Search

CYBERDUDEBIVASH Autonomous Zero-Trust AI Cybersecurity Command Center (MCP Server)

Local-first macOS intelligence for AI Agents: MCP and Skill discovery, process attribution, FSEvents, network destinations, Session Graphs, and local evidence.

MCP server exposing Koma Core protected RAG retrieval — discovery without authorization, content only by token.

Gadriel AI Security Harness for GitHub Copilot — local MCP server, prompts, and instructions for SAST, SCA/SBOM, secrets & OWASP LLM security scanning.

MCP Security Tools Server - A Model Context Protocol server providing security scanning tools wrapped in FastMCP, running in a Kali Linux Docker container

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

Practical security review framework for Model Context Protocol (MCP) servers, including threat modeling guidance, security review checklists, and first-pass evidence collection tooling.

Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.

D365 F&O Security & Licence Intelligence MCP Server (v0.2.1) — exposes security analysis, licence intelligence, and SoD detection as MCP tools consumable by AI agents and Copilots.

A security MCP server for AI coding agents: each language via its native analyzer — Kotlin (detekt), Java (SpotBugs+FindSecBugs), Python (Bandit), C# (Roslyn), JS/TS (ESLint) — plus diff review and secure patterns.

APK Security Guard MCP Suite - Comprehensive Android APK security analysis toolkit

A modern, full-stack web application for checking the security status of domains, IP addresses, and file hashes using the VirusTotal API v3, Vectara RAG, and Anthropic Claude LLM. Now includes AI-powered enrichment, RAG search, and color-coded UI for enhanced security insights.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Security basics of any public website, from your AI assistant: HTTPS certificate (validity, expiry, name, protocol), http-to-https redirection, protection headers (HSTS, CSP, framing, nosniff, Referrer-Policy, cookies), mixed content, and DNS filtering by public security resolvers. Reads only what any visitor sees. No account, no API key.

Apigee — independent third-party profile of a public API surface, by API Evangelist. Apigee is Google Cloud's native API management platform for building, managing, and securing APIs across any use case, environment, or scale. It provides API proxies, security, rate limiting, quotas, analytics, monetization, and developer portal capabilities.

Remote MCP server (Cloudflare Workers, free tier) exposing the OWASP GenAI Security Project's curated corpus -- companion to the genai-security-advisor skill

An AWS Labs Model Context Protocol (MCP) server for AWS Security Agent — automated security scanning, penetration testing, and remediation

16 security checks for agents: Solidity source and verified-contract scans, a pre-interaction contract check, proxy detection, calldata decoding, token allowances, agent-skill and MCP package scans before installing, phishing URL checks and OFAC sanctions screening (single or batch), domain, RDAP, security-header and email checks, hidden-Unicode inspection. Results are automated and heuristic, not an audit. Hosted remote MCP server (streamable HTTP), no key and no account: each tool has a free d

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Features: • 275+ security rules for Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection across 4.3M+ packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku) • Prompt inje

Give your agent threat context before it trusts code — CVE lookups with CISA KEV and EPSS exploit scores, plus package and full package.json audits, all keyless. Official sources only: NVD, CISA, FIRST and OSV. No API keys. No signup. No data resale. Free: 100 calls a day, anonymous. Pro: $15/month for 50,000 calls, first month free. Agents with a wallet can pay $0.002 a call via x402. One of nine Datakoot servers — [datakoot.com/security-intel](https://datakoot.com/security-intel)