- Conduid
- Marketplace
- #tool-poisoning
MCP servers tagged tool-poisoning
42 live MCP servers tagged "tool-poisoning", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with tool-poisoning.
Glyph
🔮 MCP security scanner — find tool poisoning, credential leaks, and insecure transports in AI agent configurations
Cross Code Organizer
Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scannin…
Panguard MCP Proxy
MCP Proxy — runtime interception for AI agent tool calls using ATR rules
Audit Tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pu…
Fence
Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol servers.
DescriptorPin
Defensive integrity monitor for MCP tool descriptors: pins canonical hashes and reports mutation, shadowing, poisoning, and stdio transport risk.
Security Inspector
Explainable static security analysis for MCP tool metadata, including tool-poisoning indicators, schema drift, and suspicious capabilities.
scan-mcp
Static security scanner for MCP servers — detects tool poisoning, injection, secrets, Dockerfile and dependency issues.
Agent Audit Kit
Static scanner for MCP-connected AI agent pipelines. 332 rules across 14 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to…
CodeOrion
MCP server for AI coding agents (Claude Code, Cursor, Cline, etc.): verify packages before installing, assess MCP servers before adding them, scan for secrets, audit agent configs…
Mcpguard
Security scanner for MCP servers — detect tool poisoning, malicious code patterns, and supply-chain risks before your AI agents execute them.
Vigile Scan
Security scanner for AI agent tools — detect tool poisoning, permission abuse, and supply chain attacks in MCP servers and agent skills
Decoy Scan
Security scanner for MCP server configurations. Finds risky tools, vulnerable packages, and suspicious servers across Claude Desktop, Cursor, VS Code, and more.
Warden Gateway
Warden — an open-source MCP gateway. A control plane for AI tool access: security screening and observability for Model Context Protocol servers.
Toolpoison
Security scanner for MCP servers. Detects tool poisoning, prompt injection hidden in tool descriptions, leaked API keys, and supply-chain risk across Claude, Cursor, VS Code, Wind…
Trust Registry
Runtime + semantic trust registry for MCP servers - catches tool poisoning and scope creep, $0 infra (local LLM via Ollama)
Mcpcustoms
MCPCustoms is the customs checkpoint for MCP tool calls: a zero-dependency TypeScript runtime semantic firewall that inspects every Massive Intelligence (IM) agent tool call befor…
Guardbench
Check your MCP servers for tool poisoning and rug pulls, and benchmark MCP security tools under verifiable conditions.
Fsck
Integrity check for MCP server configs audits Claude, Cursor, VS Code and Windsurf agent configs for secrets, injection-prone args, tool poisoning and dangerous capability combos.
Vouchq
Private trust registry for MCP tools — approve once, pin cryptographically (박제), detect rug-pulls forever. Self-hosted, AGPL.
Smallprint Tools
Small Print's open tools: the disclosure lab, and soon the command, the MCP server and the plugin
Scrutiny
Static and semantic security scanner for MCP servers: unpinned packages, rug pulls, tool poisoning, shadowing and toxic flows. Trained model, SARIF output, zero dependencies, full…
Vamp MCP Audit
MCP server security auditor — tool poisoning, ASCII smuggling detection, prompt injection, OWASP Agentic Top 10. First OSS tool for MCP security.
IntentProbe
Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisoned MCP servers, skills, and packages before install.
Toolfence Site
MCP security scanner — Toolfence scans any Model Context Protocol server and reports the risks your AI agents inherit: tool poisoning, prompt injection, tool drift, over-broad sco…
Agent Trust Preflight
Free MCP + AI agent trust preflight: 20 practical checks, safe examples, VS Code tooling, drift review and authority analysis.
Eczid MCP Security Toolkit
Free MCP security checks, examples and developer tools for understanding MCP configuration, tool exposure, change and runtime trust posture.
Sunglasses
Sunglasses for AI agents. Protection layer + neighborhood watch.
Deconvolute Demo
Live PoC: MCP attacks that compromise AI agents mid-session and how to block them in a few lines of code.
Security Patterns
MCP security patterns — 10 production implementations mapped to OWASP MCP Top 10. Prompt injection, credential isolation, HITL governance, session recording. Working attack demos…
Pin
Tool-integrity pinning for MCP. Pin what your agent approved; block it when it changes.
Core Defense
7-phase security proxy for MCP agents. Defends against tool poisoning, description-code inconsistencies, path traversal, and authentication attacks. 115 tests.
Signed Manifests
Ed25519-signed tool manifests for MCP. Stop tool-poisoning and rug-pull attacks with cryptographic verification.
Defense Bench
Vendor-neutral benchmark measuring how MCP security proxies/gateways DEFEND against 22+ attack vectors — crosswalked to NIST AI RMF & OWASP LLM/Agentic Top 10. CI-gated, reproduci…
Injection Lint
Semantic prompt-injection & tool-poisoning linter for MCP servers. Precision-first, 100% local — tells real injection apart from legitimate tool descriptions.
Trifecta
Find and block the lethal trifecta that forms across your MCP servers.
Deconvolute
Policy-as-code enforcement and observability for MCP tool calls. Wraps AI agent sessions with cryptographic integrity checks, argument-level CEL policies, and a full audit trail.
Contextguard
Zero-trust governance middleware for Model Context Protocol deployments
Mcpgw
Firewall for MCP servers. Policy enforcement, threat detection, PII redaction, audit logging, and real-time dashboard.
Mcpguard Go
mcpguard-go: local AI agent security scanner (Go, zero-dep single binary)
State Of MCP Security
Reproducible security audit of MCP servers — 75% of scanned servers exposed a medium+ hardening issue to AI agents. Round 1: official reference + popular hosted servers.
Heldfast
You approve an MCP server. Heldfast records what you approved. Later it tells you what moved, and guard refuses the rest.