- Conduid
- Marketplace
- #mcp-security
MCP servers tagged mcp-security
248 live MCP servers tagged "mcp-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with mcp-security.
Nono
agent runtime security - zero trust, zero setup, zero latency agent sandboxing
GOAT
[Archived] Read-only historical snapshot. No issues, PRs, or updates. Use as-is.
Spring AI Playground
Safe local execution layer for AI agent tools. Build and test-run MCP tools (no pass, no run), serve them from a built-in MCP server, and use them in Agentic Chat with RAG, human-…
Compliant LLM
Build Secure and Compliant AI agents and MCP Servers. YC W23
Phantom
Forensic CLI for AI-era supply-chain attacks: XZ tarball diffs, prompt injection scans, MCP/CLAUDE.md/Cursor config audits. SARIF for GitHub Code Scanning.
Auth Proxy
MCP Auth Proxy is a secure OAuth 2.1 authentication proxy for Model Context Protocol (MCP) servers
Pentesting MCP Servers Checklist
A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained b…
akramIOT/MCP_AI_SOC_Sher
AI SOC Security Threat analysis using MCP Server
Agentseal
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP serv…
Agentseal
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP serv…
Awesome MCP Gateways
Gateways, routers, proxies, aggregators, security layers and registries that sit between MCP clients and servers.
Secure Claude Code
Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and…
Zerobox
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
ThinkWatch
Enterprise AI bastion host for secure AI API and MCP access, with unified proxying, RBAC, audit logs, rate limiting, and cost tracking across OpenAI, Anthropic, Gemini, and self-h…
Cross Code Organizer
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scannin…
AI Osint
🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, an…
Penetration Testing
The ultimate OWASP MCP Top 10 security checklist and pentesting framework for Model Context Protocol (MCP), AI agents, and LLM-powered systems.
Vauban
A fortified bastion (PAM) designed to protect and control access to organization computing assets. Goal: deliver a unique free and open-source bastion software using the Rust pro…
Audit Tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pu…
Scribe
Point it at an OpenAPI schema. Get an MCP server.
Awesome AI Agent Attacks
A curated timeline of real AI agent security incidents, breaches, and vulnerabilities (2024-2026). Every entry sourced and dated.
Guard
Public SDKs and integration contracts for Armorer Guard.
Spc
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, a…
Secretless AI
One command to keep secrets out of AI. Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.
Heimdall
Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.
Reap
reconnaissance for agent attack surfaces
DescriptorPin
Defensive integrity monitor for MCP tool descriptors: pins canonical hashes and reports mutation, shadowing, poisoning, and stdio transport risk.
Security Testing Guide
OWASP MCP Security Testing Guide
Ave
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Spc
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, a…
Auth Proxy
OAuth 2.1 + OIDC bridge for private MCP servers. Stateless, replay-safe, audit-defensible. Bring any IdP — Keycloak to Entra.
Sigil
Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permi…
TrustGate
Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.
Vmcp
MCP gateway with GraphQL tool aggregation
AgentVetter
Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided triage and fix. Scan what agents install; f…
Trustgate
Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.
Goat
MCP Goat is a small, local security lab for anyone who wants MCP and agentic LLM risks to feel real, not abstract. It runs entirely on your computer with dummy data and a simulate…
Signature Cloaking
This research introduces MCP Signature Cloaking - a novel backdoor technique that allows attackers to exploit hidden parameters in MCP servers, concealing malicious behavior behin…
Bluerock
Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as structured NDJSON. No code changes. Apache…
OWASP MCP Governance And Risk Project
A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents connect to external tools, data sources, and sy…
Nabu.NET
Nabu is an ASP.NET Core extension that makes it easy to expose existing application endpoints and actions as Model Context Protocol (MCP) tools, allowing AI agents and MCP-compati…
Sourcerykit
Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstream agents detect 100% of errors and retr…
BridgeWard
Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injecti…
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
Red Team Blue Team Agent Fabric
AI agent security harness, adversarial testing: 611 executable tests in the v4.20.0 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loo…
BrokenMCP
BrokenMCP is a vulnerable implementation of the Model Context Protocol (MCP) for educational purposes.
Agent Audit Kit
Static scanner for MCP-connected AI agent pipelines. 332 rules across 14 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to…
CodeOrion
MCP server for AI coding agents (Claude Code, Cursor, Cline, etc.): verify packages before installing, assess MCP servers before adding them, scan for secrets, audit agent configs…
Skillfortify
First formal security scanner for AI agent skills & plugins. Static analysis, supply chain verification, SBOM generation. 22 frameworks supported including MCP, LangChain, CrewAI.