MCP Servers

C

ComplyEdge TrustLint: offline EU AI Act compliance checks

ComplyEdge

Offline TrustLint checks: EU AI Act Article 5, Article 50, GPAI, plus GDPR and HIPAA

C

Cyntrisec CLI (Historical)

cyntrisec

Historical AWS analysis CLI; not a current Cyntrisec product

E

envault

DinanathDash

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations

F

Fingerprint

fingerprintjs

Device intelligence for AI agents: Fingerprint events, smart signals, and API key management

F

Frontegg MCP Server

frontegg

No description yet

F

Fscan_mcp

steveopen1

No description yet

A

Aguara MCP

garagon

Security scanner for AI agent skills and MCP servers

A

Aguara MCP

garagon

Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM

🔍

🔍 Ghidra MCP Server

Bamimore-Tomi

Ghidra MCP server that extracts decompiled binary context and exposes it to LLMs via Model Context Protocol

S

Sabline

gowrishankar-infra

Run code an AI wrote without handing it everything you can reach

V

Velaris

gowrishankar-infra

Write Velaris, audit what it can touch, and run it under an effect budget

T

Turbot Guardrails Model Context Protocol (MCP) Server

turbot

Enable AI assistants to explore and query your Turbot Guardrails data.

M

MCP Compliance

grafana

An mcp server to support compliance operations in AI agents

H

Haldir

ExposureGuard

Guardian layer for AI agents. Scoped sessions with spend limits (Gate), AES-encrypted secrets (Vault), immutable audit trail with anomaly detection (Watch), and proxy mode that intercepts every MCP tool call for policy enforcement. Human-in-the-loop approvals, webhooks, 10 MCP tools.

A

admin-mcp

hellocoop

Model Context Protocol (MCP) for Hellō Admin API

H

HSM Kit

hsm-kit

Local-first Base64, Luhn, key-component XOR, and synthetic ISO-0 PIN block tools

P

pkgtruth

hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them

Q

q-ring

I4cTime

OS keychain secrets for AI coding agents, over MCP

S

Seraph

kondux.io

Crypto transaction firewall and risk tools for MCP agents

I

IPGeolocation.io MCP Server

IPGeolocation

IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio

S

signet-eval

jmcentire

Deterministic policy enforcement and MCP management for AI agent tool calls.

K

Korext: AI Code Governance

Korext

Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.

A

agence

l-agence

AI governance MCP server — policy enforcement, skills, memory, multi-LLM consensus

Q

qURL

layervai

Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents

L

leakferret

leakferrethq

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing

N

nervous-system

levelsofself

Governance for LLM agents: 7 enforced rules and read-only reference tools. Safe in any MCP client

V

verantis-mcp

m9labs-railscope

Verified directory for machine payments (x402 & MPP): check services and wallets before agents pay

W

Web Application Penetration Testing MCP

yallasec

No description yet

I

Insecure MCP Demo

kenhuangus

Mirror of

V

Vulnerable MCP Server

evrenyal

Vulnerable MCP Server

M

MolTrust MCP Server

MoltyCel

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts

O

oraclemcp

MuhDur

Engine-free, governed Oracle Database MCP server with a fail-closed SQL guard (unofficial)

K

korg-introspect-mcp

New1Direction

Wrap any korg:introspect@v1-aware binary as a Claude Code tool, honoring declared side-effects

O

OLETools Secure MCP Server

pradeep895

Secure MCP server for analyzing Excel files with oletools

O

OpenZiti Network Management

openziti

Manage OpenZiti zero-trust networks — through natural language

O

OWASP ZAP MCP Server

pierre3

MCP server for OWASP ZAP vulnerability scanning with Docker management

P

Prompt Injection Shield

aniketkarne

Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the #1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and detects obfuscation — all locally, all private.

R

Reverse Engineer Anything (Docker)

psyb0t

REA reverse-engineering MCP server in Docker, with JADX, Apktool and adb for APKs

Governed execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals

M

mcp-audit

saagpatel

Scan, enumerate, and risk-score every MCP server configured on your machine

D

DeadBolt by NextEleven

seanebones-lang

Local execution gate: fixed deadlines, operator-only controls, read-only setup and readable denials

S

SAST MCP Server

Skyrxin

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

A

AI AppSec

subodhkc

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

M

mcp-tenant-isolation

subodhkc

Static analysis scanner for MCP server code and multi-tenant SaaS applications.

A

ai-audit-trail

sundsoffice-tech

Tamper-evident audit trails for AI agents: Ed25519-signed, hash-chained, EU AI Act ready

E

Emfirge

theanshsonkar

Git branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes

T

ThreatNews

xue20010808

MCP server for threat info collection in cyber security

T

Tufin MCP Server - Open Source Community Project

stonecircle82

Bridge Tufin APIs to AI workflows: An open-source REST server with RBAC for SecureTrack and SecureChange integration.

R

release-gate

VamsiSudhakaran1

Pre-deploy security auditor for AI agent code that catches the risks generic SAST misses

V

VMware Harden

vmware-skills

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection

V

VMware NSX Security

vmware-skills

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS; 22 MCP tools

E

eKYC Suite

wefi-ai

KYC / eKYC MCP server for face compare, liveness, OCR, and image labeling

W

Whois MCP

dadepo

Model Context Protocol (MCP) server that provides LLMs with network information lookup tools through WHOIS and RIPE Database queries

Y

Yogosha Mcp

mohdhaji87

This project exposes the Yogosha API as MCP tools using the MCP Python SDK. Each Yogosha API endpoint is available as a separate MCP tool, supporting GET, POST, PUT, DELETE, and PATCH operations.

V

VMware Harden

zw008

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection

V

VMware NSX Security

zw008

VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.

1

1Claw Vault

1clawAI

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning

K

Keyblind

aarifmms

Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them

V

vaultgate

adamrowles1996

Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only

Security proxy that wraps MCP servers with real-time monitoring and policy enforcement