- Conduid
- Marketplace
- #llm-security
MCP servers tagged llm-security
557 live MCP servers tagged "llm-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with llm-security.
Plimsoll Action
Review what an AI agent release changed at runtime (files, network, MCP tools), gate the PR, and report findings in code scanning. For AI platform and security teams.
Core Defense
7-phase security proxy for MCP agents. Defends against tool poisoning, description-code inconsistencies, path traversal, and authentication attacks. 115 tests.
Pyrit MCP Server
Arm any MCP-capable agent to autonomously red-team a target LLM. Microsoft PyRIT exposed as 31 composable MCP tools: attacks, scoring, converters & scenarios
Signed Manifests
Ed25519-signed tool manifests for MCP. Stop tool-poisoning and rug-pull attacks with cryptographic verification.
Palisade
A firewall for AI agents — policy, egress control, prompt-injection quarantine, and a tamper-evident audit log for any MCP server
Cveasy Forge
The CVEasy open lab — runnable security harnesses, red-team probes, and experiments. Good-faith open source from CVEasy AI.
PortunusMCP
Zero-trust, risk-aware gateway proxy for the Model Context Protocol (MCP) — enforces identity-scoped tool access, detects schema drift ("rug pull") attacks, scores tool-call risk,…
Hachiman Agent
Hachiman Agent — autonomous security layer for AI agents and MCP. Scan before deployment, authorize before access, monitor during execution, contain when compromised, report every…
Memwall
Antivirus for AI agent memory - scanner + MCP firewall for memory poisoning (OWASP ASI06)
Defense Bench
Vendor-neutral benchmark measuring how MCP security proxies/gateways DEFEND against 22+ attack vectors — crosswalked to NIST AI RMF & OWASP LLM/Agentic Top 10. CI-gated, reproduci…
Injection Lint
Semantic prompt-injection & tool-poisoning linter for MCP servers. Precision-first, 100% local — tells real injection apart from legitimate tool descriptions.
Ephorate AI Governance And Monitoring
Open-source control plane for AI agent security & governance — runtime policy enforcement, tamper-evident audit, prompt-injection detection (SIEM/EDR) and compliance mapping (NIST…
OmniDoc QA LLM RAG
Agentic NL-to-SQL assistant using Model Context Protocol (MCP) with multi-layer guardrails and token cost tracking.
Agentmoat
A security layer for AI agents: detects prompt injection, firewalls dangerous tool calls, scores inter-agent trust, and keeps a tamper-evident audit log. Works with the Anthropic…
Cross Provider Egress Guard
Destination-aware, default-deny egress control for AI coding agents, at the tool-dispatch layer across Claude Code and Codex from one shared policy.
Minimal MCP Web Search
OWASP LLM/Agent web search MCP server security exercise in TypeScript
Mcpshield Runtime
Open-source Rust runtime sandbox for MCP servers — capability allowlists, outbound proxy filtering, DLP, HMAC policy snapshots, OTel GenAI telemetry. NSA May-2026 aligned.
Bedrock Security MCP
ARCHIVED: development moved to github.com/AUAggy/agent-sec-scanners (packages/bedrock). npm package unchanged. MCP server + CLI auditing AWS Bedrock security posture: IAM, logging…
Data Warden
Agente NL→SQL sobre un lakehouse con cinco anillos de control: guard de allowlist sobre el AST, presupuesto de coste estimado antes de ejecutar, enmascarado por rol y auditoría. S…
Medsguard Agent
An LLM-driven medication-logging agent with a deterministic safety spine.
Cupel
Assay every skill, plugin, and MCP server your coding agent loads. One local command grades safety, token cost, and quality.
Exploit Validator
Proves whether AI agent (MCP) tool configurations are actually exploitable - not just risky-looking. Existing scanners infer risk from manifests; this one validates it in a sealed…
Cancerbero
Local, offline-first GGUF and llama.cpp pre-load inspector
Jv Watchtower MCP
Read-only MCP operations console over a 24/7 algorithmic trading fleet (sanitized portfolio extract). Sanitization is enforced in the data layer, so the strategy never reaches the…
Ccs Integrations
Framework-native adapters for CCS (Correctover Conformance Shape) cryptographically signed runtime receipts — Ed25519 + JCS signed audit evidence for AI agent tool calls (Pydantic…
Trust Issues
Adversarial security review for AI skills, repos, MCP servers, and packages before you install them. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO WI…
Xche AI App Security Pack
Free security guardrails for apps built with AI coding tools (Claude Code, Cursor, Lovable, Bolt). Drop-in rules + OWASP/LLM/MCP policy + secret-scanning hooks & CI gate.
AISecuritySecondBrain
AI/LLM security knowledge base — OWASP LLM Top 10, MITRE ATLAS, prompt injection, agentic security. An Obsidian vault: 92 interlinked, fully-cited pages.
Malskanner
Scan a repo for hidden prompt-injection before your AI agent trusts it — CLI, MCP server & GitHub Action. Run: npx malskanner <repo>. 0 false positives across 5,620 files.
Prompt Injection Defense
The language-level attack defense skill every agent should keep. Covers 12 attack categories. Works with Claude, GPT, Gemini, Copilot, and any LLM.
AgentInterdict
AgentInterdict — runtime enforcement for autonomous AI agents. Trust context. Verify authority. Interdict unsafe action.
Secchecker
Static security scanner and analyser for AI agents, MCP tools, and LLM applications - OWASP LLM Top 10, and infrastructure checks. Zero runtime dependencies.
Polaxis SDK MCP
Python SDK and MCP server for Polaxis - AI agent governance platform. Evaluate every tool call against policies in real time: block dangerous actions, enforce budgets, route to hu…
CyberAI
AI-powered pentest platform
Ramen AI Integrations
Pre-execution semantic firewall for AI agents. Signed policy verdicts, BYOK, zero-trust receipts.
Verification Security
Public verification, security review, and skill quality process for Agent Skill Exchange
Capagate
Capability-aware firewall and policy compiler for MCP tool calls.
Agentbouncer
Scan what your AI agent can actually do — before it does it. Open-source MCP security scanner.
Hacking The LLM AI Goat Red Team
Red teaming AI Goat™ to explore OWASP Top 10 for LLM Applications (2025), prompt injection, RAG poisoning, MCP-assisted auditing, and AI security vulnerabilities.
AgentToolGate
本地 AI Agent 工具治理网关：不防提示词注入发生，防注入得逞后的高危工具调用后果（policy / approval / audit / MCP 双向治理）
Agent Control Plane
Read-only discovery and evidence-backed inventory for AI agents, tools, identities and MCP servers.
Daemonaudit
Red/blue security audit for self-hosted AI agent daemons — finds the secrets, the open doors, and the blast radius.
AgentCensus
Read-only scanner that inventories AI agents, tools, and credentials already running on platforms you operate (ServiceNow today), maps their dependencies, and flags what's ungover…
Axonflow SDK Python
Official Python SDK for AxonFlow — runtime control, MCP policy enforcement, approvals, and audit trails for production AI
Axonflow SDK Java
Official Java SDK for AxonFlow — runtime control, MCP policy enforcement, approvals, and audit trails for production AI
Axonflow SDK Go
Official Go SDK for AxonFlow — runtime control, MCP policy enforcement, approvals, and audit trails for production AI
Axonflow SDK Typescript
Official TypeScript SDK for AxonFlow — runtime control, MCP policy enforcement, approvals, and audit trails for production AI
Dhms Engine
DHMS / AgentFuse: Execution assurance layer for AI agents — verify tool-call decisions, dispatch boundaries, and execution outcomes.
Agent Security
AI agent security scanner — 176 detection patterns with taint analysis, auto-classification, and context flow tracing. OWASP ASI + MCP security.
Aisafepy
Capability-based IFC, streaming-native cascaded guardrails, and an eval-to-guardrail compiler for LLM agents.