Search

Security gateway for MCP servers. Shadow-mode logs, per-tool policies, optional local Ed25519-signed receipts. Programmatic hooks for trust tiers, credential config, and external policy engines.

A transparent MCP security proxy: inspects tool descriptions for injection, pins tool definitions to detect rug-pulls, enforces a default-deny capability policy, and writes a tamper-evident audit log.

Comprehensive security scanner for MCP (Model Context Protocol) servers. 12+ analyzers, 117 YARA rules, ML-powered threat detection, dual scoring system. Detects prompt injection, tool poisoning and more

Local-first security scanner for AI agents, MCP servers and LLM apps: orchestrates Semgrep, Gitleaks, Trivy and pip-audit, then curates the findings down to what is real. 105 public scans, 24 confirmed fixes.

[glama](https://glama.ai/mcp/servers/bx33661/Wireshark-MCP) 🐍 🏠 - Wireshark network packet analysis MCP Server with capture, protocol stats, field extraction, and security analysis capabilities.

🦀 🏠 🚨 🍎 🪟 🐧 - A Rust-based MCP server bridging Wazuh SIEM with AI assistants, providing real-time security alerts and event data for enhanced contextual understanding.

Security MCP for vibe coding. 239 rules, 14 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.

🎖️ 📇 ☁️ 🍎 🪟 🐧 - [Mobb Vibe Shield](https://vibe.mobb.ai/) identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

Agentless, read-only Linux server security audit over SSH: vulnerability scanning (CVE, Trivy, KEV, EPSS), patch prioritization, SSH access & exposure checks, host health. Single Go binary with dashboard and MCP server for AI agents.

Defense-in-depth bundle for MCP stdio servers: drop-in guard for child_process.exec/spawn, AST audit CLI for unsanitized shell calls, and a reference MCP server that exposes both. Closes the Ox-Security 200k-server stdio-RCE class.

Security Command Center MCP server

580+ security tools + 860 Claude Code skills, one command. Modular bash installer for Linux & Termux (14 profiles, 18 modules) with an MCP server for AI-assisted ethical hacking — CTF, pentest, bug bounty, DFIR, red & blue team.

☁️ 🏠 - An MCP server based on dAWShund to enumerate AWS IAM data, analyze effective permissions, and visualize access relationships across users, roles, and resources. Built for cloud security engineers who want fast, easy and effective insights into AWS identity risk.

Local-first security for developers and their AI coding agents. Finds risky agent settings (hooks, auto-approve, unpinned MCP servers), API keys leaked into agent chats, and OS weaknesses, then fixes them. Single-file CLI and desktop app for Linux, macOS and Windows. No telemetry.

📇 🏠 🍎 🪟 🐧 - Security-hardened Chrome automation with post-quantum encryption (ML-KEM-768 + ChaCha20-Poly1305), secure credential vault, memory scrubbing, and audit logging. 22 tools for browser automation and secure logins.

RamiBot v3.7.3 is a local-first AI security operations platform integrating multi-LLM support, a dynamic red/blue team skill pipeline, MCP tool orchestration, Docker terminal access, Tor proxy management, and an auto-integrated Kali-based tool server (rami-kali) for controlled, extensible offensive and defensive workflows

Scan any MCP server for prompt injection, tool poisoning, leaked secrets, and destructive capabilities. One command, no key, no signup.

AxioRank content-inspection engine: detectors + risk scoring for AI agent tool calls. Catches secrets, prompt injection, PII, destructive ops, and egress. Pure, universal, zero runtime dependencies.

Find what AI agents read but humans can't see — hidden prompt injection in files, web pages, PDFs, Office docs and MCP servers. CLI, Claude Code plugin, GitHub Action, library.

Sandbox workspace tools: search, file read, DB queries, integrations. Returns synthetic data.