- Conduid
- Marketplace
- #devsecops
MCP servers tagged devsecops
311 live MCP servers tagged "devsecops", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with devsecops.
Appwrite Security MCP
MCP server for Appwrite security audits inside Claude Code, Cursor, Cline.
Secops
Security operations as conversation. An MCP server connecting 13 security platforms (Wiz, Kodem, GitHub, Okta, SentinelOne, Apono, Twingate, Pluto, Panorays, Abnormal, Slack, Mond…
Registry Risk Scanner
Static security scanner for MCP server.json registry manifests. Flags supply-chain, transport, credential, and data-egress risks before you install a server.
Safe MCP Config
Zero-dependency CLI that catches risky MCP config patterns before they leak into docs, issues, repos, or shared setups.
Zfuzz MCP
Security copilot for AI coding agents. 10 MCP tools — SAST, SCA, secrets, MCP/skill scanning — for Claude, Cursor & co. Rust-native, local, $0, Apache-2.0.
Cross Provider Egress Guard
Destination-aware, default-deny egress control for AI coding agents, at the tool-dispatch layer across Claude Code and Codex from one shared policy.
Bedrock Security MCP
ARCHIVED: development moved to github.com/AUAggy/agent-sec-scanners (packages/bedrock). npm package unchanged. MCP server + CLI auditing AWS Bedrock security posture: IAM, logging…
Ccs Integrations
Framework-native adapters for CCS (Correctover Conformance Shape) cryptographically signed runtime receipts — Ed25519 + JCS signed audit evidence for AI agent tool calls (Pydantic…
AI Code Super Challenge
Master AI Challenge is a repository with two hands-on coding challenges focused on Artificial Intelligence and automation. Designed for learners and developers, these challenges a…
Xche AI App Security Pack
Free security guardrails for apps built with AI coding tools (Claude Code, Cursor, Lovable, Bolt). Drop-in rules + OWASP/LLM/MCP policy + secret-scanning hooks & CI gate.
Opencode Anthropic Oauth
Restore Claude access in OpenCode with OAuth for Pro/Max logins, token refresh, and Anthropic model support
Websec Validator
Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.
Secureagent
Comprehensive AI & Cloud Security Platform - Security scanning for MCP, LangChain, OpenAI, AWS, Azure, Terraform
Monipenny
AI-Driven FinOps + DevSecOps Kubernetes Auditor — Multi-agent system (ADK v2 + Gemini) that audits live clusters for security misconfigurations and cost waste with a deterministic…
Roelint
Turn Rules of Engagement into a policy firewall for red-team commands and AI agents
Agent Control Plane
Read-only discovery and evidence-backed inventory for AI agents, tools, identities and MCP servers.
Gate.cat
Block irreversible AI-agent actions before they run — deterministic, fail-closed action veto for Claude Code, Codex, Cursor, and other tool-using agents.
Verahelm Decision Envelope
Offline verifier and GitHub Action for signed, revision-bound change gates; the private decision engine is not published.
Awesome Devsecops MCP
The most useful MCP tools for Agentic R&D
Command Scope Contract
Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.
Autonomyproof CLI
Prove what authority your AI agent holds — and fail the PR that grants new unsafe authority. Open-source, local, deterministic.
Agentcapdiff
AI agent security policy-as-code for detecting capability, permission, and least-privilege changes across MCP, OpenAI, Claude, LangChain, LangGraph, and CrewAI tools.
Rotate Env
Bulk-rotate a leaked API-key env var across every .env and .mcp.json, safely. Dry-run by default, never prints the secret; agent- and CI-safe.
Agent Permission Diff Bot
Detect and explain agent-facing permission changes in pull requests.
Agentward
Audit what your AI agents can actually do to your machine. Scans installed MCP servers, skills, hooks and agent configs for leaked credentials, hidden prompt injection, exfiltrati…
PyAPICheck
Transparent API security discovery: risk scores that cite their reasons, real-traffic cross-referencing, an agent/MCP security graph, behavioral baselining, and Cedar policy gener…
Consentinel
Static security auditor for MCP servers. Finds tools that can do irreversible or external damage and verifies each one actually enforces a human-in-the-loop safeguard — not just d…
Awesome Cloud Infrastructure
121+ production-grade Terraform modules (AWS/Azure/GCP), AI agent frameworks, MCP servers for Claude, and SaaS platforms — all open source, battle-tested in FedRAMP/HIPAA/CMMC
Arche
Build apps with Claude using Archē, a context framework that helps it work autonomously from idea to live app
Purplegate
purplegate — Red/blue-team CI gate for agentic-AI apps. Prompt-injection, secrets, SAST, deps, IaC/RLS, workflow injection, MCP checks. One signed GitHub Action, mapped to OWASP L…
Cybersec MCP
Security-tooling MCP server with SSRF guards, prompt-injection containment and a hash-chained audit log
Map
Static attack surface analyzer for MCP servers and LLM tool definitions
Guardx MCP
Defensive MCP server: secret scanning, dependency CVE auditing, and breached-password checks.
Config Linter
Keyless, offline linter for MCP (Model Context Protocol) client config files - catches hardcoded secrets, unpinned npx packages, shell-injection args and transport/hygiene issues.…
Sentinel Scan Vscode
VS Code extension: inline MCP config security diagnostics (mcp.json / claude_desktop_config.json), free, powered by sentinel-scan-cli's OWASP-mapped heuristics
Agent Security Action
GitHub Action to scan for AI agent security vulnerabilities — 190+ detection patterns for OWASP ASI Top 10, prompt injection, MCP security, and credential exposure
Action
Vibe Code Security CI
Unreal MCP Vm Bridge
A reproducible setup for exposing the unreal-mcp plugin (bound to localhost on the host) to a client running inside a VM via a Windows TCP port proxy (netsh portproxy), without mo…
Ctxguard
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
Agent Permission Graph
Map, score, and explain what local AI agents and MCP servers are allowed to touch.
Correctover Scan
Security scanner for MCP servers and AI agents — detects credential leaks, RCE, SSRF and missing auth against OWASP AISVS 1.0; also scans published JS bundles/npm packages.
Mcpgawk
One gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your…
Threat Shield
ThreatShield is a unified, AI-powered threat modelling platform from zeroshield.ai. It is an advanced threat modelling tool built to perform threat modelling for classic applicati…
Orgai Platform
Self-hosted AI compliance enforcement — one policy source enforced across Claude Code, Cursor, Copilot & any MCP agent, with git-hook + CI gates and an append-only audit trail
Vulny Agent Scan
MCP skill: run real vulnerability scans (nmap + nuclei + CVE matching) on domains and IPs you own, straight from your AI agent. Pay-per-scan.
Aigently Catalog
Securely feeds summarized expert security rules into your coding assistance Claude Code, Cursor, etc — zero config, no API key.
SprintLoop Assurance Kit
Independent release assurance for AI-built code. Model-neutral CLI, GitHub Actions, and read-only MCP bind evidence and finite human authority to an exact Git candidate.
Agent Sec Scanners
Security scanners for AI workloads on one shared audit engine. Home of bedrock-security-mcp (AWS Bedrock auditor, MCP + CLI) and @miaggy/core. Findings map to OWASP LLM Top 10, OW…
Security Scanner WorkFlows
mcp-scan is a free, open-source security scanner for MCP (Model Context Protocol) servers. It scans your MCP server's source code for critical security issues: hardcoded API keys,…
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance