- Conduid
- Marketplace
- #llm-security
MCP servers tagged llm-security
557 live MCP servers tagged "llm-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with llm-security.
Sentinel AI
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript…
Awesome AI Red Teaming Jp
AI Red Teaming / AI Safety に関する日本語リソースのキュレーションリスト
AegisFlow
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
Norviq
Runtime security platform for LLM agent tool calls on Kubernetes
Sourcerykit
Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstream agents detect 100% of errors and retr…
Securevector AI Threat Monitor
Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Co…
Governedmemory
Open-source governed memory for AI agents: prompt-injection-resistant writes, purpose-bound retrieval, provenance, and tamper-evident audit.
BridgeWard
Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injecti…
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
AI Pentest Playbook
🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2…
Awesome AI Agent Governance
The curated list of tools, standards, and resources for governing AI agents in production: policy enforcement, audit trails, EU AI Act compliance, MCP and Claude Code security.
Arcjet Py
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your Python…
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
Intentframe
Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.
Vetto
Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)
Agentmetry
Local-first flight recorder for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.
Airom
Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file…
Prompt Armor
Open-source prompt injection detector — 5 layers, 91.7% F1, ~27ms, offline, Apache 2.0
Awesome AI Agent Incidents
A curated corpus of incidents, attack vectors, failure modes, and defensive tools for autonomous AI agents.
Astragraph
Policy-enforced observability and fail-closed guardrails for MCP/A2A multi-agent systems.
Cordon
A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Gemini CLI, MCP hosts and LangChain. | Фай…
Trustmcp
Zero Trust MCP server protected with SPIFFE/SPIRE, strict mTLS, and identity-based RBAC.
Vex
MCP proxy that blocks tool poisoning, rug pulls, and excessive agency in real time
bouncer
A deterministic exfiltration firewall for MCP tool calls — gates the destination, not the tool. No LLM in the decision path.
Zn Gate
Zero-trust prompt injection security gate & MCP server for AI agents (Cursor, Claude Code, Antigravity, OpenCode, Codex)
Toolgate
Capability gating for MCP agents, and the measurements that argue for it
witness
Security scanner for MCP servers. Found and disclosed 6 vulnerabilities; 1 fix verified upstream (PR #4226).
Scan
Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply…
Rea
Agentic governance layer for Claude Code — policy enforcement, hook-based safety gates, audit logging, and Codex-integrated adversarial review for AI-assisted projects
Security Proxy CLI
Deny-by-default local stdio proxy and policy inspection CLI for MCP servers.
Warden CLI
Developer CLI for Warden — init, start, audit, policy test, scan
Aspex
See what your AI agents actually did, then scan what they could do. MCP security from logs, no proxy. Offline, one binary.
Nexus
Local-first trust layer for AI coding agents — structural prompt-injection and action guards, secret scanning, semantic memory, and code review. No model API required.
Taintgate
🚧 A policy gate for AI agent tool calls, with provenance tracking. Blocks what prompt-injection classifiers miss: where an instruction came from.
Trustweave
Review your AI agent’s security configuration before deployment. Emphasizes local, deterministic setup under Apache-2.0 license.
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Gsh Framework
Open-source hunt playbooks and a policy-driven Sentinel reference framework for detecting runaway AI agents, unauthorized tool calls, behavioral drift, DNS exfiltration, and poiso…
G8e
A zero-trust execution platform that safely bridges AI agents and infrastructure without surrendering data sovereignty
Scankii
A local-first SAST & Runtime Security scanner built exclusively for LLM Agents. Detects cross-modal data leaks, prompt injections, and intercepts credentials before execution.
Security Agent Skills
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk,…
Tracewall
Flight recorder and firewall for AI agents — records every tool call, tracks lethal-trifecta taint across a session, and blocks the prompt-injection exfiltration path. Zero deps,…
Jev Agent Authorization
Jev agent authorization for MCP tool calls: Kinde identity and permissions plus Jev's typed, calibrated decisions, checked server-side before every call runs
Catraca
Provenance-aware authorisation for LLM agent tool calls. Denies a call when a consequential argument came from untrusted content. Stdlib only.
Cordon
A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Gemini CLI, MCP hosts and LangChain. | Фай…
ShieldMCP
Transparent MCP security proxy: tool metadata integrity, call validation, and response analysis. Apache-2.0.
Akili
Open-source platform for orchestrating, governing, and safely automating AI agents across your infrastructure.
KAVACH
Zero-trust security runtime for AI agents with deterministic policy enforcement, guarded execution, approvals, redaction, MCP protection, and tamper-evident auditing.
Credence
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which ex…
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Pluto Aguard
Security scanner and launch gate for AI agents & MCP apps — config scanning, policy coverage, risk modeling, drift detection, CI/SARIF, and launch-readiness evidence