- Conduid
- Marketplace
- #red-team
MCP servers tagged red-team
145 live MCP servers tagged "red-team", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with red-team.
Jakk
Black-box security scanner for MCP servers — deterministic single-call probes, no LLM. 13 probes across 7 surfaces.
Mcpnuke
MCP red teaming & security scanner — enumerate, probe, and exploit Model Context Protocol servers
AI Tooling
MCP servers for red-team tooling (Mythic C2, BloodHound, nmap) plus LLM red-team reference: prompt injection / secret extraction and insecure output handling (XSS), each with a pr…
Copyleftdev
Systems-level software engineer building security tools, developer infrastructure, and AI-native systems in Rust, Go, and Zig. 560+ open source repositories.
Cveasy Forge
The CVEasy open lab — runnable security harnesses, red-team probes, and experiments. Good-faith open source from CVEasy AI.
Exploit Validator
Proves whether AI agent (MCP) tool configurations are actually exploitable - not just risky-looking. Existing scanners infer risk from manifests; this one validates it in a sealed…
Opencode Anthropic Oauth
Restore Claude access in OpenCode with OAuth for Pro/Max logins, token refresh, and Anthropic model support
SleepyWalker
🛡️ Autonomous SQL injection pipeline — crawls, probes, confirms with AI, exploits with sqlmap, reports in HTML/JSON/SARIF. Built for authorized red teams. One command, full databa…
AI Security Red Team Testing Guide 2026
AI Security: Red Team Testing Guide 2026
CyberAI
AI-powered pentest platform
Skink
Encrypted file transfer + reverse tunnel platform. SOCKS5 proxy, QUIC, Noise Protocol, MCP server, session persistence, HA clustering, PFS rekeying, per-tunnel ACLs, audit logging…
Roelint
Turn Rules of Engagement into a policy firewall for red-team commands and AI agents
Daemonaudit
Red/blue security audit for self-hosted AI agent daemons — finds the secrets, the open doors, and the blast radius.
Sinon
AI agent pentest kit: a methodology and 54-probe corpus for prompt injection, tool abuse and over-permissioned agent actions. Verdicts rest on observed facts, not a judge model.
Vector Plugin
Red-team scanning for LLM agents, wired into your AI editor — one plugin for Claude Code, Cursor, Codex, and Gemini CLI
Batesian
Active security scanner for A2A and MCP servers
Balancelab
Economy balance analysis and exploit detection for AI game agents
AI Security Roadmap
Bilingual, evidence-led roadmap for LLM, RAG, agent, MCP, red-team, and blue-team security.
Hackmonty
Autonomous Sandbox Security Assessment
Loopward
Stress-test the tool-routing decision inside an agent loop: audit confusable tools, red-team routing robustness, compare loop strategies, and export failures as training data.
NeuralReaper
AI-powered penetration testing framework with 55+ MCP tools, CVE intelligence, Active Directory, and autonomous security workflows.
Debugforge
Autonomous Cyber Red-Team & Exploit Immunizer on TrueForge, Daytona, and Qodo
Detonator
Dynamic exploitability testing for AI agents and the MCP servers they use
Yang Promptlab
AI security testing — find security vulnerabilities in LLM apps, chatbots, AI agents, MCP servers, and RAG systems. Mapped to OWASP (LLM, Agentic, MCP) and NIST AI RMF.
Payloadlab
Static malicious payload analyzer — PE/ELF/LNK/macro/OneNote
Strike
Active adversarial security scanner for Model Context Protocol (MCP) servers: runtime attacks, LLM-as-judge, and an adaptive agent.
Mcpsafe
The first MCP security framework that tests a live running server, not just static config. Runtime adversarial testing — prompt injection, fuzzing, load & concurrency, latency, au…
Crm MCP Agent Public
An agent does a CRM marketer's ad-hoc SQL over 5 read-only MCP tools against a deterministic synthetic CDP, behind a pure-stdlib governance kernel: tiered authority, fingerprint-b…
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance
Prompt Injection Lab
Hands-on prompt injection lab with live attack demos for agent, MCP, and memory poisoning training.
Claude Code Map
Map Claude Code projects with a clear MCP-driven view of files, paths, and structure
Boundary Audit
Detects MCP tools hidden from tools/list yet reachable via tools/call; the bundled mock reproduces FAIL and PASS. Actively calls operator-named tools; 11 tests, CI. Does not disco…
Axguard
Adversarial security testing for AI agents — MCP, A2A, x402/L402, and live tool-use. Tests as YAML, evidence as JSON.
Redpath
Active Directory attack path mapper — minimum-cost paths + remediation priority
Agenthive
Multi-agent attack simulation framework for AI systems. 8 attack categories, simulation engine, CLI, SARIF/JSON/HTML reporting, mcp-taxonomy integration.
Dns Eyes
DNS 资产侦察 MCP 服务：多区域解析、CNAME 追踪、crt.sh 证书透明日志、IP 分类、C 段扫描、web 探测、主机碰撞 —— 面向 AI Agent 的攻击面测绘工具
Whaleguard Redlab
Local-first, scope-guarded AI red-team lab for authorized LLM, Agent and MCP security evaluation.
Cutout
Offensive framework for authorized security testing of agentic AI systems — recon, exploit, persist, and pivot across MCP servers and agent chains.
Redteam Lab
A red-team lab for the MCP discovery surface: instructions-field prompt injection, cacheScope:public cross-caller cache poisoning, and post-approval drift, with four controls that…
Provekit MCP
Hardened MCP server that gives an AI agent a code security scanner, built so the tools can't be turned against the host, with a red-team suite that spawns the real server and prov…
Hexstrike Docker MCP
Dockerized HexStrike AI on a linuxserver.io Kali base image, with a remote streamable-HTTP MCP server exposing 150+ offensive-security tools to MCP clients like Claude Code.
Sleeper
Local-first agent tool-call assurance lab: injection → tool action → control gate → evidence.
Red Team
mcp security scanner. mid-2025. deprecated.
Ares
Offensive security framework for autonomous AI agents — recon, foothold, provenance desync, coherence-evasion pacing, recovery poisoning, and exfil, gated by signed attestations a…
Proxynth
⚡ Autonomous AI Interception Proxy, Multi-Protocol OAST Canary Engine & Attack Hypothesis Ledger for LLM Pentesting Agents (Claude Code, Cursor, OpenCode, Hermes)