- Conduid
- Marketplace
- #security
MCP servers tagged security
4.8K live MCP servers tagged "security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with security.
Agent Red Team Lab
A custom MCP server which is deliberately vulnerable for security testing / Red Teaming
Agent Skill Guard
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
Cve Lookup
Context for a CVE from EchelonGraph’s CVE Pulse API (CLI + MCP) — CVSS, CISA KEV, EPSS, SSVC, exploit and patch signals, product matching, vendor advisories and the internet-expos…
Vakt
Open-source AST aware code scanner to find your app’s vulnerabilities.
End Of Life MCP
Is this version still supported? EOL dates, latest patch and upgrade target for 470+ products.
Hecate Public
Security scanner and runtime guard for MCP servers and AI agents. Runs entirely on your machine.
Repro Gate
Action-bound authorization and verifiable evidence contracts for MCP tool execution
Asset Gateway
自托管 MCP 资产网关：集中管理 MySQL、SSH、Kubernetes、Jenkins、Git 等资产与凭据，为 AI 客户端提供受控的 MCP 工具入口，含 Web 控制台、授权组与调用审计
Vps Agent Gateway
Scoped, auditable MCP control for a Linux VPS with a non-root Gateway and policy-authorized privileged Broker.
Ccs Conformance Vectors
Public conformance test vectors for CCS (Correctover Conformance Shape) — signed, tamper-evident receipt fixtures for verifying AI agent runtime security implementations.
Agent Authority Check
FOXIFY deterministic authority preflight for MCP servers and AI agents: bind authority, inspect consequence, preserve evidence.
Web Agent Gateway
Local least-authority gateway connecting Web AI clients to user-approved developer resources.
Agentic Iot Command
Governed infrastructure operations control plane for read-only observation, evidence-backed planning, human approvals, agent/MCP policy, and auditable workflows.
Skillscan
Static security scanner for Claude Code skills and MCP servers
Airlocked Agents
Deterministic IaC for a private, self-hosted AI automation stack — untrusted content stays in the airlock.
My OS
Linux distribution with a built-in, local-first AI assistant. A global hotkey opens an assistant that manages files, installs packages, tweaks system settings and controls your PC…
Agent Perimeter
Audit AI coding agent config boundaries: Claude Code hooks, MCP servers, Codex config, AGENTS.md, prompt injection, hidden Unicode, and broad permissions.
Domcp
Isolating MCP servers [Mirror from GitLab]
Praxis Aegis
Trust-layer companion for Praxis: policy guardrails and signing-aware controls.
Clavion
Secure crypto runtime for autonomous agents — key isolation, policy enforcement, and multi-chain transaction management
ClawGuard
AI Agent Memory — Fewer prompts, smarter decisions. Remembers your trust decisions across Claude Code, Codex & MCP. Free & open source.
Argus Detection Evolution
ARGUS: Adversarial Detection Evolution Engine: Red AI attacks, Blue AI defends, on real Splunk data. Splunk Agentic Ops Hackathon 2026 (Security track).
Claude Guard
Security scanner for your Claude Code setup — flags risky skills, hooks, MCP servers & committed secrets. Zero dependencies, offline.
Claude Skills Security
Defensive security audit skills for Claude — tech-stack-keyed and audit-domain-keyed packs for SaaS apps.
Boundary Bench
Deterministic crash tests for agent control planes: paired worlds, hard stops, budgets, scopes, approvals, and hash-linked receipts.
Capbroker
A local, self-hosted capability broker for AI agents -scoped, signed, expiring capability tokens instead of raw API credentials.
Hermes Local Hands
Consent-gated local workspace access for remote Hermes agents
StackRadar
StackRadar: free local dev dashboard + network firewall. Find every repo, run command & open port, catch leaked API keys, see what each app sends online (allow/deny), monitor CPU…
Agent Loop Guard
Local runtime guard for coding agents with loop detection and explainable policy decisions.
Vaultlet
Async encrypted multi-tenant key-value storage for Python, powered by Rust. SQLite, redb and Redis backends.
ChangeWarden
Governed GitHub changes for AI coding agents: policy, independent approval, one-time execution, and verifiable receipts.
Sitelemetry Audit Action
Run Sitelemetry website audits (security, SEO, AI visibility, accessibility, performance, integrations) in GitHub Actions with SARIF output, a job summary and a pull request comme…
Sovereign Security Protocol
Full SSP v13.4.0 source in Portuguese, with bilingual community summaries for application security, secure SDLC, AI agents, MCP, and evidence-based adoption.
Residoo
Find secrets your AI coding agent leaked to disk, watch for new ones, and optionally block a sensitive read before it happens. Free, MIT, zero deps, no network calls by default. O…
Repotify
Thousands of agent skills. The right ones for your repo. Repotify reads the skills developers and AI companies publish on GitHub, checks them for risks and installs the best ones…
Auto Deploy MCP Server
Automatically deploy the MCP server using a CI/CD pipeline with integrated testing and AI-powered security checks.
Pydeno
Run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as…
Claude Skill Vulnerability Checker
Catch sneaky code before it runs — a zero-dependency security scanner for Claude Code skills, plugins, and MCP servers.
Ssha Broker
SSH broker for AI agents: it holds the credentials, enforces per-host policy and records a tamper-evident audit log. MCP server, CLI and Agent Skill in one static Go binary.
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
Approvewarden
Scans any wallet for dangerous ERC-20/721/1155 token approvals and infinite allowances, scoring drainer exposure and emitting revoke transactions.
RouteX
High-performance, stateless web gateway running on Cloudflare Workers with comprehensive SSRF protection, dynamic HTML/CSS rewriting, SPA routing, and optional Daytona compute san…
Myrmion Blackbar Pii Guard
🛡️ PII redaction for Claude, powered by Microsoft Presidio — automatic in Claude Code, on-demand in Claude Desktop.
Agent Trust Broker
IANUA Agent Trust Broker (ATB): identity issuance and Zero-Trust policy enforcement for AI agent fleets — short-lived scoped identities, per-action allow/deny/escalate, hash-chain…
Scrutiny
Static and semantic security scanner for MCP servers: unpinned packages, rug pulls, tool poisoning, shadowing and toxic flows. Trained model, SARIF output, zero dependencies, full…
Aragami
Read-only static posture audit for Tor Browser and Firefox: reports configuration posture and static residue without launching or changing anything. A clean audit is not proof of…
Sshgate
Let your AI coding agent diagnose and fix Linux servers over SSH without giving it a shell. Reads run instantly (kernel-jailed on supported hosts); every write needs one tap on yo…
Strathon
The open-source AI agent firewall — write a CEL policy, block the tool call before it executes. In-process, sub-millisecond. OWASP + EU AI Act mapped.
Aama
Efficient AI workbench designed to keep your mainframe landscape clean.
Skill Security Vulnerability Management
Security vulnerability skill — CVE search, dependency audit, risk scoring, remediation plans