- Conduid
- Marketplace
- #api-security
MCP servers tagged api-security
18 live MCP servers tagged "api-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with api-security.
BugTraceAI
Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.
Rever Browser
AI agent browser for web reverse engineering
AegisGate
Open-source security gateway for LLM APIs — prompt injection detection, PII redaction, dangerous response sanitization, and audit logging. OpenAI/Claude compatible, MCP & Agent…
Phantom Secrets
MCP server for Phantom Secrets — lets AI coding tools manage API keys safely without ever seeing real values. 10 tools for Claude Code, Cursor, Windsurf, and Codex.
Veyra Commit Core
Landing page and public docs for Veyra, the commit mode layer for production AI agent actions.
Domainexpansion
MCP-native API attack-surface and BOLA vulnerability detection engine: seven deterministic detection heuristics exposed as an MCP server, validated against a real 50,000-line prod…
Sentinel Memory MCP
Evidence-first cybersecurity MCP server with persistent SQLite graph memory, vulnerability triage, scoped testing and reports for Antigravity and Codex.
Generator
Agent Readiness and Governance Layer for APIs — turn OpenAPI/Swagger into a governed, portable MCP tool surface that runs over stdio or Streamable HTTP
Accessflow
Open-source database, API access & deployment governance platform A SQL, NoSQL, and API proxy that puts review, approval, and audit between your team and production data and servi…
Saltcode
Give your coding assistant security super powers with Salt Code. Secure code with every prompt and a much quieter security team.
Swaggervu
A simple, evidence-first Swagger/OpenAPI security workbench with a policy-bounded MCP server.
Overstep
Authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and p…
OpenBOLA
Authorization-first, deterministic BOLA/IDOR validation for HTTP APIs
PyAPICheck
Transparent API security discovery: risk scores that cite their reasons, real-traffic cross-referencing, an agent/MCP security graph, behavioral baselining, and Cedar policy gener…
Seosiri API Guard MCP Server
A sovereign, universal API validation and multi-industry compliance security MCP server supporting OWASP, HIPAA, PCI-DSS, GDPR, and SEO/AEO metadata guardrails.
AI Integration Health Check Demo
Demo repo for an AI/API integration health-check freelance service: IDOR/SQLi/secret-logging fixes side by side (broken vs main), zero-dependency idempotency example, audit report…
Context Gate
Consumer-centric API governance: choose what operations/fields your APIs expose to agents; emit a governed Tyk API + MCP surface and a Spectral ruleset (PII/secrets/compliance). B…
Agent Decoy Policies
Rust and WebAssembly cyber-deception policies for AI agent and MCP traffic on MuleSoft Flex/Omni Gateway: honeytoken detection, decoy tool enforcement, breadcrumb controls, and co…