- Conduid
- Marketplace
- #owasp
MCP servers tagged owasp
178 live MCP servers tagged "owasp", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with owasp.
Meritmcp
The CI quality gate for MCP servers — functional tests + official conformance + OWASP-MCP-Top-10 security in one command, with SARIF, a 0-100 safety score, and a README badge.
Ges MCP Server
GESF MCP Server - AI Compliance Assistant for GDPR, OWASP, NIST, CIS. Check compliance, generate policies, assess risks via MCP protocol.
Mycop
Scan and fix vulnerabilities in Python, JavaScript, TypeScript, Go, and Java code using AI-powered analysis with 200 built-in security rules.
Cfgaudit
Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.
Security
Comprehensive security rules and best practices for MCP (Model Context Protocol) servers with compliance mapping (SOC2, HIPAA, PCI DSS)
Firebreak
Security MCP server that turns your AI into a penetration tester. 20 tools, 100 best practice guides, 47 vulnerability patterns. Connect to Claude, Cursor, or any MCP client.
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Pluto Aguard
Security scanner and launch gate for AI agents & MCP apps — config scanning, policy coverage, risk modeling, drift detection, CI/SARIF, and launch-readiness evidence
Synentra
Intent-aware runtime governance and enforcement for autonomous AI agents interacting with APIs, tools, and MCP servers.
Mcpradar
Security scanner for Model Context Protocol servers. Catch tool poisoning, prompt injection, and supply-chain attacks before your AI agent runs them.
Mcpsec
OWASP MCP Top 10 security scanner for Model Context Protocol servers
Llamator MCP Server
MCP server for llamator: automate LLM red teaming workflows
Firebreak
Security MCP server that turns your AI into a penetration tester. 20 tools, 100 best practice guides, 47 vulnerability patterns. Connect to Claude, Cursor, or any MCP client.
Agent Guard
The open-source firewall for AI agents. Control what your agents do — policy enforcement, MCP security scanning, zero-trust identity, sandboxing, and reliability. 10/10 OWASP. One…
Agent Assurance
Declare what your AI agent may do. Verify it on every edit, PR and release — MCP configs, Claude Code permissions, tool definitions. Deterministic, OWASP-mapped, signed evidence.
Governance Framework
Open-source governance and compliance framework for AI agents — cross-provider policy enforcement, audit trails, and standards mapping across OWASP MCP Top 10, NIST AI RMF, and EU…
Attenu Guard
In-process permission enforcement for AI-agent delegation chains: a sub-agent never holds more than its parent's authority, with an offline-verifiable audit ledger. Python + TypeS…
Invaris Agentsec
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
Driftlock
The lockfile & CI drift-gate for MCP - catch tool-poisoning / rug-pulls before your agent does. Dependabot for your agent's trust boundary.
Compdes Workshop
COMPDES 2026 workshop: securing MCP/RAG AI agents for small businesses. Build, break (Garak, PyRIT, Promptfoo), harden. / Taller de seguridad de agentes de IA.
Trustmcp
Free, open-source security scanner for MCP servers, static analysis, live dynamic probing, auth posture detection, and SARIF/JSON reporting with A-F scoring mapped to OWASP MCP T…
Mcpguard
Security scanner for MCP server configurations. 10/10 OWASP MCP Top 10 coverage. Auto-fix, tool poisoning detection, rug pull alerts.
Vibecheck
Offline, no-AI "safe to ship?" gate for vibe-coded apps — finds the security mistakes AI coding agents make (secrets, unprotected routes, eval-RCE, SQLi, CORS, JWT, leaked keys).…
Leash
Keep your AI agents on a leash. API-layer policy engine for authorization, audit, and security features which includes deny-by-default, simple YAML rules, and tamper-evident logs.
Agentsiege
⚔️ Autonomous red-team swarm for AI apps, agents & MCP servers — pentest your agent before someone else does.
Cerberus
Autonomous multi-agent security auditing platform with runtime exploit verification.
Mylonite
Open-source AI-layer security testing — probes your AI agent for weaknesses and writes a validated regression test for each one it finds, gating CI.
Nhi Guardian
Microsoft Graph-powered PowerShell module that audits and risk-scores non-human and AI-agent identities in Entra ID, mapped to the OWASP Agentic Top 10.
LLM Security Skills
Agent Skills that turn your AI coding agent into an LLM security reviewer — prompt-injection testing, OWASP LLM Top 10 audits, MCP & RAG review, KVKK/PII checks. English + Turkish.
Skillfence
Runtime behavioral security for Agentic Skills — deterministic policy engine, human-in-the-loop gate, full OWASP Agentic Skills Top 10 (AST01–AST10) coverage. Not another SKILL.md…
Agent Governance
[DEPRECATED] Moved to microsoft/agent-governance-toolkit
Atr
Rust loader and matcher for Agent Threat Rules YAML. Vendors the upstream ATR ruleset (MIT, ATR Contributors).
AntiClaude
Open-source red-teaming toolkit for AI agents. 64 attack payloads covering 7/10 OWASP Agentic Top 10.
Codex Python Engineering Harness
Codex-native Python engineering harness with profile-driven scaffolding, deterministic quality gates, secure hooks, MCP governance, and audit-ready AI governance controls.
TorusGuard
Autonomous Security Guardrails & Governed Remediation for AI-Built Apps. Tri-Mode Parity (CLI, Chat Slash Commands, Native MCP Server), First-Principles Security Suite, Multi-Moda…
Threat Intelligence Pipeline
Correlates every NVD CVE with CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, and EPSS, with APT links only where MITRE ATT&CK cites the CVE. Search-first web app,…
Sovereign Security Protocol
Full SSP v13.4.0 source in Portuguese, with bilingual community summaries for application security, secure SDLC, AI agents, MCP, and evidence-based adoption.
Attack Matrix
ATT&CK-style MCP attack matrix: tactics x techniques mapped to MITRE ATLAS, OWASP MCP Top 10 (2025) & SAFE-MCP, with detection notes and cited public research. A reference, not a…
PentestAI
Autonomous web-pentest agent on consumer hardware — LangGraph + 23-tool MCP server + HippoRAG knowledge graph, driving a fine-tune-free Qwen2.5-Coder-14B on 12GB VRAM. Clears ever…
Brokenbazaar
Deliberately vulnerable AI agent marketplace — the full Product Security lifecycle: threat model → attack → defend → regression test → detect. MCP + Agent Skills supply chain.
Vamp MCP Audit
MCP server security auditor — tool poisoning, ASCII smuggling detection, prompt injection, OWASP Agentic Top 10. First OSS tool for MCP security.
Audit
Security audit for AI-built projects. 130+ checks across OWASP Top 10. Auto-detects stack, loads relevant checks, grades your project A-F with exact fixes.
Magate
生成AIを社外のMCPサーバやAPIにつなぐ前に、ツール定義・API仕様書の汚染・差し替え・乗っ取りや過剰な権限を審査し、許可／条件付き許可／不可を判定するツール
Guard
Adversarial fuzzer for MCP servers — dynamically break Model Context Protocol endpoints. Shell injection, SSRF, overflow, type confusion, prompt injection probes. Zero-dep Python…
MCPShield
Local security scanner, hardening checks and optional stdio policy guard for Model Context Protocol (MCP) servers. Source beta by Nullvora.
Scanner
Security scanner for Model Context Protocol (MCP) server configurations
Beforemerge Skills
AI-native code review rules for Claude Code, Cursor, Codex & more. 104 rules across React, Next.js, Supabase, SOLID architecture, and WordPress — each with bad/good examples, CWE/…
goklab/guardvibe
commit hook, and CVE version detection. Zero config, runs locally.
Kafka MCP Enterprise Server
A production-ready Model Context Protocol (MCP) server for Apache Kafka. Features Information Flow Control (IFC) sandboxing, granular namespace isolation, and strict bounded buffe…
Code Review Agent MCP
AI code review agent MCP server. Reviews code like a kernel maintainer: blunt, technical, no sugarcoating. Detects bugs + OWASP Top 10 security vulnerabilities. 4 harshness levels…