Search

A standardized security evaluation framework for MCP servers, including assessment templates and an automated vulnerability scanner. This registry helps developers identify secure implementations for AI applications and promotes best practices across the MCP ecosystem.

Keyless MCP security shield: wrap any MCP server so every tools/call is screened and recorded; set the posture to enforce and a blocked call comes back as coaching your agent recovers from. Launcher for agentx-security-sdk.

ShieldNet Security Scanner — MCP Server for AI Agent Security Governance. Scans URLs for XSS, SQLi, SSTI, CORS misconfig, missing headers, info disclosure, and more. Returns ALLOW/WARN/BLOCK governance decisions.

OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan, prompt injection detection, tool poisoning check, excessive agency, data leakage. Built by MEOK AI Labs.

A Retrieval-Augmented Generation (RAG) system that indexes the OWASP Web Security Testing Guide (WSTG) into a vector database, providing instant access to security testing methodologies via MCP (Model Context Protocol) for Claude Code integration.

SECURITY HOLD (not the real package). The name @tekionai/mcp-client was unregistered on the public npm registry while Tekion's TekionAI MCP setup documentation instructs `npx @tekionai/mcp-client`. Reserved by an authorized security researcher via the Int

The security-native AI coding agent. Six Sec-Test security personas, compliance-first /scraper, a business documents & research suite, and multi-agent Compose orchestration — spec-driven workflow engines in one terminal-first CLI.

Vibe code fast. Ship like an engineer. AI engineering framework packaged as an MCP server that enforces TDD, security scanning, pentesting, secret management, QA audits, and deployment to a securely configured VPS — automated with up to 100× fewer exploration tokens.

Intervention Security MCP server — give your AI agent free and pay-per-call (x402 USDG on Robinhood Chain) smart-contract and code security scans, plus a read-only Guard preflight. Thin hosted client; no engine or rules bundled.

Kotlin MCP server that maps app tech stacks to secure, fully provisioned AWS infrastructure via Terraform (+ Helm for EKS): generate → validate → plan → apply with checkov/kube-score security gating, infracost cost estimation, and drift detection.

Two-component system bridging Kali Linux penetration testing tools with AI agents via MCP. Flask API server executes 10+ security tools (Nmap, SQLMap, Metasploit, etc.) while MCP client provides seamless AI integration for automated security workflows.

MCP-Sentry is a Python-based security scanner for MCP servers and related services. It analyzes configurations and behaviors for common risks like credential leakage, SSRF, path traversal, weak authentication, transport security issues, and unvalidated input, then generates structured reports and scoring output.

Mythos-class autonomous smart contract security reasoning engine. Bloodhound maps protocol state-spaces, identifies complex logic gaps, and chains anomalies into verified exploit hypotheses using a model-agnostic LLM loop. Built for deep EVM auditing and agentic security workflows.

🚀 Enterprise MCP Server with Admin Panel & Role-Based Security Production-ready Model Context Protocol server with FastAPI backend, React frontend, and advanced security features. ✨ Features: Admin Panel • RBAC • AI Analytics • File Management • Real-time Streaming Built with FastAPI, React, and modern web technologies.

Barndoor — independent third-party profile of a public API surface, by API Evangelist. Barndoor AI is the control plane for agentic AI, providing secure access and governance for AI agents and Model Context Protocol (MCP) servers. Founded in 2024 by Oren Michels (founder of Mashery), Barndoor enables enterprise IT, security, and developer teams to

a2a and mcp server with spring security , secure your agent with spring based security features

[](https://glama.ai/mcp/servers/Skyrxin/sast-mcp-server) 🐍 🏠 🍎 🪟 🐧 - SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).

Symbiotic Security

An AI driven Threat Analysis of Embedded Projects using MITRE EMB3D

Command-line interface for ID Wispera credential governance