- Conduid
- Marketplace
- #owasp
MCP servers tagged owasp
178 live MCP servers tagged "owasp", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with owasp.
Policies
78 Cedar policies and 369 rules governing AI coding agents. Every rule traces to a real incident, published CVE, or compliance framework requirement (SOC 2, NIST, ISO 27001, E…
Security Docker Gateway
Vulnerable MCP server + layered defenses (static scan, runtime interceptor, Docker MCP Gateway).
Pnx MCP Audit
Security audit CLI for Model Context Protocol (MCP) servers. Zero deps, offline, cross-platform.
Mas Sentry Toolkit
Offensive-security scanner for multi-agent systems: MCP and A2A agent protocols plus MQTT agent messaging, verified against the reference SDKs. Aligned with OWASP Agentic Top 10 (…
Audit Truth
Can your agent's logs prove what it did? A review skill that maps AI agent / MCP logging to NIST AU, ISO 27001, SOC 2 and OWASP Agentic Top 10 — with code-level recognisers for ev…
NagaCodex Cyber Security
Defensive consulting skills for AI agents — authorized AppSec, AI/MCP hardening, EU compliance (GDPR/NIS2), IR. Not an offensive toolkit
Model Trust Gate
A fail-fast, layered decision gate for deciding whether to trust an AI model for a specific use. A methodology that composes existing standards (NIST, ISO 42001, CSA AICM, OWASP,…
Payload Entropy Studio
Multi-Vector Threat Analyzer, Shannon Entropy Profiler, Recursive De-obfuscator, and Studio (design influenced by Material 3)
Endpointsweep
Find every MCP server and AI agent on your endpoint fleet. Dependency-free collectors for macOS, Linux and Windows run under EDR/MDM, and a central analyzer audits them against a…
Hades Blackwatch
Hades Blackwatch is an advanced AI security and code-review skill for auditing LLM, agentic, MCP, and full-stack applications using OWASP LLM/Agentic Top 10, AIVSS, MITRE ATLAS, N…
Blastgate
A change-time security gate for the path between layers. Models dependencies, CI, and agent/MCP config as one graph and blocks any reachable route from an attacker-controllabl…
LinWay
AI-powered Static Application Security Testing (SAST) tool
Security Toolkit
13 atomic MCP tools for AppSec and AI Security: recon, MCP audit, prompt-injection audit, OWASP LLM Top 10
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Provekit MCP
Hardened MCP server that gives an AI agent a code security scanner, built so the tools can't be turned against the host, with a red-team suite that spawns the real server and prov…
Agentomy Agent
Free-forever governance peer for AI agents. Score, flag, and audit any agent session in 30 seconds, no infrastructure. Open (MIT) system prompt plus TypeScript/Python SDK. Part of…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
Glyph
🔮 MCP security scanner — find tool poisoning, credential leaks, and insecure transports in AI agent configurations
Guard
Security scanner for MCP (Model Context Protocol) servers: detects tool poisoning, prompt injection, command injection, path traversal and leaked secrets. SARIF, GitHub Action, si…
AI Surface
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
Www Project Agent Memory Guard
OWASP Foundation web repository
AI Surface
Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
Www Project Agent Memory Guard
OWASP Foundation web repository
Audit
Python security scanner for Model Context Protocol (MCP) servers — find prompt injection, over-broad permissions, weak input validation, and credential leaks before your AI agent…
SkillScanner
Universal AI agent skill security scanner. 5-layer deep defense for prompt injection, MCP tool poisoning, encoding obfuscation. Zero dependencies. Bilingual EN/ZH.
Cybersec MCP
Security-tooling MCP server with SSRF guards, prompt-injection containment and a hash-chained audit log
Cerberus
Autonomous multi-agent security auditing platform with runtime exploit verification.
Mcplint
Local-first, CI-native security scanner for MCP servers — OWASP MCP Top 10 rules, lockfile & AIBOM. Never executes your servers.