- Conduid
- Marketplace
- #prompt-injection
MCP servers tagged prompt-injection
604 live MCP servers tagged "prompt-injection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with prompt-injection.
Agentlock
An MCP server wrapper that gates tool calls on where a value came from, not what it says. Catches cross-hop prompt-injection laundering.
Mcpgawk
One gateway in front of every MCP server your agents can reach. A server that changes after you approved it is caught, the call is blocked before it runs, and nothing leaves your…
MCPGoat
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-comm…
Firefox MCP
MCP server that drives your own logged-in Firefox over raw WebDriver BiDi - confirmation gates, domain allowlists, prompt-injection fencing.
GitHub MCP Agent
AI agent that manages GitHub through an MCP server and asks a human before any write. Built to explore prompt injection.
Contextguard
Zero-trust governance middleware for Model Context Protocol deployments
Trust Anchor
Trust anchor and security infrastructure for Model Context Protocol integrations.
AI Skill MCP Audit Protocol
A safe review protocol for external AI skills, MCP servers, and prompt packages.
Yang Promptlab
AI security testing — find security vulnerabilities in LLM apps, chatbots, AI agents, MCP servers, and RAG systems. Mapped to OWASP (LLM, Agentic, MCP) and NIST AI RMF.
Workspace Agent
Enterprise Google Chat assistant that reads Workspace context (Gmail, Drive, Docs) and writes deliverables to a Shared Drive, split across two MCP servers so read-only personal da…
Askrelay
Your AI can ask my AI, a self-hosted, cross-vendor, approval-gated messaging relay between AI sessions (MCP over HTTPS).
Aisec
Security scanning for MCP servers and agent applications — Claude Code plugin and CLI
ni-c/smtp-mcp
mcp`
Kobel MCP
Documentation for Kobel — a desktop permission gateway between AI assistants and your computer (Windows/macOS, MCP)
Strike
Active adversarial security scanner for Model Context Protocol (MCP) servers: runtime attacks, LLM-as-judge, and an adaptive agent.
Gateward
Security gateway for MCP traffic. 5 built-in rules block prompt injection, credential leakage, path traversal, cross-repo exfiltration, and destructive commands. One pip install,…
Opensyber MCP Watch
MCP rug-pull detection. SHA-256 fingerprints per tool, per server, across days.
Mcpsafe
The first MCP security framework that tests a live running server, not just static config. Runtime adversarial testing — prompt injection, fuzzing, load & concurrency, latency, au…
Agent Security Lab
A local, dependency-free lab that reproduces MCP / AI agent attacks and the audit that catches them. Educational and defensive. Runs on python3 alone, offline.
AI Lab 02 MCP Server
Практикум для руководителей: MCP-сервер как интеграционный слой между корпоративными системами и LLM, включая риск инъекций в данных
Skillfrisk
Static security scanner for AI agent skills and MCP servers. No LLM, no network, no Docker: millisecond scans with a public zero-false-positive regression corpus
Agent Sec Scanners
Security scanners for AI workloads on one shared audit engine. Home of bedrock-security-mcp (AWS Bedrock auditor, MCP + CLI) and @miaggy/core. Findings map to OWASP LLM Top 10, OW…
Vetmcp
Security scanner for MCP servers — npm audit for the Model Context Protocol
Chaperone
Open-source AI agent security gate: deterministic ALLOW/BLOCK/ESCALATE authorization before every tool call, plain-English policy compilation, tamper-evident audit ledger. MCP sec…
Heron MCP
Free, signed 0-100 trust scores for what an AI agent runs: skills, MCP servers, and the agent itself. Public methodology, wallet-signed (EIP-191).
Atlas Shield Spec
Open specification & example policy packs for Atlas Shield to protect AI agents from prompt injection & data exfiltration (MCP-compatible).
AI Protect
AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform team…
Totp Presence
TOTP-based human presence signal for AI agents
Prompt Injection Lab
Hands-on prompt injection lab with live attack demos for agent, MCP, and memory poisoning training.
Agent Guard Lite
Runtime security guard for LLM agents and MCP: prompt-injection detection, tool policy enforcement, and SQLite traceability.
Kakeibo
A personal finance agent built from scratch on the raw Gemini API: hand-written tool-calling loop, double-entry PostgreSQL ledger, context caching, MCP server, 46-task eval harnes…
Agent Security Bench
Open bench for AI coding-agent ML eval + agent security (prompt injection, jailbreak, tool overreach) with machine-readable receipts
Agent Skill Supply Chain Auditor
Static supply-chain auditor for Agent Skill bundles and MCP configurations with SARIF, Agent-SBOM, and deterministic evaluation.
Tool Poisoning Toolkit
Demonstrates MCP tool poisoning (malicious tool descriptions/schemas) with a runnable vulnerable server + a detection scanner. Includes real captured example output.
Localbrowser
Self-hosted web search + page reading for local LLMs. SearXNG + fastCRW over MCP. No API keys, no per-query cost.
Policy As Dataplane
A policy document cannot stop a prompt-injected agent. An in-band classifier catches the tool name and misses the effect. An agentgateway MCP allowlist holds. Three control stacks…
Mcpguard Go
mcpguard-go: local AI agent security scanner (Go, zero-dep single binary)
Poison Scan
CLI scanner for MCP server tool-poisoning & rug-pull signatures (hidden instructions, invisible-Unicode, multilingual/Turkish-casefold evasions). SARIF + rug-pull diff. Extends mc…
epistemedeus/skillguard
y github:epistemedeus/skillguard mcp`
Promptmirror
Prompt-injection & indirect-injection scanner for any LLM context input
Sentinel Trace
🛡️ Catch unsafe AI agent actions before they execute — explainable risk scoring, injection detection, and real-time containment powered by SigNoz & OpenTelemetry.
Toolproof
Trust grades, capability lockfiles, and signed evidence for the AI tool supply chain. Scan any MCP server or API before your agent connects. Paid by nobody we scan.
Security Readiness Guide
Security checklist, threat model, and production readiness standard for Model Context Protocol (MCP) servers.
Jak Shield
Secure AI agent tool calls by blocking destructive actions, redacting sensitive data, and enforcing human oversight with this universal security gateway.
Agent Honeypot
Defensive deception framework for autonomous LLM agents: synthetic MCP tool servers, 24-dimension fingerprinting, digest-only capture, counterexample-driven lure evolution, audite…
Soc Triage Agent
Local defensive AI agent that triages synthetic SOC identity alerts (LangGraph + MCP), with a governance-as-code layer - security manifest, control matrix (OWASP LLM Top 10 / MITR…
Bounded Local AI Demo
OS-enforced isolation demo for bounded local AI: an agent reaches a private vault only through the severino-vault-mcp sensitivity gate, with no filesystem bypass.
SkillWatch
Independent, local-only watcher for the AI-skill supply chain: flags bait-and-switch changes in the pages skills and MCP tools reference. Sends nothing anywhere. Python CLI.
Triple Arbiter
x402 settlement facilitator + EAS-compatible threat-intel attestation issuer on Base mainnet
Trifecta Guard
Runtime security middleware that blocks lethal prompt-injection capability chains in AI agents.