Search

Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.

WAFtester — the most comprehensive WAF testing CLI & MCP server

Risk-aware CVE remediation for Node.js with agentic MCP/OpenAPI integrations, safe upgrade and patch fallback, policy controls, and evidence outputs.

DNS security intelligence MCP server — 104 tools for DNSSEC validation, hijacking detection, tunneling analysis, typosquatting, email security, certificate transparency, blocklist checking, infrastructure audit. 100% local, zero external API calls require

Test your MCP servers for breaking changes. Checks capabilities, invokes tools, detects schema drift between versions.

Regression testing for MCP servers. Checks capabilities, invokes tools, detects schema drift.

Discover every AI agent in your infrastructure. 5-layer detection: static analysis, network monitoring, eBPF/Kubernetes runtime, endpoint, and cloud audit (CloudTrail). Company-level correlation. AIBOM export. MCP server detection.

Security, cost, and health audit for MCP infrastructure

Security scanner for MCP (Model Context Protocol) tools

Runtime proxy for MCP security, cost governance & audit

Offensive security framework for AI agents and MCP servers

https://github.com/UPinar/contrastapi

The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Security scanner for AI agents and MCP servers. Scan local codebases or remote MCP servers in seconds.

Security gateway for Model Context Protocol (MCP) traffic. Blocks prompt injection, cross-repo exfiltration, and destructive commands.

Security auditor for Model Context Protocol (MCP) servers — scans tool definitions for prompt injection, tool poisoning, unsafe combinations, and other AI-native vulnerabilities.

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connectors, scheduled tasks, and permissions.

🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity

Open-source MCP/A2A security gateway — policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit for every AI agent tool call. OWASP ASI 2026 compliant.