- Conduid
- Marketplace
- #threat-modeling
MCP servers tagged threat-modeling
28 live MCP servers tagged "threat-modeling", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with threat-modeling.
Security Checklist
A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.
Stride Gpt
An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
Threat Composer
A simple threat modeling tool to help humans to reduce time-to-value when threat modeling
Mitre MCP
A Model Context Protocol (MCP) server that provides tools for working with the MITRE ATT&CK framework using the mitreattack-python library and the official MCP Python SDK.
SecuritySkills
Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Codex CLI, OpenClaw, Kiro.
Security Checklist
MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a clear, actionable baseline for…
Security Framework MCP
Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping
Guardian Agent
Local workstation and network security with ContextCypher diagrams, threat analysis and GRC. Use standalone or through scoped MCP, CLI and HTTP interfaces. Windows, macOS and Linu…
Secure Sdlc Agents
A team of Claude Code sub-agents that enforce security across the full SDLC, from ASVS requirements and threat modelling to SAST triage, IaC review, compliance attestation and rel…
Threat Lab
A safe local red-team and readiness lab for Model Context Protocol security.
AWS Security Agent Claude
AWS Security Agent for Claude Code, adapted from the Kiro power. Code scan, diff scan, threat model, pentest and findings remediation, in English and Portuguese.
Stateless Threats
Deliberately vulnerable local threat lab for Stateless MCP, Stateful Trust at MCP Dev Summit Toronto: task authorization, tenant boundaries, and cancellation evidence.
Sec Recon Agent
Type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic…
Agentic AI Security
Security analysis of MCP ecosystem – threats, defenses, benchmarks, and agent interoperability.
Agentic AI Security
Security analysis of MCP ecosystem – threats, defenses, benchmarks, and agent interoperability.
AgentNull
AgentNull: AI System Security Threat Catalog + Proof-of-Concepts. Collection of PoCs for using Agents, MCP, and RAG in bad ways.
Attestral
Open-source security scanner for MCP servers and AI agents: finds prompt injection, tool poisoning, and excessive agency, and models the cloud your agents can reach. pip install a…
Ground Control
Context-Aware Autonomous Engineering and AIOps Prototype
Threat Shield
ThreatShield is a unified, AI-powered threat modelling platform from zeroshield.ai. It is an advanced threat modelling tool built to perform threat modelling for classic applicati…
Hardened
A deliberately small MCP server demonstrating security hardening against the OWASP MCP Top 10, with a test suite that proves the defenses hold.
Best Practices
Security-first MCP portfolio tracking spec revision 2026-07-28: a policy-enforcing gateway, an Ed25519-signed registry, STRIDE threat models mapped to the OWASP MCP Top 10, and a…
Soc Triage Agent
Local defensive AI agent that triages synthetic SOC identity alerts (LangGraph + MCP), with a governance-as-code layer - security manifest, control matrix (OWASP LLM Top 10 / MITR…
Two Stage Sanitization Architecture
Two-stage security architecture to mitigate indirect prompt injection attacks in rich content via privilege separation
Coras MCP
MCP server that draws CORAS risk and threat diagrams for the SINTEF Threat Modelling Tool (bundled). Describe a risk picture in words, get a .dgx the 2007 editor opens natively.
Hades Blackwatch
Hades Blackwatch is an advanced AI security and code-review skill for auditing LLM, agentic, MCP, and full-stack applications using OWASP LLM/Agentic Top 10, AIVSS, MITRE ATLAS, N…
ThreatModel
Open-source, MCP-first threat modeling that proposes and sandbox-validates the fix — not just the report. Apache-2.0."
Agent Boundary
A deterministic tool-call broker that bounds what an LLM agent can actually do. Indirect prompt injection is assumed to succeed; authorisation lives outside the model.
Juice Shop Security Lab
OWASP Juice Shop security lab: Claude Code skills, MCP servers (Snyk, Miro, Context7), subagents and scan reports