- Conduid
- Marketplace
- #appsec
MCP servers tagged appsec
96 live MCP servers tagged "appsec", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with appsec.
Zfuzz MCP
Security copilot for AI coding agents. 10 MCP tools — SAST, SCA, secrets, MCP/skill scanning — for Claude, Cursor & co. Rust-native, local, $0, Apache-2.0.
Tlad Semgrep
Semgrep rules to detect Transport-Layer Auth Divergence (TLAD) in MCP servers — auth applied to some transports but not others.
Exploit Validator
Proves whether AI agent (MCP) tool configurations are actually exploitable - not just risky-looking. Existing scanners infer risk from manifests; this one validates it in a sealed…
Xche AI App Security Pack
Free security guardrails for apps built with AI coding tools (Claude Code, Cursor, Lovable, Bolt). Drop-in rules + OWASP/LLM/MCP policy + secret-scanning hooks & CI gate.
SleepyWalker
🛡️ Autonomous SQL injection pipeline — crawls, probes, confirms with AI, exploits with sqlmap, reports in HTML/JSON/SARIF. Built for authorized red teams. One command, full databa…
Websec Validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
Sinon
AI agent pentest kit: a methodology and 54-probe corpus for prompt injection, tool abuse and over-permissioned agent actions. Verdicts rest on observed facts, not a judge model.
Achilles Harness
Achilles - A local, private cybersecurity AI Agent harness for app sec, code review, vuln detection, and more
Agent Webhook Check
Free single-file auditor for webhook signature verifiers — the highest-frequency real bug in AI-agent tool callbacks. Stdlib only, no deps. MIT.
Dvah
DVAH — Damn Vulnerable Agent Harness: a patch-the-runtime security lab for AI-agent platforms. Exploit a real architectural bug, trace it, patch the harness, and prove the securit…
Redcell
Security layer for AI agents — score the system prompt, firewall untrusted input, screen every tool call. Deterministic, 0-API, runs at the edge.
Threat Shield
ThreatShield is a unified, AI-powered threat modelling platform from zeroshield.ai. It is an advanced threat modelling tool built to perform threat modelling for classic applicati…
MCPGoat
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-comm…
Mcpsweep
Zero-dependency discovery & fingerprinting scanner for MCP-over-HTTP servers — enumerates tools and flags risky/poisoned ones.
Hardened
A deliberately small MCP server demonstrating security hardening against the OWASP MCP Top 10, with a test suite that proves the defenses hold.
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Deeplinkfuzz
Fuzzes Android/iOS deep links, intents, and custom URL schemes against an emulator/device to surface unvalidated-redirect, injection, and component-hijack bugs.
Apkpeek
One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
Opzyai MCP
Local-first security check MCP server for AI coding agents — hardcoded secrets, .env exposure, git-history leaks, dependency CVEs. Runs entirely on your machine.
Mcpsnare
Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confi…
Zerotrust
🔒 Build verifiable peer-to-peer applications with a zero-trust cryptographic protocol framework that ensures complete security without requiring trust in users.
AI Protect
AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform team…
Hookcraft
Generates ready-to-run Frida instrumentation scripts from a YAML intent (e.g. 'bypass SSL pinning', 'dump crypto keys') and verifies they attach to a target process.
Semsift
Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Envguard Secrets Vault
EnvGuard Secrets Vault - Zero-Trust .env Auditor, AES-256 Armored Vault, Transformer, MCP Server & Studio UI (design influenced by Material 3)
Scopecheck
Static security auditing for Python MCP servers, trace reachable capabilities and incomplete analysis without executing target code.
Webmcp Sentinel
Server-enforced authorization, human approval, and audit for AI-agent actions — a WebMCP security reference implementation
Keel Sec Guard
Automated AI security auditor and SAST scanner powered by Google Gemini. Runs locally via CLI/Agent Skill and in CI/CD via GitHub Actions.
NagaCodex Cyber Security
Defensive consulting skills for AI agents — authorized AppSec, AI/MCP hardening, EU compliance (GDPR/NIS2), IR. Not an offensive toolkit
Zfuzz CLI
The Rust-native security scanner behind every Zfuzz tool. SAST, SCA, secrets, MCP/skill audit, Sealed Vault — one $0 binary. npx @zfuzz/cli scan .
Hades Blackwatch
Hades Blackwatch is an advanced AI security and code-review skill for auditing LLM, agentic, MCP, and full-stack applications using OWASP LLM/Agentic Top 10, AIVSS, MITRE ATLAS, N…
Aicaudit
aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.
Security Toolkit
13 atomic MCP tools for AppSec and AI Security: recon, MCP audit, prompt-injection audit, OWASP LLM Top 10
Redteam Lab
A red-team lab for the MCP discovery surface: instructions-field prompt injection, cacheScope:public cross-caller cache poisoning, and post-approval drift, with four controls that…
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Provekit MCP
Hardened MCP server that gives an AI agent a code security scanner, built so the tools can't be turned against the host, with a red-team suite that spawns the real server and prov…
State Of MCP Security
Reproducible security audit of MCP servers — 75% of scanned servers exposed a medium+ hardening issue to AI agents. Round 1: official reference + popular hosted servers.
Agent Boundary
A deterministic tool-call broker that bounds what an LLM agent can actually do. Indirect prompt injection is assumed to succeed; authorisation lives outside the model.
Vulngate
Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-in…
Depguard
Dependency vulnerability scanner over OSV.dev with CISA KEV actively-exploited flags. No API key.
AI Surface
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
AI Surface
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
Audit
See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.
Juice Shop Security Lab
OWASP Juice Shop security lab: Claude Code skills, MCP servers (Snyk, Miro, Context7), subagents and scan reports