- Conduid
- Marketplace
- #ai-security
MCP servers tagged ai-security
796 live MCP servers tagged "ai-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ai-security.
Mandatepay
Authorization firewall for agentic payments: signed mandates, policy-as-code, human approval and verifiable audit.
Vakt
Open-source AST aware code scanner to find your app’s vulnerabilities.
Behavry Proxy
Inline MCP governance proxy — OPA/Rego policy enforcement, DLP scanning and prompt-injection detection on every tool call, before it executes.
AI Audit Docker
Self-hosted Docker container for AI & GEO Readiness Audit Tool (Next.js + Ubuntu 26.04 + Nginx)
Agentic Deception White Paper
Deception at the Registry Layer: detecting autonomous AI agents in MCP environments (working paper)
Web Agent Gateway
Local least-authority gateway connecting Web AI clients to user-approved developer resources.
Clavenar Specs
Technical specifications for Clavenar — TECH_SPEC.md is the source of truth for every wire contract across the clavenar-* repos.
Openclaw Nie Guard
Cryptographic trust mediation layer for AI agent frameworks. Apache 2.0 reference architecture composing device-attested admission, short-TTL scoped capabilities, runtime continui…
Eugenio Agent Portfolio
Portfolio técnico de Eugenio Santiago — arquitetura de agentes AI: multi-agent systems, MCP servers, n8n workflows. Berlin.
Maxwells Defense
Adaptive proof-of-work defense for AI agents. Asymmetric thermodynamic cost: attackers dissipate, defenders verify in O(1). Reference implementation of T-IB-09 (Adversarial Dissip…
ClawGuard
AI Agent Memory — Fewer prompts, smarter decisions. Remembers your trust decisions across Claude Code, Codex & MCP. Free & open source.
Claude Guard
Security scanner for your Claude Code setup — flags risky skills, hooks, MCP servers & committed secrets. Zero dependencies, offline.
Semantic Intent Scanner
Semantic intent evaluation for agentic systems. Detects instruction-layer risks including authority laundering, consent bypass, concealed execution, and semantic attack patterns i…
Claude Skills Security
Defensive security audit skills for Claude — tech-stack-keyed and audit-domain-keyed packs for SaaS apps.
LLM Redteam
面向中文场景的开源 LLM 红队测试工具 | An open-source red team toolkit for LLM applications, covering prompt injection, jailbreak and info leakage attacks, with OpenAI/Dify/MCP adapters and LLM-a…
Omnodex
Omnodex: Security & Observability for AI Agent Execution
AI Redteam Notes
Pre-registered research on prompt injection through agent tool output, plus a dependency-free substrate auditor whose checks run in CI.
Enterprise Code Bastion
Enterprise-grade guard for letting Claude work on source code: isolated per-task containers, no direct tool access, MCP-mediated command filtering and audit.
Skil
Vendor-neutral security, verification, and enforcement framework for AI agent skills
AI Infra Security
Vulnerability research on AI infrastructure: LLM gateways, MCP transports, and model-serving stacks. Root cause, reproduction, and detection.
SOCLOOM
SOC operations woven with 800+ security skills, ML detection & MITRE ATT&CK — open-source AI-native SOC platform
Sovereign Security Protocol
Full SSP v13.4.0 source in Portuguese, with bilingual community summaries for application security, secure SDLC, AI agents, MCP, and evidence-based adoption.
Repotify
Thousands of agent skills. The right ones for your repo. Repotify reads the skills developers and AI companies publish on GitHub, checks them for risks and installs the best ones…
Positionguard MCP
MCP server for PositionGuard: area-level presence for AI assistants, read-only, no coordinates. Answers only what a member has chosen to share, and says 'unknown' otherwise.
Attack Matrix
ATT&CK-style MCP attack matrix: tactics x techniques mapped to MITRE ATLAS, OWASP MCP Top 10 (2025) & SAFE-MCP, with detection notes and cited public research. A reference, not a…
Mcpsum
Stop MCP servers from rug-pulling your AI agent. A lockfile + runtime reference monitor for MCP tools.
Immune
Immune — the agent security loop that turns every attack into an antibody. MCP firewall → replayable breach trace in ClickHouse → synthesized countermeasure → replay-proven → Semg…
Scrutiny
Static and semantic security scanner for MCP servers: unpinned packages, rug pulls, tool poisoning, shadowing and toxic flows. Trained model, SARIF output, zero dependencies, full…
Sealwall
Zero-dependency firewall and tamper-evident audit log proxy for Model Context Protocol (MCP) AI agents.
Strathon
The open-source AI agent firewall — write a CEL policy, block the tool call before it executes. In-process, sub-millisecond. OWASP + EU AI Act mapped.
Brokenbazaar
Deliberately vulnerable AI agent marketplace — the full Product Security lifecycle: threat model → attack → defend → regression test → detect. MCP + Agent Skills supply chain.
Agentreveal
本地扫描 AI Coding Agent 的 Provider、密钥、权限、MCP 与代理链路，并生成可执行的安全报告。
Vamp MCP Audit
MCP server security auditor — tool poisoning, ASCII smuggling detection, prompt injection, OWASP Agentic Top 10. First OSS tool for MCP security.
Security Scanner
🔍 Scan MCP (Model Context Protocol) configs for hardcoded secrets, leaked API keys, and security misconfigurations
Security Auditor
It's a Python-based CLI security scanner built specifically to audit MCP (Model Context Protocol) servers — the integration layer that connects AI assistants like Claude to extern…
Detector
Safety check for MCP servers: scan AI add-ons for security, reliability and quality problems. Web app, CLI and GitHub Action. Passive by default
Aircrack MCP
MCP server that wraps aircrack-ng, enabling AI assistants to run and automate WiFi security assessments (scanning, handshake capture, cracking) for authorized penetration testing.
Shipsafe
Find the security holes your AI coding assistant just shipped. MCP server + CLI for vibe-coded web & mobile apps: leaked keys, missing Supabase RLS, open Firebase rules, unauthent…
Firewall
Runtime security proxy for the Model Context Protocol (MCP). The Cloudflare WAF for AI agents. Powered by ClawGuard.
Adversarial Suite
🔒 Simulate adversarial behaviors to test and strengthen MCP defenses without real exploitation or risk, ensuring robust security evaluations.
Shield
AI-powered security scanner for MCP servers. Tests against the OWASP MCP Top 10 — prompt injection, tool poisoning, SSRF, and more — using a LangGraph attack agent.
Siege
Runtime red-team harness for live MCP servers. Attacks as real roles to find authz/RBAC bypasses a static manifest scan can't see. The offense leg of an agent-governance suite (Wa…
Gateway
Local-first firewall and black-box run reporter for MCP tool calls: block poisoned tools, detect drift, rate-limit agents, and audit runs.
TrustMCP
Zero Trust MCP server protected with SPIFFE/SPIRE, strict mTLS, and identity-based RBAC.
Sun2Agent
Open-source AI agent CLI with native MCP support, Human-in-the-Loop approval, 5-layer security guardrails, and optional Docker sandboxing.
Toolgate
Capability gating for MCP agents, and the measurements that argue for it
Kali MCP
Kali Linux container exposed to AI agents via MCP, behind a gateway with a network kill-switch
Breaker
Replay-verified MCP security testing and deterministic policy hardening for tool-using AI agents
Custody
Provenance-tracked shared memory for AI agent teams. A deterministic Guard runs multi-hop graph queries in FalkorDB to block injected actions, and a Warden agent investigates inci…
CHIMERA
Chained Harm & Injection Measurement for Evaluating Risks in Agents — a red-team research framework that tests hosted models, agentic apps, RAG pipelines, MCP servers, AI coding a…