- Conduid
- Marketplace
- #prompt-injection
MCP servers tagged prompt-injection
604 live MCP servers tagged "prompt-injection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with prompt-injection.
Jes
Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for prompt injection, jailbreaks and secret/P…
TCC PromptInjection
FinSecAI: An experimental testbed for evaluating Prompt Injection, Jailbreak, and data extraction vulnerabilities in financial LLM agents via MCP and Ollama.
Sigil
Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permi…
Husk
Static security scanner for AI agent skills. Built against the bypass techniques that beat Snyk, Cisco & Vercel scanners. Offline, deterministic, zero dependencies, CI-ready. Benc…
Stroq
Local action firewall for AI coding agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions
Gomcp
🛡️ The only Open-Source RLM Memory Server with Mathematically Proven Safety. Persistent context, MCP tools & Sentinel Lattice protection for autonomous AI agents.
Skill Doctor
Deterministic security analysis for agent skill files.
SENTINEL
Sentinel shows what a file would make your AI coding agent do. Static analyzer, merge gate and signed lockfile for CLAUDE.md, AGENTS.md, .cursorrules, hooks and MCP configs.
Soup Wall
Soup Wall: a local firewall for what an AI agent does - tool calls, tool results, MCP handshakes, subagents. Deterministic, shadow-first, no account, no network.
Phpclaw Monorepo
The universal AI agent engine for PHP. Tools, memory, guards, and a ReAct loop already built. Works with Laravel, Symfony, WordPress, Drupal, Magento, Joomla, OpenCart, PrestaShop…
Squidbrake
Brakes for your AI agents: every tool call is checked against your rules, held for human approval when risky, and recorded in a tamper-evident audit trail. Works with Claude Code…
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
AgentCloak
Secure email proxy for AI agents — content filtering, PII redaction, and prompt injection detection over MCP
Orca AI Incident Archive
An open database of real-world AI agent incidents.
Sentinel
MCP security scanner by Helixar
Canary
Which fields of an MCP tool result actually reach the model's context, measured with benign canaries across every installed server
Security Inspector
Explainable static security analysis for MCP tool metadata, including tool-poisoning indicators, schema drift, and suspicious capabilities.
Openclaw Superpowers
44 plug-and-play skills for OpenClaw — self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graphs, and MCP health monitoring. Your agen…
Avakill
🔪 Open-source safety firewall for AI agents. Intercepts tool calls before they execute, enforces YAML policies, and kills dangerous operations in real-time. Works with OpenAI, Ant…
AegisGate
Open-source security gateway for LLM APIs — prompt injection detection, PII redaction, dangerous response sanitization, and audit logging. OpenAI/Claude compatible, MCP & Agent…
Signature Cloaking
This research introduces MCP Signature Cloaking - a novel backdoor technique that allows attackers to exploit hidden parameters in MCP servers, concealing malicious behavior behin…
ShibaClaw
🐾 A loyal, self-hosted AI assistant framework. Multi-channel (Telegram, Discord, Slack…), parallel agents, MCP support, WebUI with OAuth, and hardened against prompt injection
Aigis
Deterministic, zero-dependency Python firewall for AI agents — MCP rug-pull, memory poisoning, indirect injection, exfil channels. 44 compliance templates (US/CN/JP/EU).
SecureAI Scan
SecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP tool abuse, RAG data poisoning,…
Cyvisguard
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
Modelfuzz
🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.
Sentinel AI
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript…
Awesome AI Red Teaming Jp
AI Red Teaming / AI Safety に関する日本語リソースのキュレーションリスト
Adaptive LLM Gateway
Self-hosted LLM gateway that turns flat-rate AI subscriptions (Claude Code Max, ChatGPT Plus, Codex, Copilot, M365, Gemini) into one OpenAI/Anthropic-compatible API. Unified subsc…
Sofagent
FDE Harness: audit-first governance for AI coding agents — 24 rules, HMAC chain, snapshot rollback (83 tools, 13 plugins)
Sourcerykit
Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstream agents detect 100% of errors and retr…
Asamm
Agentic SAMM - An OWASP SAMM Extension for AI-Driven Development
Securevector AI Threat Monitor
Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Co…
Governedmemory
Open-source governed memory for AI agents: prompt-injection-resistant writes, purpose-bound retrieval, provenance, and tamper-evident audit.
BridgeWard
Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, refusal templates, and a read-only injecti…
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
AI Pentest Playbook
🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2…
Artguard
Open-source AI artifact scanner. Detect malicious agent skills, MCP servers, and IDE rule files before they run.
AI Agent Hacking Writeups
A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.
Skill Fetch
Multi-registry skill discovery and installation for AI coding agents — search 9 sources, score, paginate, and install agent skills with security labels
Inkog
Static security scanner for AI agents. Catches prompt injection, runaway loops, missing oversight, and compliance gaps across 21 frameworks. Use from Claude Code, Cursor, ChatGPT…
AgentDefense Bench
A comprehensive security benchmark for evaluating infrastructure-layer defenses in MCP-based AI agent systems
Lockkeeper
The capability router for AI coding agents. Route any task to a bounded skill portfolio across Claude Code, Codex, Cursor, Jcode, Hermes and more — with a built-in prompt-injectio…
Intentframe
Structural security, governance and execution for AI agents: validate actions before they touch files, credentials, network, APIs, or money.
Leandro
AI SRE agent diagnosing Kubernetes incidents over Google Chat — security-first sandbox: NixOS VM, default-deny egress, hard tool denylist against prompt injection
CodeOrion
MCP server for AI coding agents (Claude Code, Cursor, Cline, etc.): verify packages before installing, assess MCP servers before adding them, scan for secrets, audit agent configs…
Scenarios
A portable, model-agnostic test suite of declarative YAML scenarios for evaluating AI assistant security against prompt-injection and data-exfiltration attacks, with Python tools…
Prompt Armor
Open-source prompt injection detector — 5 layers, 91.7% F1, ~27ms, offline, Apache 2.0
Awesome AI Agent Incidents
A curated corpus of incidents, attack vectors, failure modes, and defensive tools for autonomous AI agents.
Claude Guardrails
Hardened security configuration for Claude Code; permission deny rules, shell hooks, and prompt injection defense in full and lite variants.