MCP Servers

M

mlab.sh

mlab.sh

Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs

S

Shrike

Shrike-Security

Governs what AI agents do: tool calls, SQL, commands, files checked against policy before they run

Q

Quesen Deterministic Agent Decision Layer

Shxnque

Deterministic decision layer for autonomous agents: reproducible PROCEED/REVIEW/SKIP verdicts

S

Sonar MVP Server

lreimer

A MCP server implementation for the SonarQube Cloud API in Golang

D

Diogenes Autonomous Microservice Gateway

stand-out-of-my-sun

Autonomous AI microservices: 55 dynamic guardrails, contract audits & oracles via L402/x402/MPP

C

create-starter

starter-series

Scaffold Starter Series projects and check release, deployment, security, and agent instructions

S

Security Recipes

stevologic

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner

A

AgentRaaS wrap

sumedhchatse

Wraps any MCP server: identical write-tool calls run once, and every tool call is audit-logged

S

shield-kya

The-Pixel-Boys

Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.

Z

Zyrax Guard

tiagosilva07

Audit AI agent configs for prompt injection and rogue MCP servers; vet packages

R

Raziel

tide-foundation

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

R

raven-nest-mcp

tidynest

AI-driven penetration testing: 22 security tools behind safety-hardened MCP endpoints

C

candor

tombaldwin

Per-function effect analysis for agents: blast radius, what reaches the network, gate verdicts

C

Cybercentry Verification

cybercentry.co.uk

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402

Z

zn-gate

usezn

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

V

Vantio Gate

vantioai

Vantio Gate: Policy Latch dry-run evaluate for agents. No live enforce from MCP

V

Vantio Optics

vantioai

Vantio Optics: read-only Sight Loop observe for agents. Proofs, hosts, upgrade path

D

data

vdappdev2

MCP server for Verus on-chain data retrieval, decryption, signing, and verification

I

identity

vdappdev2

MCP server for VerusID identities: register, update, revoke, recover, query, set timelock

D

dominion-observatory

vdineshk

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools

V

veriswarm-mcp

veriswarm

VeriSwarm MCP Server: trust infrastructure for AI agents via Model Context Protocol

A

agentstamp

vinaybhosle

Identity certificates, public registry, and wishing well for AI agents, with x402 micropayments on Base

V

Volatility3 Mcp Server

OMGhozlan

MCP (Model Context Protocol) interface for Volatility 3, providing memory forensics capabilities through LLM-based tools. Query, analyze, and automate Volatility 3 plugins using natural language via API or agent-based workflows

M

MCP Gateway Scan

willianpinho

Read-only MCP/agent-gateway readiness scanner, scores a repo across 7 security dimensions

S

suprawall-mcp

wiserautomation

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

W

writ

withwrit

Commit-time policy checks for AI agent writes (ALLOW, DENY, STEP_UP) with a tamper-evident audit log

P

pseudonym-mcp

woladi

Locally pseudonymizes sensitive text before cloud LLM work and restores the tokens afterward

N

Nacre

nacre.work

Self-hosted permission-aware context layer. Search returns only what the caller may read

X

x402-seller — rug protection & safe-alpha for trading agents

wyattpalm2-eng

Rug-check & launch radar for trading agents: composite honeypot score, EVM+Solana, keyless x402

X

Xaip

xkumakichi

Give AI agents a persistent on-chain identity on the XRP Ledger. Create DIDs, issue verifiable credentials, build reputation scores, run escrow transactions, and record permanent relationships (Memory Chain) between agents and humans.

P

Paperloo Compliance

yassinemohamedali

Automated website compliance infrastructure and GDPR/CCPA auditing

E

Electron MCP Server

YawLabs

Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

N

npm Registry MCP Server

YawLabs

npm registry MCP server — package intelligence, security audits, dependency analysis

T

tablecloth-mcp

yourtablecloth

Open Korean e-Gov and finance sites in a clean, disposable Windows Sandbox with security programs

Z

ZAP MCP Server with SQLMap Integration Setup Guide

UnknownAirtist

ZAP MCP Server with SQLMap integration setup guide and configuration.

A

agentfolio

0xbrainkid

Query AI agent profiles, trust scores, verifications, and marketplace jobs on AgentFolio

A

agentfolio-mcp-server

0xbrainkid

AI agent identity verification via SATP on Solana. Trust scores and on-chain attestations

P

Phishunt

0xDanielLopez

Public phishing feed: suspicious and confirmed phishing URLs detected hourly. No auth, CC0

R

rubric-protocol

0xsims

AI compliance attestation for EU AI Act, SR 11-7, HIPAA. Free local tier, no key required

P

pop-pay

100xPercent

Runtime security for AI agent commerce. CLI and MCP server blocks hallucinated purchases

U

Unphurl

123Ergo

URL intelligence for AI agents and developers. 16 tools, 25 signal weights, 20 free checks

S

Silk

21J3phy

Message other people's AI agents with consent: end-to-end encrypted, on a public ledger

A

a2a-auditor

4hmetuyar

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth and credential exposure

A

agent-graph-auditor

4hmetuyar

Finds transitive excessive agency across LangGraph, CrewAI and AutoGen orchestration graphs

A

ai-code-scanner

4hmetuyar

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

C

compliance-checker

4hmetuyar

KVKK/GDPR/CCPA compliance checks for codebases

D

db-gateway

4hmetuyar

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

D

dependency-auditor

4hmetuyar

CVE scanning for npm/pip/cargo dependencies via OSV

D

dns-intelligence

4hmetuyar

DNS record enumeration, misconfiguration and dangling-subdomain detection

E

elicitation-auditor

4hmetuyar

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

L

llm-redteam

4hmetuyar

Active jailbreak, extraction and obfuscation red-teaming for live LLM endpoints

M

mcp-config-auditor

4hmetuyar

Scans Cursor, Claude, Windsurf and VS Code MCP configs for unpinned versions, secrets and typosquats

M

mcp-server-auditor

4hmetuyar

Scans MCP server tool definitions for excessive agency, injection sinks and hardcoded secrets

M

memory-poisoning-scanner

4hmetuyar

Scans agent code for untrusted input poisoning persistent cross-session memory

M

model-scanner

4hmetuyar

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

O

oauth-auditor

4hmetuyar

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

P

prompt-injection-scanner

4hmetuyar

Scans RAG content and scraped pages for indirect prompt injection

P

prompt-leak-scanner

4hmetuyar

Catches leaked credentials and PII in outbound LLM prompts

R

rug-pull-detector

4hmetuyar

Baselines an MCP server's tools and detects tool-definition changes after approval

S

secret-scanner

4hmetuyar

Scans files for leaked secrets and API keys