Search

📇 🏠 🍎 🪟 🐧 - Deterministic security proxy (iptables for MCP) that intercepts tool calls, enforces YAML policies, scans for secret leakage, and logs everything. No AI, no cloud.

🏎️ 🏠 - Conversational recon interface and MCP server powered by httpx and asnmap. Supports various reconnaissance levels for domain analysis, security header inspection, certificate analysis, and ASN lookup.

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 specialized tools compatible with any MCP client

Cybersecify -- Security agent for AI developers. Scan MCP servers, check packages, audit dependencies, verify repos, check agent threats. Works in Cursor, Claude Desktop, any MCP client.

A transparent MCP security proxy: inspects tool descriptions for injection, pins tool definitions to detect rug-pulls, enforces a default-deny capability policy, and writes a tamper-evident audit log.

Aegis: universal AI agent security. One decorator, any framework, full protection. Deterministic capabilities, argument-level policy, data provenance, MCP guard, sandboxed execution, and tamper-evident audit.

Security gateway for MCP servers. Shadow-mode logs, per-tool policies, optional local Ed25519-signed receipts. Programmatic hooks for trust tiers, credential config, and external policy engines.

Security auditor for MCP servers. Finds tool descriptions carrying hidden instructions, annotations that contradict their own schema, over-shared credentials, and pairs of tools that together form a path off your machine. Runs entirely offline.

🐍 ☁️ 🏠 🐧 🪟 - MCP server for Thales CDSP CAKM integration, enabling secure key management, cryptographic operations, and compliance monitoring through AI assistants for Ms SQL and Oracle Databases.

Open-source WAF bypass toolkit — 4,300+ payloads, 35+ recon checks, 98 WAF/CDN vendors, AI-assisted bypass, security hardening. For pentesters, bug bounty hunters, and DevSecOps.

[glama](https://glama.ai/mcp/servers/bx33661/Wireshark-MCP) 🐍 🏠 - Wireshark network packet analysis MCP Server with capture, protocol stats, field extraction, and security analysis capabilities.

MCP server for FinishKit - enables AI agents (Claude, GPT, Gemini) in Cursor, Claude Desktop, Windsurf, and VS Code Copilot to scan GitHub repositories for security vulnerabilities, deployment blockers, and code quality issues

MCP server for secure coding and compliance — full MITRE CWE corpus, ISO 27001, NIST 800-53, OWASP ASVS, NIST SSDF, ISO 27017 — with official cross-framework mappings and enforcement hooks

AI-powered security scanner delivered as an MCP server and CLI. Detects secrets, auth bugs, SQL injection, and vulnerable dependencies — and opens fix PRs — directly inside Cursor, Claude Code, and VS Code.

MCP server: security scanner for AI-generated code — the agent scans its own code/diff before committing. Detects injection, SSRF, hardcoded secrets, weak crypto, unsafe deserialization, TLS-off, XSS. Deterministic, free, no LLM.

Agent Identity Protocol MCP server providing cryptographic identity verification, trust chain management, and secure messaging for AI agents via 8 tools including DID creation, challenge-response verification, vouching, and artifact signing.

🐍 🏠 - All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.

Enterprise-grade MCP (Model Context Protocol) server for Perforce P4 integration with AI assistants. Features 37+ Perforce operations including merge resolution, shelving, advanced search, blame annotations, and comprehensive security with audit logging,

Defense-in-depth bundle for MCP stdio servers: drop-in guard for child_process.exec/spawn, AST audit CLI for unsanitized shell calls, and a reference MCP server that exposes both. Closes the Ox-Security 200k-server stdio-RCE class.

Security gateway for Model Context Protocol servers: policy enforcement, secret redaction, prompt-injection screening, tool rug-pull detection, rate limiting, human approval gates, and audit logging — one drop-in proxy, zero infrastructure.