Search

AI-powered software security analysis app: agentic SAST + supply chain scanning via OpenGrep and Trivy MCP servers, structured vulnerability reports, deployed to Azure and GCP via Terraform.

Keyless MCP server that gives AI agents live security intelligence: CVE lookups (NVD + CISA KEV), package vulnerability scanning (OSV), dependency audits, and URL/IP reputation. No API key, free tier. Part of SelfLabbs.

Joe Security LLC

Provides AI agents with standardized security scanning capabilities for authorized assessments, including host detection, port scanning, service fingerprinting, web vulnerability scanning, CVE verification, and report generation, all with unified JSON output and strict compliance controls.

OCI Secure Desktops MCP server

OCI Security Attribute MCP server

Open-source control center for the OpenAI Secure MCP Tunnel: register local MCP servers (stdio/HTTP), run and supervise the official tunnel-client, and connect ChatGPT / Codex through a desktop app, local web panel and CLI. No license key, zero runtime dependencies.

A plug-and-play security gateway for Model Context Protocol (MCP) servers. Adds JWT/OIDC authentication, RBAC, SQL firewall, OPA policy enforcement, taint tracking, DLP filtering, and a tamper-evident audit log — in front of any MCP server, with zero changes to your MCP implementation.

Security Review MCP server (pure Node/TypeScript, npx-ready)

Sysdig MCP server wrapping Sysdig Secure REST API endpoints

Cloud security scanning tools for AI agents. 7 purpose-built AWS scanners that check for misconfigurations across S3, IAM, EC2, EKS, RDS, CloudTrail, and CloudWatch Logs. Each scanner is a static ~2MB binary that outputs JSONL. Checks include public access, missing encryption, stale credentials, weak pa

🕷️ Turn PostgreSQL functions into a secure API: JSON-RPC, real-time SSE from LISTEN/NOTIFY, file & ZIP downloads, OpenAPI and MCP for AI agents. Every request runs as a real database role (GRANTs, RLS), with Basic or JWT auth. Single Go binary, zero boilerplate, Prometheus metrics.

Electric Blue MCP provides a Dockerized MCP server exposing a curated set of open‑source recon and application security tools (nmap, nikto, sqlmap, dirb, dnsrecon, wpscan, searchsploit, grype, syft). All tool calls are sanitized, time‑capped, output‑truncated.SBOM and vulnerability scanning to support supply chain visibility.

Claude Code Toolkit: a reproducible, verifiable Claude Code setup. Security-gated skill catalog pinned to reviewed commit SHAs, agents, hooks, MCP starters and Codex/Gemini/Vertex provider switching, installed with one command on Linux, macOS, Windows and WSL. TypeScript/Bun catalog CLI, upstream updates as reviewed PRs.

Claude Code skill for securely auditing and installing third-party MCP servers

Independent security audits of popular AI SDKs, agent frameworks, and MCP servers.

A secure, open-source OAuth gateway for MCP authentication

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Statically analyzes exported n8n automation workflows for security issues and returns structured findings.

Energy & Utilities Security MCP — sector cybersecurity regulatory intelligence via Model Context Protocol