- Conduid
- Marketplace
- #security-scanner
MCP servers tagged security-scanner
134 live MCP servers tagged "security-scanner", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security-scanner.
Skillxray
Scan an AI agent skill for prompt injection, hidden Unicode, dangerous commands, and leaked secrets before you install it.
Skilltest
SkillTest: test framework and CI gate for AI agent skills (SKILL.md) — the engine behind skillemall.ai
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Ccs Conformance Vectors
Public conformance test vectors for CCS (Correctover Conformance Shape) — signed, tamper-evident receipt fixtures for verifying AI agent runtime security implementations.
Skil
Vendor-neutral security, verification, and enforcement framework for AI agent skills
Vibe Scanner
Read-only security scanner for Next.js/Supabase repos and live sites, with terminal, JSON, CI and MCP output.
Security Auditor
It's a Python-based CLI security scanner built specifically to audit MCP (Model Context Protocol) servers — the integration layer that connects AI assistants like Claude to extern…
Detector
Safety check for MCP servers: scan AI add-ons for security, reliability and quality problems. Web app, CLI and GitHub Action. Passive by default
Mcptrustchecker
Local-first, deterministic security scanner for Model Context Protocol (MCP) servers. Cross-tool toxic-flow analysis, Unicode-smuggling decode, prompt-injection & supply-chain det…
Gateway
Security gateway for Model Context Protocol (MCP) traffic - logging, auditing, and scanning
Shield
AI-powered security scanner for MCP servers. Tests against the OWASP MCP Top 10 — prompt injection, tool poisoning, SSRF, and more — using a LangGraph attack agent.
Trust
Preflight security scanner for MCP servers — map capabilities, scan install command, code, dependencies & metadata, and get an evidence-based APPROVE/BLOCK decision. CLI + GitHub…
Guard
Adversarial fuzzer for MCP servers — dynamically break Model Context Protocol endpoints. Shell injection, SSRF, overflow, type confusion, prompt injection probes. Zero-dep Python…
Mcpscan
Local CLI to discover shadow MCP servers on your local network & audit authentication status. Zero telemetry, local-only.
Golf Scanner
Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more
Nsauditor AI
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.…
Perufitlife/web-exposure-mcp
only.
IntentProbe
Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisoned MCP servers, skills, and packages before install.
Skillsync MCP
Provide an MCP server that enables seamless integration and management of SkillsMP data with Node.js environments supporting Model Context Protocol.
Homescan
MCP server for home network discovery and security scanning
Toolfence Site
MCP security scanner — Toolfence scans any Model Context Protocol server and reports the risks your AI agents inherit: tool poisoning, prompt injection, tool drift, over-broad sco…
Moneypath
Find payment logic flaws in Razorpay and Stripe checkouts - client-trusted amounts, rupee/paise bugs, unverified webhooks
VibeSafe MCP
MCP server (not a Claude Code Skill) for the VibeSafe security scanner — scan code, live URLs and run a Launch Check from Claude Desktop, Claude Code, Cursor, Windsurf or any MCP…
SecScanMCP
Comprehensive security scanner for MCP (Model Context Protocol) servers. 12+ analyzers, 117 YARA rules, ML-powered threat detection, dual scoring system. Detects prompt injectio…
Sunglasses
Sunglasses for AI agents. Protection layer + neighborhood watch.
SkillGate
Pre-merge and pre-install trust checks for AI-agent skills and MCP configurations. Scan capabilities, detect risky changes, and block unapproved agent behavior in CI.
IANUA Broker
Local-first, offline-by-default security posture scanner for MCP servers and local AI-agent setups (CLI: mcpscan).
Nightward
Local-first TUI for auditing AI agent state, MCP config, and dotfiles backup safety
Vulnerability Health Scanner
Free MCP security scanner — finds risks in your AI agent setup in seconds
Mcpnuke
MCP red teaming & security scanner — enumerate, probe, and exploit Model Context Protocol servers
Bastyn Scan
Static analysis for AI and agent code: Python, TypeScript, JavaScript, MCP manifests, and dependency CVEs.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Trustlint
Security contract testing, tool-poisoning detection, and drift gates for Model Context Protocol servers.
Safe MCP Config
Zero-dependency CLI that catches risky MCP config patterns before they leak into docs, issues, repos, or shared setups.
Bedrock Security MCP
ARCHIVED: development moved to github.com/AUAggy/agent-sec-scanners (packages/bedrock). npm package unchanged. MCP server + CLI auditing AWS Bedrock security posture: IAM, logging…
Ccs Integrations
Framework-native adapters for CCS (Correctover Conformance Shape) cryptographically signed runtime receipts — Ed25519 + JCS signed audit evidence for AI agent tool calls (Pydantic…
Malskanner
Scan a repo for hidden prompt-injection before your AI agent trusts it — CLI, MCP server & GitHub Action. Run: npx malskanner <repo>. 0 false positives across 5,620 files.
Ardra
Ardra is an all-in-one External Attack Surface Management (EASM) tool that helps identify and assess security risks by automating subdomain discovery, vulnerability scanning, DNS…
Agent Control Plane
Read-only discovery and evidence-backed inventory for AI agents, tools, identities and MCP servers.
AgentCensus
Read-only scanner that inventories AI agents, tools, and credentials already running on platforms you operate (ServiceNow today), maps their dependencies, and flags what's ungover…
Lucinlabs
Static analysis for AI agent tools. Reads the function body, not the tool description.
Noscape
MCP server security scanner. Know what your AI agents are connecting to.
Supplyscan
scan JavaScript lockfiles to detect supply chain vulnerabilities and known exploits
Cloudledger
Multi-account AWS security scanning and infrastructure ledger with Prowler integration, taggable scan history, multi-backend storage (SQLite, PostgreSQL, MySQL, MSSQL), and an MCP…
Agentward
Audit what your AI agents can actually do to your machine. Scans installed MCP servers, skills, hooks and agent configs for leaked credentials, hidden prompt injection, exfiltrati…
YeepForge
Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP serv…
Agent Threat Scanner
面向 AI 智能体生态的安全扫描器，支持检测 Skills、MCP 服务、智能体配置及工具集成中的安全威胁。/ Privacy-first security scanner for AI agent artifacts, including Skills, MCP servers, agent configurations, and tool integr…
Cpe Skills
Comprehensive CPE (Common Platform Enumeration) toolkit — SKILLS, Go SDK, CLI & MCP integration for parsing, matching, generation, storage and NVD integration. ≥91% coverage, 108…
Sentinel Scan Vscode
VS Code extension: inline MCP config security diagnostics (mcp.json / claude_desktop_config.json), free, powered by sentinel-scan-cli's OWASP-mapped heuristics
Correctover Scan
Security scanner for MCP servers and AI agents — detects credential leaks, RCE, SSRF and missing auth against OWASP AISVS 1.0; also scans published JS bundles/npm packages.