- Conduid
- Marketplace
- #ssrf
MCP servers tagged ssrf
31 live MCP servers tagged "ssrf", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with ssrf.
Scanner
Advanced Shodan-based scanner for discovering, verifying, and enumerating Model Context Protocol (MCP) servers and AI infrastructure tools over HTTP & SSE.
fetch
Fetch MCP server for AI agents: HTTP requests, HTML-to-markdown, reader mode, metadata, links, sitemaps, RSS/Atom, robots.txt, SSRF-safe
LLM Shield Proxy
Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-…
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Fetch MCP Server
Fetch MCP server for AI agents: HTTP requests, HTML-to-markdown, reader mode, metadata, links, sitemaps, RSS/Atom, robots.txt, SSRF-safe
witness
Security scanner for MCP servers. Found and disclosed 6 vulnerabilities; 1 fix verified upstream (PR #4226).
Safeguard
🛡️ Security scanner for MCP (Model Context Protocol) servers — prompt injection, credential exposure, SSRF, tool poisoning & source-level credential-handling flaws. pip install mc…
Redstamp
own your agent security — a deterministic, offline firewall for AI agent tool calls. Blocks secret exfil, prompt injection and destructive commands before they run; same call, sam…
Remote Oauth Security
Seven evidence-bounded OAuth trust-boundary security advisories for geelen/mcp-remote, reviewed through 0.1.38.
Ips Le
Extract every IP address, CIDR block and MAC, normalized and classified by scope
apatureai/bastion
y @apatureai/bastion`
Scanner
Security scanner for Model Context Protocol (MCP) server configurations
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
AgentIQ
Agentic API testing and security validation: AI agents that act only through a permission-gated, SSRF-guarded, audited MCP tool layer.
Jakk
Black-box security scanner for MCP servers — deterministic single-call probes, no LLM. 13 probes across 7 surfaces.
Scan Action
The first GitHub Action that scans MCP servers, AI agents & LLM pipelines for security vulnerabilities. 24 checks: tool poisoning, SSRF, prompt injection, DataFlow taint. Results…
CatalogLock
Security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic suppl…
Cybersec MCP
Security-tooling MCP server with SSRF guards, prompt-injection containment and a hash-chained audit log
Prunr
Ultra-fast pre-flight triage API and MCP server for AI web agents — inspect a URL in <100ms and pick the cheapest way to fetch it.
Mcpsnare
Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confi…
Mcpinterlock
Policy firewall and audit layer for MCP tool calls. Fixed an SSRF bypass where hostnames resolving into RFC 6598 CGNAT shared address space (100.64.0.0/10) weren't blocked -- Pyth…
AI Integration Health Check Demo
Demo repo for an AI/API integration health-check freelance service: IDOR/SQLi/secret-logging fixes side by side (broken vs main), zero-dependency idempotency example, audit report…
Patch
Static security scanner for Python MCP server code. Detects shell injection, SSRF, path traversal in @tool functions.
Kimi Code Security Hook
PreToolUse security gate for Kimi Code: blocks secret exposure & SSRF before WriteFile/Shell via correctover-scan (MCP config security)
D Eye
FOSS-first, local-first capability and evidence layer for AI agents. Local MCP server and CLI for safe, cited web access: SSRF-hardened fetch, provenance-tracked research packets,…
LLM Agent MCP Security Lab
Deliberately vulnerable local lab for hands-on LLM agent & MCP security testing; SSRF, path traversal, SQLi, indirect prompt injection, RAG poisoning, stored XSS and each with a S…
Agentic Semgrep Rules
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, us…
Template
Secure MCP server template in TypeScript and Python: stdio by default, optional streamable HTTP behind bearer auth, rate limit and body cap, bound to 127.0.0.1; bounded file and n…
Cybersec MCP
Security-tooling MCP server with SSRF guards, prompt-injection containment and a hash-chained audit log
Agent Security
Skills for coding agents that audit and harden other agents: SSRF gate audit, threat model for agentic spend, MCP visibility audit, signed audit log. MIT.
Audit
Security auditing tool for MCP servers — 10 scanners, CLI & MCP server mode, SARIF output, zero external dependencies