- Conduid
- Marketplace
- #security-scanner
MCP servers tagged security-scanner
97 live MCP servers tagged "security-scanner", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-scanner.
Trivy MCP
Trivy plugin for starting an MCP server
Glyph
🔮 MCP security scanner — find tool poisoning, credential leaks, and insecure transports in AI agent configurations
Poutine
poutine, a supply chain vulnerability scanner for build pipelines
Lucidshark
Ship AI-generated code without the fear
Cross Code Organizer
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scannin…
Audit Tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pu…
agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
SafeAI
Static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and gov…
MCPScan
Local CLI to discover shadow MCP servers on your local network & audit authentication status. Zero telemetry, local-only.
AgentVetter
Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided triage and fix. Scan what agents install; f…
OpenTrustBench
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交…
scan-mcp
Static security scanner for MCP servers — detects tool poisoning, injection, secrets, Dockerfile and dependency issues.
Dreamgraph
An autonomous cognitive layer for software systems. It discovers, verifies, and resolves system-level insights through structured "dream cycles" via MCP.
Repo Forensics
Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies.
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
Agent Audit Kit
Static scanner for MCP-connected AI agent pipelines. 332 rules across 14 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to…
Aliensec MCP Server
AlienVault OTX Endpoint Security Scanning MCP Server with VirusTotal Integration
Tooltrust
MCP server that scans other MCP servers for prompt injection, data exfiltration, and privilege escalation. Add to your .mcp.json and let your AI agent audit its own tools.
Fabrica Star
Know what you're installing before you npx it. A security scanner for Model Context Protocol (MCP) servers and client configs.
Guardmcp
Security scanner for MCP (Model Context Protocol) servers and configs — tool poisoning, secret leaks, rug-pull detection, excessive permissions, insecure transport.
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Toolpoison
Security scanner for MCP servers. Detects tool poisoning, prompt injection hidden in tool descriptions, leaked API keys, and supply-chain risk across Claude, Cursor, VS Code, Wind…
VulScan MCP
Security vulnerability scanner for VS Code. Scans dependencies for CVEs from NVD/OSV databases. Integrates with GitHub Copilot via Model Context Protocol. Supports npm, pip, Maven…
Mcprism
Fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully…
OpenSkill
One Skill. All Your AI. Every Device. — AI skill manager from desktop to robot. Security scanner · 11 device profiles (RPi/Jetson/ESP32/AI glasses/ROS2). CLI: oski.
Supreme
World's First MCP-based code-security scanner
Yoke
Domain intelligence and OSINT tool. Analyze any domain for DNS, WHOIS, SSL, security headers, tech stack, performance, breaches, and more.
Keelix
Local-first security scanner for self-hosted infra — host, containers, services, and AI-agent/MCP posture. Don't ship with a hole in the hull.
LaunchSense
LaunchSense project source
Skillshield
🔒 Security-scored directory for AI agent skills and MCP servers. 33,000+ scanned, 12% malware detection.
Extenshi Io
Public home of extenshi.io — cross-store catalog of 373k+ browser extensions with security analysis, plus developer tools (@extenshi/cli, @extenshi/mcp, @extenshi/guard) and CC BY…
Correctover Scan Action
GitHub Action: scan MCP (Model Context Protocol) configuration files for credential leaks, SSRF and missing auth in CI — SARIF output, fails builds on critical findings.
AntiClaude
Open-source red-teaming toolkit for AI agents. 64 attack payloads covering 7/10 OWASP Agentic Top 10.
SiteCMD Local
Desktop website health scanner and command center
Skillxray
Scan an AI agent skill for prompt injection, hidden Unicode, dangerous commands, and leaked secrets before you install it.
Skilltest
SkillTest: test framework and CI gate for AI agent skills (SKILL.md) — the engine behind skillemall.ai
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Ccs Conformance Vectors
Public conformance test vectors for CCS (Correctover Conformance Shape) — signed, tamper-evident receipt fixtures for verifying AI agent runtime security implementations.
Skil
Vendor-neutral security, verification, and enforcement framework for AI agent skills
Vibe Scanner
Read-only security scanner for Next.js/Supabase repos and live sites, with terminal, JSON, CI and MCP output.
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Perufitlife/web-exposure-mcp
only.
IntentProbe
Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisoned MCP servers, skills, and packages before install.
Skillsync MCP
Provide an MCP server that enables seamless integration and management of SkillsMP data with Node.js environments supporting Model Context Protocol.
Homescan
MCP server for home network discovery and security scanning
Toolfence Site
MCP security scanner — Toolfence scans any Model Context Protocol server and reports the risks your AI agents inherit: tool poisoning, prompt injection, tool drift, over-broad sco…
Moneypath
Find payment logic flaws in Razorpay and Stripe checkouts - client-trusted amounts, rupee/paise bugs, unverified webhooks
VibeSafe MCP
MCP server (not a Claude Code Skill) for the VibeSafe security scanner — scan code, live URLs and run a Launch Check from Claude Desktop, Claude Code, Cursor, Windsurf or any MCP…