- Conduid
- Marketplace
- #prompt-injection
MCP servers tagged prompt-injection
604 live MCP servers tagged "prompt-injection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with prompt-injection.
Bonklm
MCP SDK connector for BonkLM
Guardian
MCP security scanner - detect prompt injection in tool descriptions
Cordon
A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Gemini CLI, MCP hosts and LangChain. | Фай…
Mcpcheck
Correctness checks for MCP servers — prompt-injection lint, contract drift, over-broad tools, dishonest annotations. Never calls a tool.
Mcpguard
Security scanner for MCP servers — detect tool poisoning, malicious code patterns, and supply-chain risks before your AI agents execute them.
Vex
MCP proxy that blocks tool poisoning, rug pulls, and excessive agency in real time
bouncer
A deterministic exfiltration firewall for MCP tool calls — gates the destination, not the tool. No LLM in the decision path.
Countersign
Your AI agent writes its own 'allow this?' dialog, so it can hide what it's really doing. Countersign draws the dialog itself, so you approve the real command, and every yes becom…
Portcullis
A firewall and flight recorder for AI tool calls. Proxies MCP traffic, records every call, and enforces policy.
Zn Gate
Zero-trust prompt injection security gate & MCP server for AI agents (Cursor, Claude Code, Antigravity, OpenCode, Codex)
Scan
MCP supply chain scanner - detect tool poisoning, prompt injection, and shadowing attacks
Toolgate
Capability gating for MCP agents, and the measurements that argue for it
Scan
Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply…
Smtp
MCP server that sends mail over SMTP, gated behind an allowlist and a human confirmation
Airlock Bot
Permissions-aware MCP gateway with human-in-the-loop approval for AI agents
Tooltrust
MCP server that scans other MCP servers for prompt injection, data exfiltration, and privilege escalation. Add to your .mcp.json and let your AI agent audit its own tools.
Skillsafe
SafeSkill CLI — scan AI tool skills for security risks and prompt injection
Decoy Scan
Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspicious servers across Claude Desktop, Cursor, VS Code, and more.
Demipass
Secrets management for LLM sessions. Keep credentials out of context windows.
Rea
Agentic governance layer for Claude Code — policy enforcement, hook-based safety gates, audit logging, and Codex-integrated adversarial review for AI-assisted projects
Mcpsense
Security scanner for MCP servers. ESLint + Snyk for the Model Context Protocol.
Server Engine
MCP server framework with Express, middleware pipeline, and tool orchestration
Tokesave
The ultimate AI token-saving MCP middleware — compression, caching, injection shield, multi-server routing, and more.
Warden Gateway
Warden — an open-source MCP gateway. A control plane for AI tool access: security screening and observability for Model Context Protocol servers.
Sealpin
A supply-chain and prompt-injection scanner for MCP (Model Context Protocol) servers.
Nominee
Decision-bound Model Context Protocol tool handlers for governed AI agents
Agent Config Audit
Security auditor for AI agent configurations — scans MCP servers, Claude Code settings, agents, skills and hooks for risky permissions, inline secrets, unpinned supply chains and…
Security Proxy
Security proxy for MCP servers — intercepts tool calls, detects prompt injection, masks PII, and writes audit logs
Mcpsentry
Security scanner and runtime proxy for MCP servers.
Guardmcp
Security scanner for MCP (Model Context Protocol) servers and configs — tool poisoning, secret leaks, rug-pull detection, excessive permissions, insecure transport.
Aspex
See what your AI agents actually did, then scan what they could do. MCP security from logs, no proxy. Offline, one binary.
Guard
MCP runtime security proxy — intercepts and enforces security policies on MCP tool calls
Nexus
Local-first trust layer for AI coding agents — structural prompt-injection and action guards, secret scanning, semantic memory, and code review. No model API required.
Mcpguard
Security scanner for MCP servers — detect tool poisoning, malicious code patterns, and supply-chain risks before your AI agents execute them.
Taintgate
🚧 A policy gate for AI agent tool calls, with provenance tracking. Blocks what prompt-injection classifiers miss: where an instruction came from.
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Revl
A language for safe, universal spatiotemporal composability (Cordis paradigm) and orchestration.
Cfgaudit
Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 109 rules, SARIF output, OWASP LLM Top 10 mapping.
Scankii
A local-first SAST & Runtime Security scanner built exclusively for LLM Agents. Detects cross-modal data leaks, prompt injections, and intercepts credentials before execution.
Execution State Preflight
Move both the checklist and the verdict outside the model. Slot-based preconditions for irreversible tool calls — execution reads a verdict record, never a conditional.
Security Agent Skills
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk,…
Tracewall
Flight recorder and firewall for AI agents — records every tool call, tracks lethal-trifecta taint across a session, and blocks the prompt-injection exfiltration path. Zero deps,…
Jev Agent Authorization
Jev agent authorization for MCP tool calls: Kinde identity and permissions plus Jev's typed, calibrated decisions, checked server-side before every call runs
Catraca
Provenance-aware authorisation for LLM agent tool calls. Denies a call when a consequential argument came from untrusted content. Stdlib only.
Cordon
A prompt-injection firewall for AI agents, with no AI inside: your agent reads anything and takes orders only from you. For Claude Code, Gemini CLI, MCP hosts and LangChain. | Фай…
ShieldMCP
Transparent MCP security proxy: tool metadata integrity, call validation, and response analysis. Apache-2.0.
Visor
Runtime policy enforcement and audit control plane for MCP tool execution. Deterministic, non-AI policy engine that intercepts MCP tools/call requests before execution.
Phantom
Forensic CLI for AI-era supply-chain attacks: XZ tarball diffs, prompt injection scans, MCP/CLAUDE.md/Cursor config audits. SARIF for GitHub Code Scanning.
Redstamp
own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prompt injection and destructive commands before they run; same call, sam…
Narthex
Prompt-injection defenses for Claude Code. A PreToolUse Bash hook blocks compositional credential-exfiltration shapes (secret read plus network, env dump to network, remote script…