- Conduid
- Marketplace
- #devsecops
MCP servers tagged devsecops
311 live MCP servers tagged "devsecops", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with devsecops.
Sosa
SOSA™ — Supervised Orchestrated Secured Agents. A governance framework for production-grade autonomous AI operations.
K Playbook
A project-local toolbox for AI coding assistants: slash commands, persistent project knowledge, MCP integration, code reviews, security scans, and auditable task workflows for Cla…
Patchwitness
Independent trust gate for AI coding agents: verify scope, protected CI, real checks, secrets, impact, and portable Change Passports.
Keelix
Local-first security scanner for self-hosted infra — host, containers, services, and AI-agent/MCP posture. Don't ship with a hole in the hull.
Agenticqa Scan Action
Analyze AI codebases to identify integration points, security risks, and test coverage gaps in one step with comprehensive reports.
Opaque
Approval-gated secrets broker for AI coding tools. Secrets as capabilities — like ssh-agent, but for LLM workflows.
AI Scrummaster
AI-powered scrum master that automates GitHub project management
Invaris Agentsec
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
Security Gate Cursor
Three-layer security for Cursor: rules, evidence-grounded planning, MCP handbrake, KEV/OSV intel, Docker scanner lab
Devops AI Implementation Ideas
A collection of practical, implementation-focused ideas showing how AI can be integrated into DevOps, Platform Engineering, Cloud, CI/CD, SRE, Security, and Infrastructure workflo…
Mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go…
Warden
CI-first MCP supply-chain integrity gate + runtime tool-result inspection. Pin an MCP server's tool surface, fail CI on drift, and block poisoned tool results (ANSI/secret-echo/ex…
Gate
Runtime enforcement for MCP agents: capability manifests, session taint tracking, and a non-configurable rule-of-two trifecta invariant, with a hash-chained audit log.
Vibecheck
Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI coding agents make (secrets, unprotected routes, eval-RCE, SQLi, CORS, JWT, leaked keys).…
Hermes Shield
Input sanitizer for AI agents — anti-prompt-injection shield
Supabase Security MCP
MCP server for Supabase security: audit, apply fixes, re-audit from any MCP client (Claude Code, Cursor, Cline).
Audit Skill
MCP Infrastructure Audit Suite — Zero-install Claude Code skill. 30 governance rules, 39 protocol tests, health monitoring. Works with Claude Code, Cursor, Codex, Gemini CLI.
Skillguard
Static security scanner for AI agent skills and plugins — flags prompt injection, hidden Unicode, exfiltration, and dangerous commands in SKILL.md/CLAUDE.md and scripts.
Pkgguard API
Open-source AI package security gate that blocks slopsquatting, hallucinated dependencies, and typosquats before npm, pip, uv, or cargo install
Legit Security
Legit Security — independent third-party profile of a public API surface, by API Evangelist. Legit Security is an AI-native Application Security Posture Management (ASPM) platform…
Ctxsentry
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
Pod
pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.
Trustdex
Trust policy layer for AI agents, MCP servers, skills, and plugins.
Correctover Scan Action
GitHub Action: scan MCP (Model Context Protocol) configuration files for credential leaks, SSRF and missing auth in CI — SARIF output, fails builds on critical findings.
Concord
An open-source AI-native platform that connects your existing DevSecOps tools through intelligent MCP agents — turning fragmented signals into instant root cause, fixes, and compl…
Miseguard
Deterministic runtime circuit breaker and MCP proxy for autonomous coding agents.
Codex Python Engineering Harness
Codex-native Python engineering harness with profile-driven scaffolding, deterministic quality gates, secure hooks, MCP governance, and audit-ready AI governance controls.
Guardskill
Read-only scanner for what lets a repository run code in a coding agent (Claude Code, Codex, Cursor, Copilot): git settings, hooks, and committed MCP server definitions and agent…
ProdPilot
A Layered MCP-Based System for Automated Production Readiness and Deployment of Vibe-Coded Projects
TorusGuard
Autonomous Security Guardrails & Governed Remediation for AI-Built Apps. Tri-Mode Parity (CLI, Chat Slash Commands, Native MCP Server), First-Principles Security Suite, Multi-Moda…
Supply Guard
Offline supply chain security scanner. Detects malicious packages, typosquatting, compromised dependencies, and unsafe CI configurations across npm, pip, Cargo, NuGet, and Maven.…
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Vakt
Open-source AST aware code scanner to find your app’s vulnerabilities.
ITan LIPA
⚡Stop letting unvetted Python code blow up prod. Zero-execution AST safety gate for circular imports, broken contracts, and PEP traps. Zero deps.
Ccs Conformance Vectors
Public conformance test vectors for CCS (Correctover Conformance Shape) — signed, tamper-evident receipt fixtures for verifying AI agent runtime security implementations.
Claude Guard
Security scanner for your Claude Code setup — flags risky skills, hooks, MCP servers & committed secrets. Zero dependencies, offline.
Skil
Vendor-neutral security, verification, and enforcement framework for AI agent skills
Vibe Scanner
Read-only security scanner for Next.js/Supabase repos and live sites, with terminal, JSON, CI and MCP output.
AI Plan
Review capability drift in AI agent skills, plugins, and MCP configurations.
Residoo
Find secrets your AI coding agent leaked to disk, watch for new ones, and optionally block a sensitive read before it happens. Free, MIT, zero deps, no network calls by default. O…
Agent Trust Broker
IANUA Agent Trust Broker (ATB): identity issuance and Zero-Trust policy enforcement for AI agent fleets — short-lived scoped identities, per-action allow/deny/escalate, hash-chain…
Scrutiny
Static and semantic security scanner for MCP servers: unpinned packages, rug pulls, tool poisoning, shadowing and toxic flows. Trained model, SARIF output, zero dependencies, full…
Adp
A GitHub-compatible forge for AI coding agents that binds every change to signed intent, provenance, and verification evidence.
Blackduck Polaris MCP Server
Feature-rich MCP server for Black Duck Polaris — 66 tools for scan management, findings, reports, policies, and more
Security Auditor
It's a Python-based CLI security scanner built specifically to audit MCP (Model Context Protocol) servers — the integration layer that connects AI assistants like Claude to extern…
Supplyguard
Agentic software supply-chain security on Splunk — senses CI/CD dependency changes via the Splunk MCP Server, detects CVEs & typosquatting, triages with a hosted security model (f…
Mcpaudit
Audit your MCP servers for tool poisoning, credential exposure, and supply-chain risk. Zero dependencies. Nothing is executed.
Audit
Security audit for AI-built projects. 130+ checks across OWASP Top 10. Auto-detects stack, loads relevant checks, grades your project A-F with exact fixes.
Audit
Security audit checklist for third-party MCP servers before you install them
Server
CYBERDUDEBIVASH Autonomous Zero-Trust AI Cybersecurity Command Center (MCP Server)