pod
pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.
Mcpbait
Red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server
Skillfence
Runtime behavioral security for Agentic Skills — deterministic policy engine, human-in-the-loop gate, full OWASP Agentic Skills Top 10 (AST01–AST10) coverage. Not another SKILL.md…
Agent Chaperone
Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
Atr
Rust loader and matcher for Agent Threat Rules YAML. Vendors the upstream ATR ruleset (MIT, ATR Contributors).
AntiClaude
Open-source red-teaming toolkit for AI agents. 64 attack payloads covering 7/10 OWASP Agentic Top 10.
Openclaw Codex Agent
Implement a contract-first dev workflow that plans, runs, verifies, and fixes code tasks for reproducible, auditable, and verifiable development.
Skillxray
Scan an AI agent skill for prompt injection, hidden Unicode, dangerous commands, and leaked secrets before you install it.
Mia
Managed Identity for Agents. Scoped, revocable, live-checked identity and enforcement for AI agents acting on behalf of a human.
Agentblackbox
AAPP: Flight Recorder for AI Agent Tool Actions. Prove what an AI agent was allowed to do, what tool it requested, what policy decided, and whether the evidence was changed later.
Scopeguard MCP
Policy-first defensive security operations server for MCP
Noma AI Spm Report Kiro Power
Official Noma AI-SPM Report Kiro Power candidate for AWS review
Mpak Trust Framework
MTF: An open security standard for MCP server bundles. Defines compliance levels, controls, and verification methods.
Privacyfence
Open-source privacy and approval gateway for AI assistants (MCP): human approval, local PII checks and audit for Gmail, Drive, Slack, Salesforce, Jira and more.
Agent Fence
Local security layer for AI coding agents that blocks secret leaks, destructive commands, unsafe Git operations, and unauthorized network access.
Agent Runtime Community
Agent Runtime Security Platform, Open-source zero-trust security and governance layer for autonomous AI agents featuring runtime policy enforcement, DLP scanning, MCP tool verific…
Cloison Runtime
Multi-tenant AI agent runtime with OS-level isolation. Sandboxed execution, encrypted credentials, private memory per tenant — one server, no Docker.
Prompt Foo
Promptfoo is an open-source CLI and TypeScript/Node.js library for evaluating, red-teaming, and security-testing LLM applications, agents, and RAG pipelines. It runs deterministic…
Arcjet Go
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Go cod…
Threatveil Oss
Open-source assurance infrastructure for tracking whether security evidence still applies as autonomous AI systems change.
M8m
AI memory observability, provenance & security