- Conduid
- Marketplace
- #application-security
MCP servers tagged application-security
26 live MCP servers tagged "application-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with application-security.
SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Stride Gpt
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
Pyrasp
PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (AWS Lambda, Azure and Google Cloud Function…
Arcjet Js
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS…
Jadx MCP Server
A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool
0
A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
Arcjet Py
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Python…
AgentProvenance
Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidence graphs for risk, forensics, and audit.
Legit Security
Legit Security — independent third-party profile of a public API surface, by API Evangelist. Legit Security is an AI-native Application Security Posture Management (ASPM) platform…
DevGuard Enterprise
DevGuard Enterprise — AI Security Platform powered by DataHub. Autonomous AI agents for security analysis, graph reasoning, evidence-driven remediation, and enterprise governance.
Arcjet Go
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Go cod…
Sovereign Security Protocol
Full SSP v13.4.0 source in Portuguese, with bilingual community summaries for application security, secure SDLC, AI agents, MCP, and evidence-based adoption.
Sentinel Memory MCP
Evidence-first cybersecurity MCP server with persistent SQLite graph memory, vulnerability triage, scoped testing and reports for Antigravity and Codex.
Saltcode
Give your coding assistant security super powers with Salt Code. Secure code with every prompt and a much quieter security team.
Burpsuite MCP Vscode
Model Context Protocol (MCP) integration for Burp Suite and VS Code. A proxy for context sharing, AI-assisted analysis, and streamlined security workflows
Access AI Gateway
LLM gateway over a multi-tenant access-control system, with guardrails against indirect prompt injection and cross-tenant data exposure.
Security Advisor
An oss tools based MCP server framework to analyze source code for security vulnerabilities. It runs SAST, SCA, DAST, and IaC inspection on the repository contents.
Threat Shield
ThreatShield is a unified, AI-powered threat modelling platform from zeroshield.ai. It is an advanced threat modelling tool built to perform threat modelling for classic applicati…
AegisAgent
Zero-trust API firewall and security integrity layer for autonomous AI agents & Model Context Protocol (MCP) tool execution. Secure, TOCTOU-proof, fail-closed.
AI Protect
AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform team…
AI Agent Security Control Plane
Defense-in-depth security control plane for autonomous AI agents using MCP, OPA/Rego, human approval, adaptive risk, detection, and automated containment.
Qwiet
Qwiet AI (formerly ShiftLeft, now part of Harness) is an application security testing platform delivering SAST, SCA, IaC, container, and secrets scanning in a single scan, with re…
Codelytra
Open-source, local-first AI security scanner for JavaScript and TypeScript LLM, agent, RAG, tool-calling, and MCP applications.
Reachable Agent Plugin Installer
Claude Code marketplace for the REACHABLE plugin (generated from the signed adapter). Not the scanner.
Noulette
Noulette is a MCP platform that finds problems, propose fix and actually fix it (upon approvals) during app development and when running app in production.