- Conduid
- Marketplace
- #prompt-injection
MCP servers tagged prompt-injection
604 live MCP servers tagged "prompt-injection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with prompt-injection.
Apertomemory
Portable, client-side-encrypted, user-owned AI memory, open format, reference implementation, IETF I-D
Skill Tripwire
A fail-closed scanner for poisoned agent skill and config files. Zero dependencies, published detection and false-positive rates.
AI Shield Py
Python LLM security middleware: prompt-injection, PII, tool-policy, cost-budget, audit. Port of ai-shield-core (TS).
Agent Chaos Monkey
Chaos engineering for AI agents. Injects connector failures, expired auth, prompt injection, tool schema drift and truncated payloads, then judges from tool-boundary evidence whet…
NutritionalTracker
Nutrition label photos become validated macro rows, plus a public REST API and a Claude (MCP) connector whose writes are previewed and saved only on a one-time code. Per-user RLS,…
Memory Blackbox
Agent memory forensics — trace a bad agent action back to the exact poisoned memory, see the blast radius, roll it back
Prompt Foo
Promptfoo is an open-source CLI and TypeScript/Node.js library for evaluating, red-teaming, and security-testing LLM applications, agents, and RAG pipelines. It runs deterministic…
Story Continuity Guard
Local-first security and continuity auditing for Codex skills, AI-agent configs, MCP projects, and story workflows.
Deterministic Agent Gatekeeper
Determinism you can prove for AI agent tool calls: a pure decision core whose every verdict re-derives hash-exact from its record.
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Consensus
A panel of frontier models debates your hardest question until it agrees, and tells you what it could not settle. Runs on your existing Claude/ChatGPT/Grok subscriptions. CLI · MC…
Behavry Proxy
Inline MCP governance proxy — OPA/Rego policy enforcement, DLP scanning and prompt-injection detection on every tool call, before it executes.
Hecate Public
Security scanner and runtime guard for MCP servers and AI agents. Runs entirely on your machine.
Airlocked Agents
Deterministic IaC for a private, self-hosted AI automation stack — untrusted content stays in the airlock.
Openclaw Nie Guard
Cryptographic trust mediation layer for AI agent frameworks. Apache 2.0 reference architecture composing device-attested admission, short-TTL scoped capabilities, runtime continui…
Agent Perimeter
Audit AI coding agent config boundaries: Claude Code hooks, MCP servers, Codex config, AGENTS.md, prompt injection, hidden Unicode, and broad permissions.
Semantic Intent Scanner
Semantic intent evaluation for agentic systems. Detects instruction-layer risks including authority laundering, consent bypass, concealed execution, and semantic attack patterns i…
LLM Redteam
面向中文场景的开源 LLM 红队测试工具 | An open-source red team toolkit for LLM applications, covering prompt injection, jailbreak and info leakage attacks, with OpenAI/Dify/MCP adapters and LLM-a…
AI Redteam Notes
Pre-registered research on prompt injection through agent tool output, plus a dependency-free substrate auditor whose checks run in CI.
Boundary Bench
Deterministic crash tests for agent control planes: paired worlds, hard stops, budgets, scopes, approvals, and hash-linked receipts.
Octopus Inspect
Catch governance holes before production does. A static governance linter for AI agent workspaces.
Capbroker
A local, self-hosted capability broker for AI agents -scoped, signed, expiring capability tokens instead of raw API credentials.
Repotify
Thousands of agent skills. The right ones for your repo. Repotify reads the skills developers and AI companies publish on GitHub, checks them for risks and installs the best ones…
Mcpsum
Stop MCP servers from rug-pulling your AI agent. A lockfile + runtime reference monitor for MCP tools.
Smallprint Tools
Small Print's open tools: the disclosure lab, and soon the command, the MCP server and the plugin
Immune
Immune — the agent security loop that turns every attack into an antibody. MCP firewall → replayable breach trace in ClickHouse → synthesized countermeasure → replay-proven → Semg…
Scrutiny
Static and semantic security scanner for MCP servers: unpinned packages, rug pulls, tool poisoning, shadowing and toxic flows. Trained model, SARIF output, zero dependencies, full…
Pilot Browser
Let AI agents drive your real, logged-in browser: visible cursor, human takeover, approvals, injection-tested. MCP-native.
Sealwall
Zero-dependency firewall and tamper-evident audit log proxy for Model Context Protocol (MCP) AI agents.
Strathon
The open-source AI agent firewall — write a CEL policy, block the tool call before it executes. In-process, sub-millisecond. OWASP + EU AI Act mapped.
Vamp MCP Audit
MCP server security auditor — tool poisoning, ASCII smuggling detection, prompt injection, OWASP Agentic Top 10. First OSS tool for MCP security.
Security Auditor
It's a Python-based CLI security scanner built specifically to audit MCP (Model Context Protocol) servers — the integration layer that connects AI assistants like Claude to extern…
Detector
Safety check for MCP servers: scan AI add-ons for security, reliability and quality problems. Web app, CLI and GitHub Action. Passive by default
Mcd Guard
麦麦护栏：把麦当劳账号交给 AI 之前，先装个刹车。本地 MCP 安全层：下单等写操作需本机确认、消费上限、只读模式、审计日志，Token 只在本机。Human-in-the-loop guard proxy for McDonald's China MCP.
Shield
AI-powered security scanner for MCP servers. Tests against the OWASP MCP Top 10 — prompt injection, tool poisoning, SSRF, and more — using a LangGraph attack agent.
Gateway
Local-first firewall and black-box run reporter for MCP tool calls: block poisoned tools, detect drift, rate-limit agents, and audit runs.
Warden
Drop-in security proxy for MCP — policy, tamper-evident audit, human approval, prompt-injection & secret-exfil defense. One line of config, zero code.
Toolgate
Capability gating for MCP agents, and the measurements that argue for it
Breaker
Replay-verified MCP security testing and deterministic policy hardening for tool-using AI agents
Custody
Provenance-tracked shared memory for AI agent teams. A deterministic Guard runs multi-hop graph queries in FalkorDB to block injected actions, and a Warden agent investigates inci…
Mcpaudit
Audit your MCP servers for tool poisoning, credential exposure, and supply-chain risk. Zero dependencies. Nothing is executed.
Airlock
Nothing reaches production without passing through the airlock. A change-control console where every irreversible production change is proven on a shadow copy in a sandbox before…
CHIMERA
Chained Harm & Injection Measurement for Evaluating Risks in Agents — a red-team research framework that tests hosted models, agentic apps, RAG pipelines, MCP servers, AI coding a…
Decoy Tripwire
Security tripwires for AI agents. MCP tools that detect prompt injection, credential theft, and unauthorized tool calls in real time. Open source, zero dependencies, works with Cl…
Audit
Security audit checklist for third-party MCP servers before you install them
Skill Auditor
Review the security of agent skills and MCP servers before installing them
Awesome Agent Supply Chain Security
A curated list of tools, research, standards and datasets for the security of AI agent extensions — skills, MCP servers, plugins and rules files.
Invaris Labs Website
Website for Invaris Labs: security infrastructure for autonomous AI agents. Presents AgentSec (adversarial security testing) and AgentAuth (agent identity and delegated authorizat…
Magate
生成AIを社外のMCPサーバやAPIにつなぐ前に、ツール定義・API仕様書の汚染・差し替え・乗っ取りや過剰な権限を審査し、許可／条件付き許可／不可を判定するツール
Agentgate
ai security cli developer-tools agent firewall policy-as-code python anthropic claude-code