- Conduid
- Marketplace
- #prompt-injection
MCP servers tagged prompt-injection
604 live MCP servers tagged "prompt-injection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with prompt-injection.
Toolpoison
Security scanner for MCP servers. Detects tool poisoning, prompt injection hidden in tool descriptions, leaked API keys, and supply-chain risk across Claude, Cursor, VS Code, Wind…
Agentseal MCP Intel
MCP server for AI security intelligence. Check any MCP server for supply-chain threats before installing -- from Claude, Cursor, or Windsurf.
Mcpradar
Security scanner for Model Context Protocol servers. Catch tool poisoning, prompt injection, and supply-chain attacks before your AI agent runs them.
Audit
Scan MCP servers & AI-agent skills for malicious patterns (prompt injection in tool descriptions, credential exfil, download-and-execute). 17 patterns / 60 signatures, zero-dep. M…
Audit
Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, credential exposure, supply chain risks, and more.
Quickbooks MCP
A QuickBooks MCP server built for real books. Exposes QuickBooks Online as callable tools over the Model Context Protocol, with every create, update and delete gated behind human…
Qubes MCP
Autonomous AI agents inside a Qubes-isolated sandbox - tag-scoped Admin API access with dom0-mediated trust boundary.
AgentShield
Open Agent Security Fabric — red-team agentic AI, MCP firewall SDK, action oracles & SARIF CI gates. Assure, Enforce & Govern. Python + TypeScript. OWASP LLM/Agentic/MCP Top 10.
Arxiv MCP
FastMcp 3.2 server plus webapp for human/agentic arxiv and doi paper search, rag and store
Sovereign MCP
Deterministic MCP Security Architecture. FrozenNamespace as Root of Trust for Model Context Protocol tool verification
Mcprism
Fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully…
Sovereign MCP
Deterministic MCP Security Architecture. FrozenNamespace as Root of Trust for Model Context Protocol tool verification
Rebar
Makes wrong code fail. A checker for any repository, a scanner for known prompt-injection signatures in versioned files, a gate (hooks, CI, ruleset) that blocks the commit, and a…
Sosa
SOSA™ — Supervised Orchestrated Secured Agents. A governance framework for production-grade autonomous AI operations.
AgentInjectionBench
A benchmark for evaluating prompt injection attacks in agentic tool-use pipelines
Starter Stack
Cloneable reference workspace for governed AI agent development — 6-layer security stack with scanner, signing, sandbox, and observability
Agentguards Plugins
Official AgentGuards plugin marketplace — LLM security guardrails for AI coding agents (Claude Code + OpenAI Codex): jailbreak/prompt-injection detection, web-content scanning, da…
Attenu Guard
In-process permission enforcement for AI-agent delegation chains: a sub-agent never holds more than its parent's authority, with an offline-verifiable audit ledger. Python + TypeS…
AI Security Platform
Control plane for enterprise AI security: inline runtime guardrails, automated red teaming with auto-remediation, AI asset posture (AI-SPM), and compliance governance. Python cont…
Jev Engineering
The decision layer for AI agents. Typed, calibrated decisions in ~400ms for two hundredths of a cent: gate tool calls, route models, rank options. With the 300-call injection test…
Invaris Agentsec
Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression testing and reports.
Driftlock
The lockfile & CI drift-gate for MCP - catch tool-poisoning / rug-pulls before your agent does. Dependabot for your agent's trust boundary.
Poisoned Pages
☠️ A support agent that reads a poisoned Sanity help center and still doesn't get tricked into moving money. Sanity Knowledge Base + Claude + taintgate. #sanitychallenge
Agent Hardening Guide
Production hardening guide for AI agents — prompt injection defense, tool sandboxing, and credential management
Guard Layer
Runtime guardrails between an AI agent and its tools: scan what it reads, gate what it does, and track the session so a secret read earlier can't be exfiltrated later. Containment…
Guard Scanner
🛡️ Agent Security Scanner — 364 patterns, 35 threat categories, 27 runtime checks. Zero-Trust policy layer for MCP/A2A agents.
Stoneburner
Local-first LLM eval: cost, quality, and security suites. Install stoneburner-atomics; CLI is atomics.
Mcpcustoms
MCPCustoms is the customs checkpoint for MCP tool calls: a zero-dependency TypeScript runtime semantic firewall that inspects every Massive Intelligence (IM) agent tool call befor…
Enlil
Source-available control and audit plane for AI agent actions. Enforce what your agents may do, and prove what they did.
AI Agent Firewall
Local-first security firewall for autonomous AI coding agents — intercepts, risk-scores, and human-approves every tool call (Claude Code / Codex / Cursor / Cline). Apache-2.0.
AI Security Labs
Hands-on AI security labs. Build, break, understand.
Aifw
AI Agent Identity and Access Management and Inference Firewall
Goop Shield Community
Runtime defense for AI agents. 24 inline defenses, 3 output scanners, MCP server, framework adapters.
Security Gate X402
The Zero-Trust Safety & Settlement Rail for Autonomous AI Agents. Sub-10ms deterministic guardrails, key leak defense, and cryptographic Proof-of-Safety attestations via x402 on B…
Sec Recon Agent
Type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic…
Security Audit
Security auditor for MCP servers. Purpose-aware scoring, injection testing, compliance checks.
Security Checklist
Security checklist and reference audit configuration for MCP (Model Context Protocol) server deployments
Shield
Security scanner for MCP (Model Context Protocol) servers. Detect prompt injection, secrets leaks, supply chain attacks, and vulnerabilities in MCP servers. CLI + MCP server mode.
Security Scanner
Scans Model Context Protocol (MCP) server configurations for common security issues: overprivileged tools, missing auth, prompt injection surface, unsafe defaults.
Mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go…
Tessera
Signed provenance labels and taint-tracking policy for LLM agent security. The core library behind AgentMesh.
Warden
CI-first MCP supply-chain integrity gate + runtime tool-result inspection. Pin an MCP server's tool surface, fail CI on drift, and block poisoned tool results (ANSI/secret-echo/ex…
Shield
Security audit framework for MCP servers. 17 detectors, confidence scoring, 3 scan modes, zero dependencies. pip install mcp-shield-audit
Vex MCP
MCP proxy that blocks tool poisoning, rug pulls, and excessive agency in real time
Jenkins MCP Server
Secure-by-design Jenkins MCP server with runtime guardrails. Minibridge integration for Rego/HTTP policy enforcement, Jenkins-aware prompt-injection guardrails, destructive tools…
Gate
Runtime enforcement for MCP agents: capability manifests, session taint tracking, and a non-configurable rule-of-two trifecta invariant, with a hash-chained audit log.
Rebar
Makes wrong code fail. A checker for any repository, a scanner for known prompt-injection signatures in versioned files, a gate (hooks, CI, ruleset) that blocks the commit, and a…
Agentguard
agentguard
Vex
Agent-first red team framework for AI systems probe LLMs, agents, MCP servers, and RAG pipelines for safety failures and exploitable vulnerabilities.
Sentinelmcp
An automated red-teaming and reliability-auditing platform for AI agents - tests for prompt injection, tool hijacking and data exfiltration. Ships as an MCP server.