- Conduid
- Marketplace
- #llm-security
MCP servers tagged llm-security
557 live MCP servers tagged "llm-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with llm-security.
Guardrail
Security gateway for MCP servers — enforce tool access policies, audit AI agent activity, and detect exposed secrets.
Jenkins MCP Server
Secure-by-design Jenkins MCP server with runtime guardrails. Minibridge integration for Rego/HTTP policy enforcement, Jenkins-aware prompt-injection guardrails, destructive tools…
Gate
Runtime enforcement for MCP agents: capability manifests, session taint tracking, and a non-configurable rule-of-two trifecta invariant, with a hash-chained audit log.
Vex
Agent-first red team framework for AI systems probe LLMs, agents, MCP servers, and RAG pipelines for safety failures and exploitable vulnerabilities.
Sentinelmcp
An automated red-teaming and reliability-auditing platform for AI agents - tests for prompt injection, tool hijacking and data exfiltration. Ships as an MCP server.
Taintgate
🚧 A policy gate for AI agent tool calls, with provenance tracking. Blocks what prompt-injection classifiers miss: where an instruction came from.
Bouncer
A deterministic exfiltration firewall for MCP tool calls — gates the destination, not the tool. No LLM in the decision path.
AgentGuard
Least-privilege policy gateway for MCP tool calls — injection blocking, secret redaction, hash-chained audit log
JanusGate
The AI agent firewall: One face watches what enters, one watches what leaves. Defends against prompt injections, exfiltration, and scams with a multi-layer ensemble.
Sentinel
A runtime enforcement layer for agent payments — blocks injected or out-of-scope transactions before settlement. Signed mandate + provenance + tamper-evident receipt. EN/中文, zero-…
Agentcheck
Scan AI coding-agent config files (CLAUDE.md, AGENTS.md, .cursor/rules, MCP configs) for hidden prompt-injection attacks.
Agent Action Gate
Deterministic policy gates for AI agent tool calls: allow, deny, or require human approval.
Injection Guard
MCP server and CLI that scan untrusted content for prompt-injection patterns before it reaches your agent - offline, explainable, cross-agent.
Breaker
Replay-verified MCP security testing and deterministic policy hardening for tool-using AI agents
Adversarial Suite
🔒 Simulate adversarial behaviors to test and strengthen MCP defenses without real exploitation or risk, ensuring robust security evaluations.
Guardbench
Check your MCP servers for tool poisoning and rug pulls, and benchmark MCP security tools under verifiable conditions.
Eidolon
The cryptographic authority layer for AI agents. Watch every tool call live, delegate exactly the authority you choose, and kill it mid-session — enforced by a signed, revocable c…
Agent Guardrail
Policy enforcement and permission testing for AI agents. Mock enterprise APIs, simulate synthetic user consent, and block unauthorized data access before deployment.
Skillshield
🔒 Security-scored directory for AI agent skills and MCP servers. 33,000+ scanned, 12% malware detection.
PROJECT ARGUS
Local-first security evaluation and runtime policy gateway for AI agents, MCP servers, skills, and LLM deployments
Kimss Control Plane
Public hub for the Kimss Secure Enterprise Agent Control Plane — OpenAPI spec, MCP RBAC, A2A onboarding, Anthropic guide, security badges.
Vaultbridge
Secret management for AI coding agents. Your secrets never enter the LLM context window.
Hermes Shield
Input sanitizer for AI agents — anti-prompt-injection shield
Haechi
Experimental self-hosted AI context enforcement layer for LLM, MCP, vLLM, Ollama, and agent traffic.
RayCodes SkillSpector
🛡️ Streamlit dashboard wrapping NVIDIA SkillSpector CLI — scan AI agent skills, Claude MCP tools & Cursor extensions for prompt injection, data exfiltration & 64 vulnerability pat…
Tool Sanitizer
Detect and neutralize Unicode concealment codepoints in MCP tool metadata (covert-channel control). AGPL-3.0-or-later.
OpenAgentShield
🛡️ Zero-Trust Security Firewall & AST Sandbox for Autonomous AI Agents & Model Context Protocol (MCP) Middleware
Agentic Workflow Guard
Static analysis for AI automation workflows. Find prompt-injection paths, overpowered tools, and write-capable agent jobs before they run.
ZugaShield
7-layer AI agent security system — stop prompt injection, data exfiltration, and AI-specific attacks in under 15ms. Zero dependencies.
Mylonite
Open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.
Agent Skill Scan Action
GitHub Action: Scan agent skill files for security vulnerabilities. 22 rules across prompt injection, capability escalation, data exfiltration, encoded payloads, and composition r…
Attenu Guard Ts
Attenu Guard for TypeScript — per-agent permissions on every tool call and sub-agent handoff (a sub-agent never holds more than its parent) with a hash-chained audit log verified…
LLM Security Skills
Agent Skills that turn your AI coding agent into an LLM security reviewer — prompt-injection testing, OWASP LLM Top 10 audits, MCP & RAG review, KVKK/PII checks. English + Turkish.
Pkgguard API
Open-source AI package security gate that blocks slopsquatting, hallucinated dependencies, and typosquats before npm, pip, uv, or cargo install
Ctxsentry
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
Mcpwatchman
Independent security and quality audit for Model Context Protocol servers — static analysis, dependency CVE scanning, and evidence-linked scores for every server in the official M…
Agent Sentry
An enterprise-grade AI Gateway Proxy securing autonomous agents. Features MCP-Guard (an AST-based containment firewall and Docker sandbox blocking 100% of subshell injections) and…
KYA
Know Your Agent — An open standard for AI agent identity, compliance, and auditability
Pod
pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.
Mcpbait
Red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server
Agent Chaperone
Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
Atr
Rust loader and matcher for Agent Threat Rules YAML. Vendors the upstream ATR ruleset (MIT, ATR Contributors).
AntiClaude
Open-source red-teaming toolkit for AI agents. 64 attack payloads covering 7/10 OWASP Agentic Top 10.
Is This Safe
Trust in AI agent tooling is a chicken-and-egg problem. Start here — audit a skill repo before you install it.
Skillxray
Scan an AI agent skill for prompt injection, hidden Unicode, dangerous commands, and leaked secrets before you install it.
Mia
Managed Identity for Agents. Scoped, revocable, live-checked identity and enforcement for AI agents acting on behalf of a human.
Tailrace
Agent data governance for TypeScript. In-process secret/PII detection, reversible tokenization, and policy at the model, tool, and MCP boundaries.
Miseguard
Deterministic runtime circuit breaker and MCP proxy for autonomous coding agents.
Skill Tripwire
A fail-closed scanner for poisoned agent skill and config files. Zero dependencies, published detection and false-positive rates.
AI Shield Py
Python LLM security middleware: prompt-injection, PII, tool-policy, cost-budget, audit. Port of ai-shield-core (TS).