MCP servers for security scanning, vulnerability assessment, and compliance. Integrate security tools and services into your AI workflow.
492 servers available
Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
Rust MCP server and CLI for Apprise notification fan-out across dozens of delivery backends.
Rust MCP server and CLI for Arcane Docker and container management.
Rust MCP server and CLI for Gotify push notifications and message management.
Rust MCP gateway with Code Mode, authentication, setup, logs, CLI, HTTP API, and operator web UI.
Apprise notifications over MCP and CLI with authenticated stdio and HTTP transports.
Arcane Docker and Compose management over MCP and CLI with authenticated stdio and HTTP.
Gotify notifications and app, client, and message management over MCP and CLI.
Tailscale device, route, DNS, key, user, and ACL management over MCP and CLI.
Rust MCP server and CLI for UniFi Network controller operations.
RMCP runtime for provider-backed agents with CLI, REST, HTTP MCP, plugins, and scaffold support.
Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.
Rust MCP server and CLI for UniFi Network controller operations.
Rust MCP server and CLI for Unraid GraphQL, NAS, Docker, VM, and storage workflows.
Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.
Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.
Presentations.AI MCP server — create designed slide decks from a topic, text, or document.
Free IPv4 lookups against a distributed attacker-observation corpus.
E-signatures: send, track, remind, void and download envelopes; templates and reports.
Safety-first MCP server for Discord with privacy-safe reads, audits, and reviewed administration
MCP server for the SCF Controls Platform — 187 tools for controls, evidence, risk, and TPRM.
OAuth-enabled MyMLH MCP server for accessing MyMLH data.
Extract, search and tag any document: invoices, receipts, contracts, templates. OAuth or API key.
An MCP server for Arcjet - the runtime security platform that ships with your AI code.
Connect to Atlassian Jira, Confluence, Loom, and more to search, create, and manage your work.
Your whole business as one MCP server: analytics, CRM, SEO, ads, revenue. Scoped per data class.
Official Checkmarx MCP Server
OAuth scope approvals and consent receipts for remote MCP servers.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Free catalog and 2,048-character secret-scan preview for Fabler's x402 agent tools on Base.
Every agent action watched, every money-moving one gated, every verdict independently verifiable.
One MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.
Local-first MCP that scores your codebase's build readiness. Your code never leaves your machine.
Run a Japan proxy-buying business from your AI: inventory, orders, buyers, shipping fee split.
Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans
Email marketing: campaigns, audiences, contacts, segments, templates and reports.
Look up independent trust ratings and security, maintenance, and adoption evidence for MCP servers.
Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.
Production-safety audits for AI-generated code, with a fix for every finding.
Social intelligence for 10 networks: read posts and trends, monitor brand mentions, then create.
Social intelligence for 8 networks: read posts, creators and trends, then create from them.
Read-only AI access to Osboon business card analytics, viewers, links, connections and contacts.
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
Plan, book, and manage business travel.
Your AI meets theirs before you do — private matching for needs, offers, and opportunities over MCP.
Find free-to-use stock photos by words, by image or by similarity; every result names its licence.
The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.
Generate AI UGC video ads from any product URL — avatars, voiceover, OAuth Connect.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
A secret store for AI agents: the agent never sees the plaintext.
Personalised developer security learning pathways from SecDim's challenges and courses.
Search Shopify stores, enrich domains, and reveal approved contact channels.
Person-owned AI memory that learns, not just stores — portable context for any MCP client.
Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.
Detects leaked secrets (API keys, tokens, private keys) in source code.
One verified household record for your AI: accounts, holdings, fees and Score. Can't move money.
Local-first MCP server: version-correct library docs, code map, and offline drift for your repo.
Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.
Audit apps against App Store, Google Play and Google OAuth review rules; get the required docs.
Encrypted-first embedded database with vector search and agent memory, exposed as MCP tools
MCP server connecting AI agents to 100+ apps (Gmail, Slack, Notion, GitHub) via one-click OAuth.
Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.
Package intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.
Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.
Read backups and Fire Drills, and ask for a backup or a drill. No tool deletes a backup.
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.
Hosted login, teams, billing and feature flags for your SaaS app, set up by your AI assistant.
Local crypto inventory for developers and AI agents; coverage and limits inside the CBOM.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.
Read-only MCP server for Trino: queries run as the user, and Trino's own policies decide.
The static analyzer your AI agent reads — fix-ready, machine-readable scan reports over MCP.
Local-first PHI detection for source code, LLM prompts, logs, and analytics
Email MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection
Secure MCP server framework with 23 security layers and ML threat detection. Zero deps.
macOS computer use with the guardrails on: passwords blacked out, writes need consent, all logged.
Check text for leaked credentials before an agent writes or commits it. Runs locally.
MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.
MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.
Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.
Security proxy that wraps MCP servers with real-time monitoring and policy enforcement
Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
Read-only queries over Aileron audit journals: verify integrity, search recorded tool calls
Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.
Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
Google Search Console MCP for analytics, indexing, sitemaps, and SEO diagnostics.
Connect AI agents to multiple Shopify Admin stores for reports, comparisons, and guarded updates.
Search, move, mark, delete and draft your real mail over a self-hosted index.
ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.
Attestable memory, truth, provenance. Hybrid Ed25519 + ML-DSA-65 receipts; USDC settlement on Base.
MCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.
Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2
Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)
React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
Permission gateway for AI agents: scoped MCP endpoints over 27 services, audited and revocable.
Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner
Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner
nmap - Network Port Scanner & Service Detection
Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.
Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker
AI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.
A secured scoped SSH MCP server for executing safe read-only diagnostic DevOps / SysOps commands
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.
Governed MCP workflows with policy validation, findings tracking, and review gates.
Identity-scoped schema selection for text-to-SQL. Returns only the tables the caller may read.
Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
Audits any website for AI agent readiness and safety, scoring prompt injection risk and llms.txt.
CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).
Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.
Agent-native collaboration network: orchestrate a team of long-running agents from any MCP client.
Governed MCP: agent audit, provenance, deterministic checks, and receipt-backed FragGate execution.
Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
Offline deterministic engineering-trust certificates for repositories, with no telemetry.
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Multi-account tool broker for AI agents — CLI and MCP.
Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.
Read-only breach intel, full history 2007-today: reports THAT an org was breached, never the data.
iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.
Zero-knowledge encrypted storage for humans and AI agents. Client-side AES-256-GCM, EU-hosted.
Pre-transaction token risk checks for autonomous agents on six chains. Read-only; paid via x402.
MCP server to mount and unmount VeraCrypt containers with secure stdin password handling.
Multi-zone MCP server for GKE/EKS/AKS: Python tools from git, NeMo guardrails, SSO, autoscaling.
Self-hosted MCP for controlled AI development and staging without a general-purpose remote shell.
OAuth 2.1/OIDC resource-server reference for secure MCP authorization
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
MCP server for querying VirusTotal API with comprehensive security analysis tools.
Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.
Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.
Reddit Ads API v3: campaigns, ad groups, ads, reports, plus working writes with safety tiers.
Disposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.
MCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.
MCP server for credential isolation — bots use passwords and API keys without seeing them
Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.
Authorizes MCP tool calls against a session policy, not one call at a time.
An MCP server that provides LinkedIn & Reddit data
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
Cybersecurity Ai MCP Server by MEOK AI Labs
MITRE ATLAS — Adversarial Threat Landscape for AI Systems. Tactics + techniques for attacking AI...
Owasp Agentic MCP Server by MEOK AI Labs
Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...
Scam Detector MCP Server by MEOK AI Labs
Security Scanner Ai MCP Server by MEOK AI Labs
Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.
WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI
Local encrypted memory for AI: hybrid search, 8 MCP tools, one file you own. Free, no cloud.
Domain overviews for security and sales: registration, infrastructure, and risk signals.
Unofficial Google Ads MCP for campaigns, keywords, budgets, and gated mutations.
Privacy-first unofficial Google Health API v4 MCP server for health, sleep, activity, HR agents
Local-first TikTok Content Posting API for AI agents: OAuth checks, dry-run and live uploads.
Agent-first YouTube Shorts uploader: dry-run validation, OAuth checks, synthetic-media metadata.
Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.
Real-time semantic security for AI coding agents and MCP tools
Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.
Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
Translates a lockfile diff into a human-readable upgrade plan for npm, PyPI, and GitHub Actions.
Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
Persistent shared memory for AI agents, with verified writes and a transcript tier.
A security-focused MCP server for self-hosted n8n Community Edition.
Official DSers MCP for dropshipping: import, edit, price, and publish products to Shopify and Wix.
Agent 运行时全栈拦截: allow/deny tool calls, Ed25519 receipts, blocks RCE, theft, SSRF, injection. stdio.
Safe, self-hosted ZAP operator for guided AI security scans and reports.
Self-hosted MCP gateway. Turn any REST API into MCP tools via YAML (DADL). Authz, audit, policies.
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.
MCP server for Reolink cameras: snapshots, device state, AI detection, PTZ, and deterrence controls
PostgreSQL MCP wrapper with .env credential mapping, tool selection, and safe read-only defaults.
MCP marketplace with 8,845 security-audited skills. 9-layer Sentinel audit + ATC trust cards.
MCP server for Bags on Solana: token analytics, trade quotes, and gated write operations.
Structural similarity-based code filter. Stops malicious code pattern reaching execution tools.
Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.
Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.
Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Guardian layer for AI agents: identity, secrets, audit via MCP.
Read-only OctoWatch DLP Cloud MCP: risks, idle time, productivity, monitoring.
Deterministic payment policy guardrail for AI agents - budgets, allowlists, signed mandates.
4,441 pre-production checks: security, performance, scale, integrations, post-launch.
Read Proton Mail, extract bounded attachment text, and create explicitly confirmed drafts.
Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.
Real-time Python package and vulnerability data for AI coding agents.
Send a file to a person as a one-time, encrypted, auto-deleting download link.
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents
Execution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.
Your office's procedures inside Claude or ChatGPT - verified citations or an honest refusal.
AI job search MCP — fact-checked jobs, application tracker, alerts. ChatGPT, Claude, Cursor.
Encrypted local ledger of structured user state, shared across every MCP-aware AI tool.
A verified dependency-audit verdict any AI agent can call over MCP, not a raw scan.
MCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1.
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Draft, translate and update Help Center articles and manage Zendesk tickets from your AI assistant.
Full-featured ADB MCP server — 209 tools across 49 modules, from UI to baseband.
Policy review and purchase discovery for AI-agent commerce actions.
Local-first AI memory engine — 4-tier memory, people graph, Bayesian beliefs. Encrypted, 62µs.
Security scanner for AI agent skills and MCP servers
Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM.
Check if an MCP server's tool definitions changed after approval, from a signed public log.
MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.
Measure MCP servers, pin the approved tool surface, refuse calls to tools that changed. Local-first.
AWS security scanner with attack chain detection, IAM privilege escalation, and fixes
Precision-first security scanning for Model Context Protocol servers.
Credential isolation for AI agents. Inject secrets at the network boundary.
MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.
Read/write Google Tasks: create, update, complete, delete, move tasks and lists, with due dates.
Deterministic security layer your AI can't be. 579 rules, 39 tools, CLI + doctor + host audit.
Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP.
Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.
Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.
EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.
Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score
Routes each task to the few skills, MCP servers and tools that fit it.
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
OAuth MCP gateway. SI proxy with model aliases. Grok subscription as OpenAI-compatible API, no key.
Memory for any Ai: remembers across sessions, enforces your rules before actions, reviews the work.
MCP wrapper for Yad, a local browser-automation companion, for coding agents.
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic.
Open Identity Standard for AI Agents — DID, Agent Cards, delegation, reputation, payment & escrow
OS keychain secrets for AI coding agents, over MCP.
Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
Govern your backend control plane from your AI agent - signed, human-approval-gated.
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
Stop shipping agents on vibes. Score every agent output for quality, safety, and cost.
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)
Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.
Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
Query a verified document collection: passages that answer a question, with their source.
Catch up on Slack without reading it. Unreads, threads, search. Browser-session or hosted OAuth.
Standup notes from merge request state, with the failed job's error lines.
Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
Pre-tool policy enforcement + JSONL audit for AI agents. Apache 2.0.
Give two agents on two machines the same encrypted folder. P2P, no cloud, only read bytes move.
45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.
Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.
An open-source API for collecting and managing contacts and signups.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.
Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.
CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.
Administers Linux via typed, approval-gated actions with an Ed25519-signed audit trail.
Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.
Verify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows.
Microsoft Outlook MCP server — 20 tools for email, calendar, contacts, and settings via Graph API.
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).
AI Agent Firewall. Enforce signed authority before consequential actions. Free API key required.
SSH & Kubernetes access broker for AI agents; the model never touches a credential.
Bounded local MCP access to one approved repository for AI read/search and structured handoffs.
Control plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.
MCP server for the ESET ecosystem - Connect cloud + PROTECT On-Prem, multi-tenant, RO/RW
Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
Real-time Firestore schema context for AI coding agents. Stop hallucinating field names.
Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
MCP server demo — tickets, schema discovery, auth, and PII gating. stdio + HTTP.
Runtime proxy for MCP security, cost governance & audit
Explain any lockfile or workflow-pin change: bumps, vulns, ages, deprecations — 61 formats
Durable agentic memory, encrypted at rest. Fully offline: no network, no API key, no cloud.
Load OpenAPI 2.x/3.x specs and expose generic tools to discover and call multiple APIs.
Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.
Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement
Security scanning and threat detection for AI agents
Branchable LLM history DAG + encrypted context capsules agents can save, restore, and crypto-shred.
Local MCP tools for secret status and guarded deployment. Values never reach the agent.
Official Lumail email marketing MCP for campaigns, subscribers, and workflows.
Zendesk MCP server for Claude Code and other MCP clients
WASM sandbox for MCP tools. WASI-isolated, fuel/memory/I/O capped, attested.
MCP server for secureFlows (secure-flows.com). Alias of io.github.michal-lefler/secureflows-mcp.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
SQL over real-world data — FDA, SEC, blockchain, genomics, CVEs, and more. No config.
Use Strava's official MCP from Codex and other local stdio clients without a developer app.
OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.
Code security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.
Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.
MCP server for CTFd v3: list challenges, submit flags, and query scoreboards via AI agents.
Solana token safety for AI agents — rug-pull, honeypot & Token-2022 trap detection before you buy.
Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
Let AI agents use secrets without seeing them: inject into a command, redact the output.
Local, deterministic review of Git changes: weakened tests and CI gates, risky flows, blast radius.
Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.
AI agent and MCP diagnostics, API/auth/webhook repair, JSON validation and bounded recovery.
Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.
Local secret & credential checks for AI-assisted dev — runs on your machine, results redacted.
SQLite MCP server with OAuth 2.1, HTTP/SSE, 122 tools, and smart tool filtering
Serve a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.
Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale.
Let your users work with their own data through an AI assistant, limited to what they can see.
MCP server for GreyNoise API - Check if IPs are internet background noise or targeted attacks
Verify x402 payment endpoints before an AI agent pays: scam scan, on-chain checks, trust scores.
Generate Ethereum wallets with BIP39 mnemonics, HD paths, vanity addresses, private key backup
Pay-per-use IBM Granite AI via x402: chat, code, embeddings, forecasting. USDC on Base or Solana.
Encrypt/decrypt Ethereum keystore JSON V3 with scrypt/PBKDF2 for secure cold storage
Trade Papertrade BTC and ETH perps from Claude, ChatGPT, Codex, Cursor and any MCP client.
Sign Ethereum messages - EIP-191, EIP-712 typed data, Permit2, signature verification and recovery
3D avatars, embeds, glTF tools, agent memory, and on-chain agent identity from three.ws.
Turn text or an image into an animation-ready 3D model (GLB): generate, rig, animate, retexture.
Free text/image → 3D: generate, rig, avatar-ify, and refine GLB models. No auth, no payment.
Give your AI agent an x402 wallet: discover and pay for services in USDC, or earn from your own.
Free pump.fun and Solana token discovery and on-chain analysis tools, by three.ws.
Discover and price paid agent services across the live x402 network, by three.ws.
Build and sign Ethereum transactions - EIP-1559, gas estimation, RLP, ERC-20 transfers
Validate Ethereum addresses, keys, checksums, keccak256 hashes, function selectors, ENS
Pay any x402 endpoint on the open web: auto-paying bridge with Bazaar discovery and spend caps.
Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call
Extract regular expressions from code, each with a ReDoS safety verdict.
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
Find the Unicode that hides meaning: bidi controls, invisibles, homoglyphs and mixed scripts.
Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
Aggregate multiple MCP backends behind a single stdio endpoint with namespaced routing.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
Zero-trust MCP security proxy with policy enforcement, PII scrubbing, approvals, and audit trails.
Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.
Who can still change this EVM contract, and what can they do to holders?
AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.
Zero-auth research MCP: web, academic, finance, news, weather, macro, social, SEC. No keys.
Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
12-layer security configs for AI coding agents. Autonomous purchase via x402 (USDC on Base).
Who can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).
The bridge from K2 agents through Wrangler to your master AI - safe, approval-gated Cloudflare ops.
Pin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.
Security-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools
Read-only MCP server for the Monzo banking API: OAuth, local transaction cache, spending analysis.
MCP server for the Withings Health API with OAuth, local SQLite cache, and trend analysis.
Typed on-prem knowledge graph for AI agents — read-only for humans, write-only for agents via MCP.
Reading order for big pull requests: what to read first, what can wait. Offline, no model.
Persistent, encrypted, deterministic memory for AI agents. Local-first, 173 canonical tools.
Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Zero-knowledge persistent memory for Claude — encrypted, semantic search, EU hosted.
Read-only IBM MQ diagnostics for AI agents. Cited root cause, never destructive.
MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.
MCP server for creating and managing SOPS-encrypted secrets
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Zero-dependency Web Crypto & AI Agent MCP Server (AES-256-GCM, RSA-4096, PQC, Signatures).
Human-in-the-loop document review: an agent pushes a draft, a person comments, the agent revises.
Portable workspaces for AI agents: one encrypted link any agent can read and write
Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.
Open-source RevenueCat alternative: 38 tools for subscriptions, customers, webhooks and revenue.
MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows
Community extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage
Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more
MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops
HTTP client, JWT decode, header analysis for AI agents
License check, outdated deps, security for AI agents
MCP server for encrypted SQLite databases (SQLCipher 4) - Works with MoneyMoney, KeePass and more
MCP server for SQLCipher 4 encrypted SQLite databases with full CRUD operations and query support
Scan code for Korean compliance risks — PIPA/개인정보보호법, Network Act, Credit Info. Not legal advice.
Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports
Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.
Security, cost, and health governance proxy for MCP infrastructure
Wraps the ShimGuard CLI as a single generic MCP tool for agent-shim provenance checks.
Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.
Wraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.
Scan, enumerate, and risk-score every MCP server configured on your machine.
Check the danger grade of any public MCP server before you connect.
Protect your AI agents and IDEs from malicious open-source packages.
Local-first memory for AI agents that reaches backward to find a failure's root cause.
Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.
Corrected 2.0 preview: local tool gate with fixed deadlines, read-only setup and denial reasons.
Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.
Open-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.
Let LLM help you achieve your regression analysis with Stata
Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.
Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.
Security scanning for websites, public repositories, and Open CLAW skills.
Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit
Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.
Stdio-to-HTTP gateway — connects MCP clients to remote HTTP MCP servers
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
Email infrastructure and authentication for developers: domains, inbox routes, auth apps, deploys.
MCP tools for testing mobile and TV apps on iOS simulators, Android phones, and Apple/Android TV.
Grade a site's security headers with fixes and a badge; read logs or code for the defender.
Move files and notes between a coding agent and your Zas channels, encrypted here or via Directo.
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.
Injects secrets into shell commands at exec time; plaintext never reaches the LLM context
ZKshare stdio MCP: store/prove/share, semantic search, sandbox proxy to HTTPS /api/v1/context.
Deterministic guardrail your coding agent runs on itself: diff-scoped findings, zero LLM tokens.
Merged agent permission rules: which settings file wins, and which rules your client ignores.
MikroTik RouterOS over the binary API, addressing rules by real .id not list position.
Check messages, npm packages and crypto addresses before acting. Read-only scanner tools.
Web scraping API for AI agents.
Read-only SQL queries and schema inspection for IBM Db2 for i over ODBC, JT400 or Mapepire (SSH).
Read-only Postgres/Supabase RLS audit with a rolled-back probe that proves who can read which rows.
Static analysis scanner for MCP server code and multi-tenant SaaS applications.
Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.
Audit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.
Pre-execution security for AI agents on Base: guard token/tx/address + per-agent spend firewall.
Web search, agentic search, news, page retrieval, sitemaps, and trending topics through Search1API.
Local-first MCP security scanner and CLI for AI-generated applications.
A local, permissioned MCP agent for authorized developer workstations.
Self-hosted signing wallet: DIDs, agency grants, and task mandates for AI agents.
Three-layer firewall for MCP: content, egress and action policy. Proxy or server.
Guest check-in, SES.HOSPEDAJES status, and booking creation for Spanish vacation rentals. No PII.
Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.
Vet third-party AI agent extensions + agent-config files (AGENTS.md, .cursor/rules, CLAUDE.md).
Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.
KYA MCP gate: evaluate, ingest, request approval. Sole PEP is Shield.
Threadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs
Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.
The dependency bloodhound for AI coding agents. Zero API keys, zero config.
Machine-Readable Company Profiles: search, read and compare any company's Trust Profile.
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
Self-hosted WordPress MCP server with per-capability permission controls and a full audit log.
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.
kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.
Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.
Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.
Deterministic authorization and security guard for AI agent actions with signed receipts.
Agent-native X (Twitter) posting as one MCP server; every post clears a server-side guardrail.
Charter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.
Query trust scores for MCP servers and agent skills. Check if a tool is safe.
One MCP server holding a live session with every client's account at once.
Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.
VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
Memory for AI agents: persistent L1/L2/L3, web-search savings, thread memory.
VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
MCP server for Front: conversations, contacts, messages, tags, and inbox workflows.
Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.
One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup.
The internet's infrastructure graph for AI agents - 46B nodes and edges, free trial via 2 HTTP calls
One firewall and password manager for all your AI coding agents' MCP servers and secrets.
Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model
MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.
MCP server for Huntress — accounts, organizations, agents, incidents, and reports.
Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.
MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.
MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.
MCP server for Huntress — accounts, organizations, agents, incidents, and reports.
Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.
MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.
End-to-end-encrypted, sovereign inbox for AI agents. The server only ever sees ciphertext.
Cybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.
Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
CLI tool and MCP server that tests MCP servers for spec compliance
npm registry MCP server — package intelligence, security audits, dependency analysis
Tailscale MCP server for managing your tailnet from AI assistants
Read-only MCP server for the OrchestKit docs: full-text search + Markdown fetch. No auth.
AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.
AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.
Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.
Official PicSee MCP server for short links, link management, click analytics, and optional OAuth.
Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.
MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.
Ed25519-signed MCP tool manifests + spawn attestation. Layer-2 supply-chain hardening.
Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.
Store, retrieve, and pin encrypted files on IPFS via MCP tools for AI agents and workflows
AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.
Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.
Read-only market data for agents: prices, fundamentals, filings, options, credit, private markets.
Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
Send and read end-to-end encrypted documents. Your private key never leaves your machine.
Privacy-focused email: domains, DNS verification, aliases, SMTP sending, mailboxes and calendars.
Give AI agents secure access to ZERNO project briefs, tasks, and context over remote MCP.
Issue, rotate and revoke scoped API-key passes for 25+ providers — the agent never sees a real key
Images, video & speech: Nano Banana, GPT Image, Veo, Omni, Wan, Grok, Gemini TTS. Crypto or card.
Ask your AI about bank accounts, spending, debts, holdings, and investment activity.
68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.
