Search

npm install, reimagined for AI agents: an MCP server that vets npm releases against the package's own history before an agent installs them

Lean & Secure Bot

Scan your machine for known AI-coding-assistant supply-chain backdoor indicators (Claude Code / Cursor / Windsurf extensions, MCP servers) plus risky hook/permission config patterns.

Supply chain risk scorer for npm, PyPI, Cargo, and Go packages — behavioral signals that can't be faked

OAuth 2.1 + PKCE authorization server for MCP servers, powered by Grantex

Static analyzer and lockfile for AI-agent context files

MCP compatibility adapter for Agent Tool Protocol

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

Read-only Supabase RLS check: explains in Arabic which tables anyone can read or change. No keys.

Protect your AI agents and IDEs from malicious open-source packages.

OWASP GenAI Security Project curated corpus -- source of truth for the genai-security-advisor skill (via submodule) and the GenAI-Security-Advisor-MCP server (via live fetch)

An MCP server that exposes a 216-rule Kotlin/JVM security analyzer to AI coding agents, enabling real-time security scanning and secure pattern retrieval for frameworks like Spring and Ktor.

Secure Chain Team

MCP server for AWS security posture assessment and intelligent remediation - Enterprise-grade security analysis with 95/100 security score

Official website and documentation hub for the Model Context Protocol Security initiative. Provides security guidance, best practices, tools, and community resources for safely deploying MCP servers and AI agents. A Cloud Security Alliance community project.

AI Security Gateway

Qwiet / Harness SAST & SCA MCP server (stdio)

resolve like require.resolve() on behalf of files asynchronously and synchronously

Security scanner for MCP servers

Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.