- Conduid
- Marketplace
- #llm-security
MCP servers tagged llm-security
439 live MCP servers tagged "llm-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with llm-security.
Shieldcortex
Trustworthy memory and security for AI agents. Memory firewall for any host that writes through it; runtime tool gates on Claude Code, OpenClaw, and Hermes.
Opena2a CLI
Unified CLI for the OpenA2A security platform
Control
Decide which MCP tool calls your AI agents can run: a local gateway with signed policies, one-time approvals and an evidence trail. Experimental alpha. Open source, Go.
Heimdall
Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.
Fence
Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol servers.
Little Canary
Detects prompt injection by its effect on a sacrificial canary model, not just pattern matching: untrusted input hits a powerless model first, a behavioral check reads the residue…
Buried Injections
🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Reproducible benchmark.
Awesome Security Agent Harnesses
AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.
Huqan
Local-first verification layer for AI agents: evidence, provenance, policy gates, human approval, and auditable Trust Receipts before a claim, memory write, or action is trusted.
AI Dfir Toolkit
A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains, AI infrastructure, AI-powered insider t…
McpBastion
Zero-trust security gateway between AI agents and MCP servers: scoped capabilities, redaction, rate and cost limits, and verifiable session logs.
Ave
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Jes
Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for prompt injection, jailbreaks and secret/P…
Husk
Static security scanner for AI agent skills. Built against the bypass techniques that beat Snyk, Cisco & Vercel scanners. Offline, deterministic, zero dependencies, CI-ready. Benc…
Tap Oss
Credential isolation for AI agents — stop leaking secrets to your agents. TAP is a credential proxy: agents never see secret values; optional human approval on sensitive calls. By…
Stroq
Local action firewall for AI coding agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions
Sectinel
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any…
Soup Wall
Soup Wall: a local firewall for what an AI agent does - tool calls, tool results, MCP handshakes, subagents. Deterministic, shadow-first, no account, no network.
Kaimahi
Agent Builder CLI for Kubernetes.
OpenTrustBench
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Squidbrake
Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code…
Orca AI Incident Archive
An open database of real-world AI agent incidents.
Memnox
Your agents can already do the work. Memnox makes it safe to let them do it without you. See what Claude Code, Codex and Cursor can actually do on your machine, and put the danger…
LLM Shield Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-…
SentinelMCP
Stateless enterprise policy firewall & token-cost proxy for Model Context Protocol (MCP).
Openclaw Security Guard
🛡 Enhance OpenClaw security by auditing, monitoring, and protecting your installation with a reliable all-in-one tool.
AegisGate
Open-source security gateway for LLM APIs — prompt injection detection, PII redaction, dangerous response sanitization, and audit logging. OpenAI/Claude compatible, MCP & Agent…
SecureShell
Plug-and-play terminal security layer for LLM agents. Drop-in gatekeeper that prevents dangerous shell commands. Works with OpenAI, Claude, Gemini & more.
Signature Cloaking
This research introduces MCP Signature Cloaking - a novel backdoor technique that allows attackers to exploit hidden parameters in MCP servers, concealing malicious behavior behin…
Bluerock
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache…
Cyvisguard
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
LLM Differential Privacy Gateway
Noisegate: a differential privacy gateway that lets an untrusted LLM agent query sensitive data over MCP (Model Context Protocol), with a formal guarantee no individual's record c…
Modelfuzz
🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.
Nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Sentinel AI
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript…
Awesome AI Red Teaming Jp
AI Red Teaming / AI Safety に関する日本語リソースのキュレーションリスト
AegisFlow
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
Norviq
Runtime security platform for LLM agent tool calls on Kubernetes
Sourcerykit
Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstream agents detect 100% of errors and retr…
Securevector AI Threat Monitor
Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Co…
Governedmemory
Open-source governed memory for AI agents: prompt-injection-resistant writes, purpose-bound retrieval, provenance, and tamper-evident audit.
BridgeWard
Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injecti…
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
AI Pentest Playbook
🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2…
Awesome AI Agent Governance
The curated list of tools, standards, and resources for governing AI agents in production: policy enforcement, audit trails, EU AI Act compliance, MCP and Claude Code security.
Arcjet Py
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Python…
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
Intentframe
Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.
Vetto
Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)
Agentmetry
Local-first flight recorder for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.