- Conduid
- Marketplace
- #npm-security
MCP servers tagged npm-security
7 live MCP servers tagged "npm-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with npm-security.
supply-chain-mcp-server
90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDe…
Pi Npm Security
Pi package for npm/supply-chain security workflows: Socket MCP bridge extension, npm security best-practices skill, and related tooling.
Clauderabbit
ClaudeRabbit is a free, open-source security product protecting the open-source community from malware. We clone any public GitHub repo into an isolated sandbox, run it, and retur…
Shield
Security scanner for MCP (Model Context Protocol) servers. Detect prompt injection, secrets leaks, supply chain attacks, and vulnerabilities in MCP servers. CLI + MCP server mode.
Skill Sentry
Scan Claude MCP skills for security threats before you install. npx skill-sentry < your skills github url> free, open source, no code executed.
Skills Vault
Deterministic registry + supply-chain integrity scanner for MCP (Model Context Protocol) servers. One-line install via npx, hash-pinned 112-entry DB, 4 advisory feeds, offline-fir…
Mcpguard
CLI security scanner for MCP (Model Context Protocol) packages — detects hardcoded secrets, prompt injection, supply-chain attacks, and missing auth in npm-based MCP servers