- Conduid
- Marketplace
- #devsecops
MCP servers tagged devsecops
311 live MCP servers tagged "devsecops", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with devsecops.
Guardian
A local security firewall, scanner, and audit layer for Model Context Protocol servers.
Guard
Adversarial fuzzer for MCP servers — dynamically break Model Context Protocol endpoints. Shell injection, SSRF, overflow, type confusion, prompt injection probes. Zero-dep Python…
A2a MCP Incident Commander
Autonomous Multi-Agent SRE & DevSecOps Incident Response Platform built with LangGraph, A2A Protocol, FastMCP, FastAPI, and Streamlit.
Scanner
MCP Scanner — 12 security checks for MCP server configurations. SARIF output.
Warden
Security scanner for MCP server configs. Finds leaked API keys, unpinned npx/uvx/docker servers, typosquats, malicious packages and tool poisoning in Claude, Cursor, VS Code, Wind…
Sift
Scans AI agent instruction files (CLAUDE.md, .cursorrules, mcp.json) for hidden or planted instructions
Sentinel Autogen Hunter
🛡️ Autonomous Multi-Agent Threat Hunting & Incident Response Swarm engineered with AutoGen, Azure Sentinel, and Model Context Protocol (MCP). Sub-second Netfilter isolation & real…
Mcpscan
Local CLI to discover shadow MCP servers on your local network & audit authentication status. Zero telemetry, local-only.
Sentinelmcp
The EDR for MCP servers — 100% local, read-only. Discover, fingerprint and monitor every MCP server your AI agents expose across 14 clients; catch rug-pulls, tool poisoning, typos…
Github Security MCP
GitHub security posture analysis for AI agents — 39 MCP tools, 45 checks across org, repos, Actions, secrets, supply chain, and access control
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
Zeropath MCP Server
Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.
AI Devops Actions
The CI/CD layer for AI-native development — 5 GitHub Actions for PR quality, cost tracking, MCP testing, supply chain security, and agent skill validation
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Coding Ethos
Policy-as-code enforcement for AI agents: MCP server, CEL policies, git hooks, SARIF, and static analysis guardrails.
Ratchet
Ratchet walks git history to find security-control regressions — links each one to its cause, checks if it's still live today, and writes the evidence into DataHub's lineage graph.
AI Surface
Find and govern the AI surfaces in your application code at PR time. Free, OSS, runs offline.
Perufitlife/web-exposure-mcp
only.
Pkgxray
Supply-chain security for AI agents, npm packages, and MCP servers. Analyze packages before you install them — zero-dep Node, runs locally, never executes untrusted code.
Pledgeguard
Rust-native secret scanner with MCP server, AST refinement, and WASM plugins
DevSecShield Public
DevSecShield is a unified, AI-powered Devsecops assistant designed to provide comprehensive security analysis across multiple dimensions of modern software development. From tradi…
OCTALUME
AI-native SDLC framework for regulated industries. 8 phase-gated stages, 9 specialized agents, built-in HIPAA / SOC 2 / PCI / GDPR scanners. Plugs into Claude Code via MCP (30+ to…
Repo MCP
A professional-grade MCP server for cleaning Git repositories. Automate secret audits with TruffleHog, sanitize history using git-filter-repo, and intelligently squash noise commi…
Arvancloud MCP
ArvanCloud MCP Server is a powerful Model Context Protocol (MCP) server that enables MCP-compatible AI clients such as Claude Desktop, Claude Code, Cursor, VS Code, Gemini CLI, an…
Toolfence Site
MCP security scanner — Toolfence scans any Model Context Protocol server and reports the risks your AI agents inherit: tool poisoning, prompt injection, tool drift, over-broad sco…
Scrub MCP
A 22-tool MCP server and CI-ready CLI that cuts cloud LLM token usage on code quality tasks. Deterministic tools handle what they can. A local LLM (via DSPy) handles the rest. Clo…
Sentinelagent Guard
A protocol-native, open-source firewall for MCP servers and AI agents — blocks tool poisoning, rug pulls & data exfiltration. Deterministic, no LLM in the path. Apache-2.0.
Saltcode
Give your coding assistant security super powers with Salt Code. Secure code with every prompt and a much quieter security team.
EAtheria Security
Self-hosted application security platform: SAST, DAST and SCA with AI false-positive validation. OWASP Top 10/CWE mapping, SBOM export, CI/CD integrations and MCP server.
Sap Security Scanner
Catch CVEs, leaked secrets, and BTP misconfigurations in your MTA/CAP project before you deploy.
Agent Trust Preflight
Free MCP + AI agent trust preflight: 20 practical checks, safe examples, VS Code tooling, drift review and authority analysis.
Sfi Audit Toolkit
SFI security audit toolkit — audit any repo against Microsoft Secure Future Initiative (SFI) pillars. Zero Trust + NIST CSF 2.0 knowledge base, read-only scanner, MCP server, GitH…
Leakrank Guard
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents. MCP server, docs for the leakrank-guard npm package.
Sovereign Observer MCP
Scan Terraform for security misconfigurations while your AI assistant writes it. Local-first MCP server for Claude Code, Cursor, VS Code and Windsurf.
Pipeline Assistant MCP
🚀 AI-powered CI/CD pipeline analyzer for Azure DevOps & GitHub. Automatically enforces security policies, detects vulnerabilities, and posts compliance reports on PRs. Open source…
Overstep
Authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and p…
IANUA Broker
Local-first, offline-by-default security posture scanner for MCP servers and local AI-agent setups (CLI: mcpscan).
Nightward
Local-first TUI for auditing AI agent state, MCP config, and dotfiles backup safety
Scan Action
The first GitHub Action that scans MCP servers, AI agents & LLM pipelines for security vulnerabilities. 24 checks: tool poisoning, SSRF, prompt injection, DataFlow taint. Results…
Attestral
Open-source security scanner for MCP servers and AI agents: finds prompt injection, tool poisoning, and excessive agency, and models the cloud your agents can reach. pip install a…
Bastyn Scan
Static analysis for AI and agent code: Python, TypeScript, JavaScript, MCP manifests, and dependency CVEs.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Plimsoll Action
Review what an AI agent release changed at runtime (files, network, MCP tools), gate the PR, and report findings in code scanning. For AI platform and security teams.
Inspectra
Hybrid code audit system powered by deterministic MCP tools and conditional hotspot exploration. Audits 12 domains: security, tests, architecture, conventions, performance, docume…
Surface Audit
Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.
CatalogLock
Security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic suppl…
Config Audit
Zero-dependency security linter for MCP server configs: hardcoded secrets, unpinned npx, curl|sh launchers, risky mounts, insecure URLs.
AI Workspace Showcase
Bilingual AI prompts library, MCP registry & developer workbench — Public showcase with type-safe mock layer and C4 architecture.
Secret Sentinel
MCP server that scans code for exposed secrets - API keys, tokens, private keys and high-entropy strings - with placeholder-aware allowlisting and redacted reports
Mohamed Showcase
Interactive Architecture Showcase & Open Contracts for Mohamed Osama AI Systems Platform