API ATLAS

Security & Identity: 272 MCP servers

Authentication, authorization, malware scanning, cryptography and identity providers. Every record below links to its repository or documentation.

Listed
272
No auth needed
262
Full profiles
218

Servers in this category

272 of 272
equinoxaifinance-rgb/living-stack-mcp Stops AI agents from claiming done without proof. Fourteen bounded tools add scoped authorization, budget reservations, typed evidence gates, checkpoint recovery, tamper-evident outcomes, and signed metadata-only traces without giving the server shell, browser, or network authority. Apache-2.0; audited MCPB and GitHub installs need no API key.
echelongraph/echelongraph-mcp Keyless, read-only CVE and internet-exposure intelligence: CVE lookup and search, CISA KEV, EPSS history, CWE, vendor advisories (MSRC, Red Hat, Cisco, GHSA and more), SBOM and manifest checks, and aggregate exposure radars. Use the hosted endpoint (mcp.echelongraph.io) with no install, or run locally with npx.
YugantM/hvtracker-mcp Pre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scanstack to check a whole requirements.txt, package.json or MCP client config at once.
knowledgepa3/gia-mcp-server Enterprise AI governance layer with 29 tools: MAI decision classification (Mandatory/Advisory/Informational), hash-chained forensic audit trails, human-in-the-loop gates, compliance mapping (NIST AI RMF, EU AI Act, ISO 42001), governed memory packs, and site reliability tools.
verax-ai/verax Sits between an agent and its tools: every call passes a policy gate and leaves a signed decision record before it runs, a refusal is recorded like an approval, payments wait for an operator on the same machine, and the ledger stays there and verifies offline. Apache-2.0.
girste/mcp-cybersec-watchdog Comprehensive Linux server security audit with 89 CIS Benchmark controls, NIST 800-53, and PCI-DSS compliance checks. Real-time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.
whatsinmycloud/aws-audit-scanner Read-only AWS audit scanner: public S3 buckets, root and user MFA gaps, unused access keys, world-open security groups, CloudTrail gaps, and forgotten EC2/EBS/RDS spend across every region. Only makes Describe/List/Get calls and runs locally with your own credentials.
GautamTalksDev/mcp-pin Stdio proxy that pins every tool definition (name, description, input schema, annotations) when you approve a server and blocks the session, with a diff, if any of it changes later. Also keeps a public, signed log of tool definition changes across public MCP servers.
nickjlamb/redacta Privacy boundary for healthcare AI agents: pseudonymises patient identifiers (NHS numbers, names, dates of birth, addresses; UK and US) into labelled tokens locally, keeps the reversal map out of agent context, and restores originals only at the trusted boundary.
tponscr-debug/oracle-h-mcp Mandatory human approval gate for autonomous AI agents. Intercepts critical, irreversible, or financially significant actions and routes them to a human via Telegram for real-time approve/reject. Raises workflow success probability from 81.5% to 99.6%.
stefantsezarov/SaveSaveSaveSave Read-only checks before an agent acts: prompt-injection and phishing scan of untrusted text (local), npm package check for malware, hijacked releases and typosquats, crypto address and token scan, and address-poisoning comparison. Zero dependencies.
noor202401938-netizen/cyber-chef-mcp CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy, and multi-layer payload deobfuscation for AI coding and security agents. npx -y @noorfatima123456/cyber-chef-mcp
emektor/toolwrit Policy sidecar for any MCP server: deny-by-default tool allowlist with argument rules, call and USD budget caps, and a hash-chained audit log with RFC 3161 timestamp anchors. Also usable as a TypeScript or Python library.
Paraphern/rugsnare Pin MCP tool contracts by hash and catch silent drift, rug pulls and per-client bait-and-switch after approval, with a CI gate, live stdio/HTTP proxies, canary replay, call policies and on-chain release verification.
petrovicistefan/mcp-security-guard Audit the MCP servers you use against the OWASP MCP Top 10: tool poisoning, rug pulls, shadowing, secrets and supply-chain risk, with runtime guards, approved-server policy and adversarial testing for server authors.
jagmarques/asqav-mcp AI agent governance MCP server with policy enforcement, quantum-safe audit trails (ML-DSA), multi-party authorization, and compliance reporting. Check policies, sign actions, and verify signatures through MCP tools.
CSOAI-ORG/councilof-ai Live GSPC measurement board over MCP (https://councilof.ai/mcp, npx -y csoai-gspc-mcp@0.1.1). Seven read-only tools. Measurement, never certification. Verify: https://councilof.ai/gspc-verify
JeanExtreme002/PyMemoryEditor Read, write and scan the memory of running processes, Cheat Engine style: value scans that narrow down as the value changes, pointer chains, and scan results kept server-side behind a handle.
privacyfence/privacyfence Privacy and approval gateway between AI assistants and Gmail, Drive, Slack, Salesforce, Jira and more: human approval for sensitive reads and writes, local PII detection and an audit log.
tunahanaliozturk/derbent One local gate for Claude Code, Codex, Copilot CLI and Antigravity: allow, deny and ask rules over MCP and built-in tool calls, approvals from a terminal UI, and hash-chained receipts.
agentgraph-co/agentgraph Trust verification and security scanning for AI agents. Checks security posture of third-party MCP servers and tools with signed attestations (Ed25519/JWS) before interaction.
Farenhytee/database-sentinel Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an audit prompt returns scored findings with fix SQL.
ndl-systems/kevros-mcp Governance primitives for autonomous agents — verify actions against policy, record signed provenance, and bind intents cryptographically. Free tier: 100 calls/month.
mandarelabs/mandare Accountability for AI agent fleets: verify a signed, hash-chained ledger, check budgets, kill an agent, and issue passports and mandates, all through the local CLI.
airblackbox/air-blackbox-mcp EU AI Act compliance scanner for Python AI agents (LangChain, CrewAI, AutoGen, OpenAI) with prompt injection detection, risk classification and fix generation.
aurumflux20/seal Exactly-once payments for agents: prevents double settlement across processes and retries, confirms charges with the provider and reconciles out-of-band spend.
degenlegion-com/waxseal-sdk On-chain Ed25519 identity for AI agents: verify seals by fingerprint, validate document signatures and gate irreversible actions behind human-signed approvals.
gautam-u/sieve-mcp Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command execution.
imran-siddique/agentos-mcp-server Agent OS MCP server for AI agent governance with policy enforcement, code safety verification, multi-model hallucination detection, and immutable audit trails.
OrygnsCode/opa-mcp-server OPA and Rego policy toolkit wrapping the OPA CLI and Regal: format, lint, evaluate, test and benchmark policies, manage the OPA REST API and explain decisions.
agentward-ai/agentward MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates compliance audit trails.
AIops-tools/Identity-AIops Keycloak and Authentik SSO/IAM operations: root-cause analysis for login, permission, client and MFA issues, plus guarded writes with audit logs and rollback.
askalf/truecopy Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only pinned tools.
cuttalo/depscope Package intelligence across many ecosystems: health, vulnerabilities (OSV, CISA KEV, EPSS), typosquats, malicious packages, alternatives and breaking changes.
Jiangw2718i/frisk Screen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or block verdict.
jstibal/openterms-mcp Ed25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed provider verification.
jyjune/mcpvms Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific channels and times.
muhannad-hash/mcp-shield Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and supply chain risks.
Rul1an/assay Fail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bundles and enforces egress via eBPF and Landlock.
uchit/mcp-regulated-ai-compliance Regulated-industry AI compliance knowledge: control lookup, use-case classification and crosswalks for EU AI Act, NIST AI RMF, ISO 42001, APRA, GDPR and more.
AperionAI/shield Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.
beeswaxpat/chronoverify-mcp Verify a photo's capture time and provenance: C2PA Content Credentials validation, EXIF/XMP consistency checks and pixel forensics combined into one verdict.
bluetieroperations-create/blackwall-mcp Risk gate that agents call before irreversible actions, returning a risk score, reversibility class, red flags and a proceed/confirm/human-required decision.
doublegate/CyberChef-MCP GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA attacks.
elberacasa/umbra Trust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying about tests.
goklab/guardvibe Security scanner for vibe-coded apps (Next.js, Supabase, Stripe, Prisma and more): taint analysis, auto-fix, SARIF export, pre-commit hook and CVE detection.
MARUCIE/authbox Zero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a hash-chain audit trail.
mirajmahmudul/agentdevx-sdk Identity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent memory and web scraping.
Pentagonal-ai/pentagonal Generate, audit, fix and compile smart contracts on Ethereum, Solana, Base and other chains, with adversarial multi-agent pen testing and honeypot detection.
RoscoNL/intodns-mcp-server DNS and email security scans via IntoDNS.ai: SPF, DKIM, DMARC, DNSSEC, MTA-STS, BIMI, TLS, blacklist and deliverability checks plus security header analysis.
sgateway/s-gw Local credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals inject credentials only into approved commands.
UPinar/contrastapi Security intelligence: CVE/EPSS/KEV lookups, domain recon (DNS, WHOIS, SSL, subdomains), IOC threat intel, OSINT and code scanning for secrets and injection.
aggrete/aggrete Policy proxy that refuses forbidden tool calls, stopping prompt-injection exfiltration and forbidden data combinations across Slack, Drive, GitHub and more.
AIops-tools/Compliance-AIops Turn other AIops tools' audit trails into tamper-evident, hash-chained evidence bundles mapped to HIPAA, PCI-DSS, SOC 2 and GDPR. Offline and deterministic.
datanexusmcp/mcp-server Public data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and domain intelligence.
goldmembrane/cleaner-code Locally scans AI-generated code for invisible Unicode, Trojan Source, homoglyphs, rules file backdoors and typosquatting using static analysis and CodeBERT.
gostanos/smallprint-action Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.
luiacuaniello/perspectivegraph Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.
nagameTW/mcp-server-malcolm Malcolm threat hunting: search and aggregate network traffic, query Suricata alerts, browse Arkime sessions and resolve NetBox assets. Read-only by default.
node-man/dechonet-mcp Domain security checks: DNS, DNSSEC, TLS grading, HTTP security headers, SPF, DKIM and DMARC, port scans, ASN, RDAP and WHOIS, plus an overall health score.
quantakrypto/pqc-tools Post-quantum readiness: scan code for quantum-vulnerable cryptography (RSA, ECDH, ECDSA, DH), get ML-KEM/ML-DSA/SLH-DSA migration guidance and verify fixes.
rob925/mcp-shield Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt injection.
Synvoya/codeinspectus Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.
ucsandman/DashClaw Fail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approval and logs every decision to a causal ledger.
zyx77550/sparda Injects a live, reversible MCP server into a running Express, FastAPI or Next.js app, with safe reads by default and writes gated behind human confirmation.
Acacian/aegis Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit logging.
aeoess/agent-passport-mcp Agent identity, scoped delegation and governance: issue passports, verify narrowing-only delegation chains, enforce gateway policy and emit signed records.
BeBraveBeKind/mcpskills-server Scores MCP servers, AI skills and npm packages before install, scanning for prompt injection, credential theft and supply-chain risk, with a go/no-go gate.
Bichev/agentradar-mcp On-chain trust oracle for ERC-8004 and x402 agents: composite trust scoring, a scam wallet database, ERC-8004 identity lookup and EAS attestations on Base.
Chronolapse411/sicarius-guard Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and composite risk scoring.
Drumworks/ssid-mcp MAC address (OUI) vendor lookup with randomized-address detection, plus router default login IPs and admin credentials cited to manufacturer documentation.
Erodenn/fetch-guard URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content boundary wrapping.
jonnybottles/patch-tuesday-mcp Microsoft Patch Tuesday triage from the MSRC Security Update Guide: monthly rollups, CVE/KB lookups, supersedence chains and EPSS/CISA KEV urgency ranking.
Kzino/vorim-mcp-server Agent identity, trust and audit trails: Ed25519 agent registration, permission checks, tamper-evident audit events, trust scores and credential delegation.
mastyf-ai/mastyf.ai Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.
mopanc/depguard Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX SBOM generation.
nh4ttruong/secobserve-mcp SecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.
shyshlakov/pci-dss-mcp PCI DSS static analysis for Go payment code: finds PAN/CVV exposure, weak crypto, missing audit logs and vulnerable deps, each mapped to a PCI requirement.
alexfleetcommander/agent-trust-stack-mcp Cryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and trust-based matchmaking.
arian-gogani/nobulex Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained, tamper-evident audit logs.
arthurpanhku/DocSentinel Automate cybersecurity assessment of documents, questionnaires and reports to surface risks, compliance gaps and remediations, using a RAG knowledge base.
Gowthaman90/mcp-bastion Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit trails.
itsalissonsilva/ModelSafetyMCP Scan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan and heuristics.
juanisidoro/securecode-mcp Encrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access rules.
sint-ai/sint-protocol MCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit receipts, plus preflight tool-risk scanning.
srinivasan-sundaresan95/orihime Cross-repository code knowledge graph for Java, Kotlin, JavaScript and TypeScript: call-flow tracing, taint analysis, reachability and license compliance.
taniwhaai/arai Enforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule compliance verdicts.
chasdaddy/basescope Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames, gas and prices.
chrbailey/promptspeak-mcp-server Pre-execution governance for agent tool calls: risk classification, behavioral drift detection, a hold queue for dangerous operations and an audit trail.
emiliaprotocol/emilia-protocol Requires a named human's approval before irreversible agent actions such as payments or deploys, then issues an offline-verifiable Ed25519 trust receipt.
jamjet-labs/jamjet-policy MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks and agent SDKs.
project-feldspar-resources/feldspar-scan Deterministic security scan of public git repositories: vulnerable dependencies via OSV, hard-coded secrets and risky config lint, as file:line findings.
sachio222/54ch10-mcp JSON risk briefs for wallet addresses, tokens and URLs: scores, flags and sources from phishing, scam and URL-reputation heuristics, including OpenPhish.
Thezenmonster/agentscore-mcp-server Security trust layer that monitors MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift and publisher posture.
thyn-ai/algenta-sdk Algenta decision engine: dataset discovery, exact queries, utility models, decision memory and governed agent runs with approvals and execution receipts.
UnboundCompute/lachesis Code property graph for C, Python and TypeScript: callers/callees, data and taint flow with source-to-sink witnesses, points-to and guard/sink structure.
Fronesis-Labs/dcl-webhook Deterministic audit layer that checks LLM and agent outputs against jailbreak, safety and trading compliance policies and logs verdicts to a hash chain.
haruodev/tamperlens-mcp Document forensics via the Tamperlens API: detect post-creation edits, failed redactions and embedded prompt injection in PDFs, Office files and images.
icoretech/warden-mcp Manage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys, folders and Sends.
Kjopstad-IT/rqwstr HTTP security testing toolkit (send, intruder, race, chain, out-of-band) with low-level HTTP/1.1 and HTTP/2 control: raw framing and connection pinning.
ogasurfproject-jpg/horizon-shield Verify AI-agent evidence records on the Bitcoin-anchored JIDEC ledger: fetch record bytes, recompute the SHA-256 and check the OpenTimestamps timestamp.
scamverifyai/scamverify-mcp Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk scores.
timescale/rsigma Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.
calllint/calllint Offline pre-flight security linter for MCP servers, agent tools and skills that returns SAFE, REVIEW, BLOCK or UNKNOWN verdicts without executing them.
dnsdoctor/claude-plugin Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated fix records.
infai-tech/vulnfeed-mcp Scans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and alerting.
jamesdfinance-dev/lazaretto-mcp Check lockfiles against malicious-package advisories and scan artifacts for credential theft, exfiltration, obfuscation, prompt injection and droppers.
meloliva14/verity-mcp Fail-closed trust gate for agents: fact-checking, prompt-injection detection, content moderation, PII and secret detection, and a pre-action guardrail.
nickpending/mcp-recon Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple recon levels.
oleg-vdv/kepil Accountability layer for AI agents: per-version passports, per-job mandates with spending limits, a fail-closed action gate and a hash-chained journal.
rafapra3008/cervellaswarm Verify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violations; includes a linter, formatter and LSP.
kastelldev/kastell Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection.
mariocandela/beelzebub Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious agent behavior.
maxfain/basedagents Agent identity registry (reputation, capability search, task marketplace, messaging) plus a local encrypted vault that leases provider keys to agents.
msaad00/agent-bom AI supply chain security scanner: discovers MCP clients, scans dependencies for CVEs, maps blast radius to credentials and tools, and generates SBOMs.
piiiico/proof-of-commitment Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.
SaravananJaichandar/etch-mcp Signed audit chain for AI agent decisions: events are signed, Merkle-chained per project, anchored to public transparency logs and verifiable offline.
sp3ak/safenode-mcp-gateway Fail-closed policy proxy for MCP tool calls that denies, warns on or holds each call for human approval before forwarding, with client-side redaction.
KOVY/agentforge-trust-mcp Query AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU compliance.
Skyrxin/sast-mcp-server SAST/DAST scanners (Bandit, Semgrep, Trivy, CodeQL, OWASP ZAP and more) with closed-loop remediation, SARIF/SBOM/VEX export and compliance reporting.
StacklokLabs/osv-mcp Query the OSV (Open Source Vulnerabilities) database by package version or commit, batch-query multiple packages and get vulnerability details by ID.
vikasny30/aletheia-mcp Deterministic pre-execution filter for agent tool calls that blocks scope creep (credential reads, SSRF, destructive shell/SQL) and prompt injection.
CTRLRun/ctrlrun Execution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an approval queue and hash-chained receipts.
epistemedeus/skillguard Static scanner that checks Claude Code skills, plugins and MCP servers for exfiltration, install hooks and prompt injection before you install them.
forest6511/secretctl Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.
nickgeorgeseo/mcp-gatehouse Permission tiers, approval gates and secret-redacting audit logging enforced inside MCP servers at the tool boundary, with a demo order-desk server.
OksigeniaSL/checker-mcp Local-first domain security and privacy checker: live SPF, DMARC, DKIM, DNSSEC, TLS, CAA and security header checks, scored with remediation advice.
wei9072/aegis Admission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS verdicts.
zw008/VMware-Harden Read-only VMware vSphere compliance scanning and drift detection against CIS, vSphere SCG, China DJCP 2.0 and PCI-DSS, with remediation suggestions.
AgentAvow/AgentAvow Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate CI merges.
fredyee/hallucc-mcp Claim-level hallucination detection with sources, agent trajectory verification, risk gating for computer-use actions and prompt-injection defense.
honeylabshq/honeylabs-mcp Honeypot threat intelligence from a sensor network: IP reputation, scanner classification, CVE probing trends and JA4, JA4H and HASSH fingerprints.
jimmyracheta/AI-Runtime-Guard Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.
rudraneel93/mcp-guardian Security and governance proxy for MCP with YAML policies (blocklists, rate limits, token budgets), token cost tracking, health monitoring and RBAC.
yessGlory17/job-verify Check recruiters and job offers for scams: cross-checks company registration, domain age, look-alike domains, blocklists and crypto-scam databases.
123Ergo/unphurl-mcp URL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.
dengyier/OpenWorkProof Verifiable execution protocol for agent tool calls: signed policy decisions, causal evidence chains and offline verification from a SQLite ledger.
GUCCI-atlasv/skillssafe-mcp Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.
laszlopere/mcp-bytesmith Offline byte toolbox: hex/Base64/Base58 encoding, cryptographic and CRC hashing, base conversion, secure tokens, plus optional Ethereum/EVM tools.
sanyambassi/thales-cdsp-cakm-mcp-server Thales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle databases.
sekera-radim/impri Self-hostable human-in-the-loop approval inbox: humans approve, reject or edit proposed agent actions via web, mobile, Slack, Discord or Telegram.
suhui-organization/pod Least-privilege compiler for agents: record real tool calls, compile a minimal policy, enforce it at an MCP gateway and keep a hash-chained audit.
toan203/osv-ui Visual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after confirmation.
tomjwxf/scopeblind-gateway Security gateway that wraps MCP servers with per-tool policies, approval gates and optional signed receipts, in shadow (log-only) or enforce mode.
urldna/mcp URL scanning and phishing triage: capture DOM snapshots, network requests and screenshots, and hunt historical scans with a custom query language.
vinaybhosle/agentstamp Trust intelligence for AI agents: identity stamps, reputation scoring, a registry, forensic audit trails and A2A passports via x402 micropayments.
aurelio-nakamura/cmdxray Offline safety gate for agent shell commands: rates each command as danger, caution or none and explains every flag, pipe, redirect and subshell.
Fulcrum-Enterprises/verify-proof Verify blockchain-anchored timestamp proofs locally: recompute a file's SHA-256, walk the Merkle path and check the anchor on Polygon or Bitcoin.
MoltyCel/moltrust-mcp-server Trust infrastructure for AI agents: register DIDs, verify identities, query reputation scores, rate agents and manage W3C Verifiable Credentials.
zboralski/ida-headless-mcp Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.
felixpg13-glitch/spendshield Payment guardrails for AI agents: spend caps, budget and approval gates, prompt-injection defense, an encrypted secret vault and an audit trail.
FoundryNet/mint-mcp MINT Protocol work attestation for agents: cryptographically attest, verify, rate and discover agent work to build portable on-chain reputation.
inkog-io/inkog-mcp Audits agents and MCP servers for prompt injection, infinite loops, token bombing and missing human oversight, with EU AI Act and OWASP mapping.
kakunin-ai/kakunin-mcp Agent compliance and identity: verify an agent's X.509 certificate scope, read its behavioral risk score and append to an immutable audit trail.
alberthild/shieldapi-mcp Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain scanning.
astafford8488/agentaegis-mcp Scan MCP servers and skills before install, vet endpoints before calling them, and run vulnerability scans, threat intel and compliance checks.
elang2/mcp-audit-gateway Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry export.
jaimenbell/rails-mcp Self-hosted default-deny action registry, append-only spend-intent ledger and human sign-off audit trail for gating irreversible agent actions.
Perufitlife/web-exposure-mcp Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.
rudimentall1/agentic-wallet-guardian-v3 Self-hosted security layer that evaluates AI agents' proposed blockchain transactions and returns an explainable allow, warn or block decision.
velvetway/minreestr-mcp Search the Russian software registry for import-substitution and FSTEC/FSB-certified products, with full-text search and manufacturer listings.
WRG-11/wrg-sigma-rules Write, validate and convert Sigma detection rules for Splunk, Elastic, Kibana and Wazuh, backed by a rule corpus covering MITRE ATT&CK tactics.
AgentValet/AgentValet Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval gates.
Buggy1111/anonymize-mcp Anonymize PII for GDPR in Czech and many other languages using ÚFAL/LINDAT NLP (MasKIT, NameTag), plus morphology, translation and spellcheck.
dambuchs/redact-pdf-mcp Permanently redact PII (names, emails, phone numbers, addresses, IBANs, card numbers) from PDFs, scans and screenshots, with multilingual OCR.
kent-tokyo/shohei Infrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency benchmarking.
qinisolabs/qiniso Verify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.
samvas-codes/dawshundmcp Enumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on dAWShund.
snyk/studio-mcp Embeds Snyk's security engines into agentic workflows to secure AI-generated code in real time and work through vulnerability backlogs faster.
Declade/lucairn-sdks Privacy gateway that sanitizes German and English PII before prompts reach an LLM and issues a signed, timestamped certificate for each call.
shieldly-io/mcp Analyze AWS IAM policies and CloudFormation templates with Shieldly to flag privilege-escalation paths, wildcards and over-permissive access.
true-alter/cli Personal identity profiles under a ~name handle, paid lookups that share revenue with the person found, skill-proving quests and collectives.
zkproofport/proofport-ai Generate zero-knowledge proofs of identity claims (Coinbase KYC, country, Google OIDC, Microsoft 365) without revealing personal information.
alexar76/argus Query ARGUS-3 and check its status; WARDEN vets third-party MCP servers with a scored firewall, tool-definition pinning and drift detection.
mrz1880/mcp-keycloak-admin Administer Keycloak via its Admin REST API: users, roles, clients, groups, identity providers, federation and events, with a read-only mode.
rev2ret/SecureAudit-MCP Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.
ajipurn/fida Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.
BurtTheCoder/mcp-maigret Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account information from public sources.
mcp-hangar/mcp-hangar Self-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributable audit logs and SIEM export.
ark-forge/arkforge-mcp Third-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.
Chimera-Protocol/csl-core Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.
getaegis/aegis Credential isolation proxy that injects secrets at the network boundary, with domain restrictions, agent authentication and audit logging.
iamredmh/volta-mcp-server Burn-after-read encrypted Volta Notes for agents: hand off credentials between users and agents without secrets appearing in chat history.
82ch/MCP-Dandan Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.
co-browser/attestable-mcp-server Demonstrates remote attestation of an MCP server running in a Gramine TEE via RA-TLS, so clients can verify the server before connecting.
forgemeshlabs/x402-notary-mcp Notarize AI model outputs with signed Ed25519 attestations, SHA-256 content hashes and Merkle anchoring on Base or Solana, paid via x402.
securityfortech/secops-mcp Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.
26zl/cybersec-toolkit Install a large security toolset and discover and run it through an authorization-gated server for CTF, pentesting, bug bounty and DFIR.
jnMetaCode/shellward Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.
LaurieWired/GhidraMCP Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
ppcvote/misp-mcp-server Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.
vaulted-fyi/vaulted-mcp-server Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.
alexar76/aimarket-oracle-gateway Verifiable oracle tools via AIMarket Hub: Platon VRF randomness, Chronos VDF computation and verification, and LUMEN reputation scores.
creatorrmode-lead/avp-sdk Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection and IPFS audit anchoring.
ARKALDA/hejdar-mcp Runtime policy enforcement for AI agents: evaluate actions against organization policies before execution, in observe or enforce mode.
behrensd/mcp-firewall Deterministic security proxy for MCP that intercepts tool calls, enforces YAML policies, scans for secret leakage and logs everything.
boy-offi9-inc/hexforge-gateway APK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on Termux (Android) or PC.
trustscoreagent/trustscoreagent Check the reputation of AI microservices and public APIs before calling them and submit ratings afterward, via an open trust registry.
agntor/mcp Agent discovery and certification with a trust and payment rail: identity verification, escrow, settlement and reputation management.
jaspertvdm/mcp-server-inject-bender Security through absurdity: transforms SQL injection and XSS attempts into harmless comedy responses using AI-powered humor defense.
alexar76/aimarket-mcp SSRF-hardened web gateway with web fetch, web search and Metis verification, sharing an audited security core with Metis and ARGUS.
loglux/authmcp-gateway glama - Auth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate limiting, multi-server aggregation and a monitoring dashboard.
zekebuilds-lab/captcha-mcp Middleware that gates MCP tool calls behind a Hashcash proof-of-work challenge or an L402 Lightning payment via self-hosted LNbits.
eliottreich/taskbounty-check Local, read-only scanner for GitHub Actions and CI maintenance issues in AI-built apps, with finding explanations and fix plans.
Jimil-Joshi/blastradius-mcp Zero-trust security proxy, pre-execution blast radius simulation, DLP secret redaction, and cryptographic audit logging for MCP.
M2M-Sentinel/m2m-sentinel-sdk EVM bytecode capability analysis, EIP-1967 proxy resolution, gas recommendations and preflight safety checks for agents on Base.
I4cTime/quantumring Quantum-inspired keyring for AI coding agents, securing secrets with superposition, entanglement, tunneling and teleportation.
duriantaco/skylos Dead code detection, security scanning and code quality analysis for Python, TypeScript and Go, with AI-assisted remediation.
9hannahnine-jpg/arc-gate-mcp Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.
hernaninverso/eleion-scanner-mcp Register and verify domains, queue security scans (headers, TLS, DNS, ports, CVEs and AI-specific checks) and read findings.
P4ST4S/mcp-audit Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.
coreyhines/opnsense-mcp OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.
adeptus-innovatio/solvitor-mcp Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.
gebalamariusz/cloud-audit AWS security scanner with attack chain detection, breach cost estimation and remediation snippets for CLI and Terraform.
safedep/vet Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.
BurtTheCoder/mcp-shodan Query the Shodan API and Shodan CVEDB: IP lookups, device searches, DNS lookups, vulnerability queries and CPE lookups.
13bm/GhidraMCP Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.
sidclawhq/platform Governance proxy that wraps MCP servers with policy evaluation, human approval workflows and hash-chain audit trails.
hieutran/entraid-mcp-server Microsoft Entra ID (Azure AD) directory, user, group, device, sign-in and security operations via Microsoft Graph.
operantlabs/operant-mcp Security testing tools for penetration testing, network forensics, memory analysis and vulnerability assessment.
takleb3rry/zitadel-mcp Zitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language.
cyntrisec/cyntrisec-cli Local-first AWS security analyzer that discovers attack paths and generates remediations using graph theory.
dtkmn/mcp-zap-server Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation.
roadwy/cve-searchmcp Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.
mrexodia/ida-pro-mcp IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
fr0gger/MCPSecurity Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.
ScopeBlind/verify-mcp Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.
swnotmetal/Project-Koma Classify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier.
Gaffx/volatility-mcp Memory forensics with Volatility 3, exposing plugins such as pslist and netscan through REST APIs.
panther-labs/mcp-panther Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.
bx33661/Wireshark-MCP Wireshark packet analysis: capture, protocol statistics, field extraction and security analysis.
rad-security/mcp-server Query the RAD Security API for Kubernetes and cloud security findings, reports and runtime data.
layervai/qurl-mcp Mint, resolve, audit and rotate expiring, scope-limited access links (qURLs) via the qURL API.
JoeyBrar/agentseal-mcp Action logs for AI agents: records every action in a SHA-256 hash chain as an audit trail.
radareorg/r2mcp Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.
vespo92/OPNSenseMCP Manage and interact with the OPNsense open source firewall in natural language.
semgrep/mcp Allow AI agents to scan code for security vulnerabilites using Semgrep.

Rows marked ↗ have no reference page of their own — the source registry did not provide enough to write one — so they link straight to the provider's documentation.

Authentication

How the 272 records in this category authenticate callers. Values come straight from the source registries; records the sources do not describe are counted as unknown rather than guessed.

  • No authentication 262
  • API key 9
  • OAuth 1

Also in Security & Identity: 104 free APIs

Related topics