Search

v0.1 policy-synthesis (descriptor-only) for MCP-server RCE defense: landlock/sandbox-exec/cgroups-v2 profile builder + CVE-replay predicates + canary tracker + append-only NDJSON audit log. v0.2 adds native enforcement + verified Acra-pattern audit-log si

Convert MCP server configuration between clients (Claude Desktop, Claude Code, Cursor, VS Code, Codex, OpenCode)

[](https://glama.ai/mcp/servers/gostanos/smallprint-action) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Four read-only tools over the public record, including a yes-or-no ch

A macOS menu bar app that checks unfamiliar code before it runs: fake interview projects, fake meeting apps, poisoned npm packages, malicious VS Code extensions, MCP servers and AI skills. Offline rules first, optional AI review.

Scan, lock, and gate your MCP servers — npm audit + lockfile + CI drift gate for the MCP era

No description available

Google SecOps MCP server

🎖️ 🏎️ ☁️ 🍎 🪟 🐧 - vet-mcp checks open source packages—like those suggested by AI coding tools—for vulnerabilities and malicious code. It supports npm and PyPI, and runs locally via Docker or as a standalone binary for fast, automated vetting.

Permission-aware retrieval for RAG: every user gets only the chunks they are allowed to read.

MCP server exposing 3ilm — a curated knowledge base of 1,032 smart contract vulnerability findings from 10 fully-reconciled Sherlock audit contests. Search patterns by keyword, get acceptance rates, and learn from real accepted/rejected examples.

Fail-closed stdio transport firewall for MCP JSON-RPC tool traffic

校园安防助手 MCP 服务器

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

Google Threat Intelligence MCP server

Google SecOps SOAR MCP server

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com

Audit your MCP servers for tool poisoning, credential exposure, and supply-chain risk. Zero dependencies. Nothing is executed.

Local static scanner for MCP setup, prompts, tool descriptions, and repo manifests.

This package has moved to webcrypt

Arcis MCP server. Exposes Arcis CLI scanners (audit / scan / sca) and the prompt-injection detector as tools that Cursor and any other MCP-aware AI agent can call. One install, four tools, zero cloud round trip.