MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
—
MIT -
agent-security-lensgithub.com/professor2k8/agent-security-lensupdated this year
MCP security trust-check server for autonomous agents: safe install decisions, risk signals, controls and alternatives before installing MCPs, Skills or tools.
npm Apache-2.0 -
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
npm MIT ★ 123 -
An MCP-based security scanner and agentic AI for vulnerability detection
npm MIT -
Security auditor for AI agents and MCP servers — config analysis, prompt injection testing, tool probing, data flow tracing
npm MIT -
Claude Code security plugin and agentskills.io skill pack for securing LLM agents: threat modelling, config audits, prompt injection review, MCP server review, incident lookup, security evals, Semgrep rules, guard hooks and an incident-database MCP server.
MIT -
agent-security-mcpgithub.com/mdfifty50-boop/agent-security-mcpupdated this year
MCP server providing security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows
npm MIT -
microsoft-security-agent-toolkitgithub.com/vinayaklatthe/microsoft-security-agent-toolkitupdated this year
Action layer for Microsoft Security AI agents - MCP servers, KQL snippets, Logic Apps templates, and end-to-end demos that pair with microsoft-security-skills
MIT ★ 2 -
Agentic GitHub security auditing and remediation — audit, plan, fix, verify, with before/after evidence for review. TypeScript, MCP server (stdio + streamable HTTP), Claude skills/agents/hooks, Cursor rules, GitHub Actions. Demo: parallel repo workers, conservative patch strategy, PR or direct fix.
-
agent-security-mcpgithub.com/mdfifty50-boop/agent-security-mcpupdated this year
MCP server providing security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows
-
Deterministic AI security scanner | Prompt injection detection | x402 USDC
-
A Model Context Protocol (MCP) server that provides security functionality for AI agents, focusing on detecting and redacting sensitive information in text content.
★ 2 -
Your coding agent builds the site; this makes it prove the site is secure before you ship. 102 checks, evidence and fixes. Skill + MCP server for Claude Code, Codex, Cursor.
MIT ★ 1 -
secure-rag-multi-agentgithub.com/ssdeanx/secure-rag-multi-agentupdated this year
Secure Retrieval-Augmented Generation (RAG) with role-based access control using Mastra AI orchestration, with JWT Secure, also Deep Research built with Cedar & Next.js. Gemini, OpenAI, Openrouter, & Gemini CLI usable. Also exposes tools, agents as MCP Server Also A2A Agent Cards
NOASSERTION ★ 19 -
arc-security-mcpgithub.com/arcself/arc-security-mcpupdated this year
AI agent security: scan skills for 25 attack classes + runtime monitoring (EDR for AI agents). Real-time scanning, behavioral anomaly detection, session monitoring, exfiltration alerts. 1,316+ findings from 450+ audits. OWASP Agentic AI Top 10 mapped.
npm MIT -
MCP server for Website Security Snapshot API — scan HTTP security headers from Claude and AI agents
npm MIT -
security-mcp-suitegithub.com/guanpengzhang0-spec/security-mcp-suiteupdated this year
5 MCP servers that give AI agents autonomous security scanning — nmap, nuclei, trivy, sqlmap, gitleaks
MIT -
GitHub security posture audit tools for AI agents — organization, repository, Actions, secrets, supply chain analysis via MCP
npm MIT -
MCP server for AI agents to scan and audit smart contracts on Base for security vulnerabilities. Detect honeypots, rug pulls, hidden mints, proxy risks, and generate full audit reports.
npm MIT -
github-security-mcpgithub.com/badchars/github-security-mcpupdated this year
GitHub security posture analysis for AI agents — 39 MCP tools, 45 checks across org, repos, Actions, secrets, supply chain, and access control
npm MIT ★ 15 -
agent-immunegithub.com/denial-web/agent-immuneupdated this year
Adaptive threat intelligence for AI agent security — semantic memory, multi-turn escalation, output scanning, rate limiting, and prompt hardening.
pypi Apache-2.0 -
Local security fence and GitHub Action for AI coding agents — detect secrets, risky commands, and unsafe network actions before they run.
npm Apache-2.0 -
cloud-audit-mcpgithub.com/badchars/cloud-audit-mcpupdated this year
Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vulns, not you.
MIT ★ 23 -
mcp-server-security-auditgithub.com/joepangallo/agent-auditupdated this year
MCP server for MetalTorque Security Audit — gives AI agents the ability to scan websites for security vulnerabilities.
npm MIT -
Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial testing, and real-time threat detection.
pypi AGPL-3.0 ★ 21 -
pluto-aguardgithub.com/arshan846/pluto-aguardupdated this year
Security scanner and launch gate for AI agents & MCP apps — config scanning, policy coverage, risk modeling, drift detection, CI/SARIF, and launch-readiness evidence
Apache-2.0 ★ 4 -
agent-immunegithub.com/denial-web/agent-immuneupdated this year
Adaptive threat intelligence for AI agent security — semantic memory, multi-turn escalation, output scanning, rate limiting, and prompt hardening.
Apache-2.0 -
Connect AI agents to AuditHub’s blockchain security tools. Launch scans, review findings, monitor tasks. Open source, Apache 2.0.
Apache-2.0 ★ 22 -
zngithub.com/usezn/znactive
The local security layer for coding agents. Use Claude Code, Codex CLI, Cursor, OpenCode, Antigravity or the ZCode desktop app without exposing your secrets, your data or your systems. Open source (MIT), no account, nothing sent by default.
npm MIT ★ 5 -
@johndoe20012/vibedefender-mcpgithub.com/yunusj/vibedefender-mcpupdated this year
Security Knowledge MCP Server - Guides AI agents through security assessments with methodology, documentation, and workflows
npm MIT -
Secure SQL proxy for AI agents — AST safety, per-agent RLS, audit log, MCP-native.
MIT ★ 1 -
vigile-mcpgithub.com/vigile-ai/vigile-mcpupdated this year
MCP server for Vigile AI Security — query trust scores for MCP servers and agent skills from within Claude Code, Cursor, and other AI agents
npm MIT -
everthread on npm: a plain-English website security check for the terminal, plus an MCP server for agents
MIT -
Security co-pilot for AI agents. Scan for vulnerabilities, verify governance, audit MCP servers, and generate compliance reports — all from Claude, Cursor, or any MCP client.
npm Apache-2.0 -
suprawall-mcp-plugingithub.com/wiserautomation/suprawall-mcp-pluginupdated this year
Official SupraWall MCP (Model Context Protocol) Security Plugin. Enforces deterministic guardrails, least-privilege tool access, and PII interception for AI agents.
★ 4 -
Declaw -- Secure AI Sandboxesno update data
Secure runtime for AI agents. Run AI agents and their tools in Firecracker microVMs with network policies, PII scanning, prompt injection defense, and audit logging. 7 tools: create_sandbox, run_command, read_file, write_file, list_files, kill_sandbox, list_sandboxes. Security presets (none / standard / strict) let you control guardrails per sandbox: restrict outbound traffic to specific domains, redact PII from command output, block prompt injections, and get full audit trails.
smithery -
MCP security server for AI agents — runtime verification and receipt verification for Claude Code, Cursor, Cline and Windsurf. 7-dimension CCS checks, Ed25519 tamper-evident receipts, offline verification, zero runtime dependencies.
npm Elastic-2.0 -
Enhanced distribution of HOL Guard: AI agent runtime security with MCP server, African threat intelligence, benchmarks, and architecture visualization
NOASSERTION -
agentauditgithub.com/agentaudit-dev/agentaudit-cliupdated this year
Security scanner for AI agent packages — CLI + MCP server
npm AGPL-3.0 -
Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.
Apache-2.0 ★ 70 -
spidershield-mcpgithub.com/teehooai/spiderratingupdated this year
SpiderRating MCP Server — security scanning and trust scores for MCP servers and agent skills
npm MIT -
Adversarial Co-Generation Engine — concurrent Builder+Breaker agents for production-grade AI code security
MIT ★ 1 -
@vettiq/mcp-servergithub.com/lumeniqjs/vettiq-platformupdated this year
VettIQ MCP server — security scanning for AI-generated code, callable from Cursor, Claude Code, and any MCP-compatible agent.
npm UNLICENSED -
Security layer for AI agents: real-time interception of pip/npm/cargo/gem/go installs via Hermes & OpenClaw plugins, Claude Code/Codex hooks, MCP, shell guard, PATH shim, execve, and index proxy. Checks CVEs (OSV/NVD/GitHub), typosquats, malware, licenses, provenance, trust, lockfile hashes. Offline mirror, hash-chained audit, SBOM/SARIF.
MIT ★ 4 -
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.
MIT ★ 12 -
read-no-evil-mcpgithub.com/thekie/read-no-evil-mcpupdated this year
A secure email gateway MCP server that protects AI agents from prompt injection attacks hidden in emails.
Apache-2.0 ★ 4 -
Zero-dependency Web Crypto suite & Model Context Protocol (MCP) server for AES-256-GCM, RSA-4096, and AI agent security.
MIT ★ 14 -
Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.
npm MIT -
zeropath-agent-plugingithub.com/ZeroPathAI/zeropath-agent-pluginupdated this year
ZeroPath plugin for AI code agents — bring AppSec scanning (SAST, secrets, SCA, IaC), finding triage, and security context into Claude Code from chat.
MIT -
A security-focused Model Context Protocol server for GnuPG: sign, verify, encrypt, decrypt and manage keys without exposing private key material to the agent.
MIT ★ 2 -
read-no-evil-mcpgithub.com/thekie/read-no-evil-mcpupdated this year
A secure email gateway MCP server that protects AI agents from prompt injection attacks in emails
pypi Apache-2.0 -
Free passive security scanning for AI agents. Check any domain for email spoofing (DMARC/SPF/DKIM), TLS, security headers, exposed files, and subdomain takeover risk — using public information only, no intrusive probing.
npm MIT -
MCP server interface for AI agent and MCP security auditing — config analysis, trust audits, prompt injection testing, tool probing, and data flow tracing
npm MIT -
A read-only security triage agent — it reads a detection incident or scan finding, adds MITRE guidance, and asks a model for a structured verdict. It only reads and suggests, never acts.
MIT ★ 1 -
Check a website's security in plain English from the terminal, or give your AI agent the tool. Free, no key.
npm MIT -
MCP server that gives AI agents a local security scanner before they install or trust third-party tools.
MIT ★ 4 -
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, and LLM model security auditing.
npm MIT -
owasp-agentic-mcpgithub.com/csoai-org/owasp-agentic-mcpupdated this year
OWASP Top 10 for AI Agents security assessment tools. Capabilities: full agent security scan, prompt injection detection, tool poisoning check, excessive agency, data leakage. Built by MEOK AI Labs.
pypi MIT License -
Ironheights: The Immune System for AI Agents. Protects any AI bot that installs it: local security scanner for agent skills (OpenClaw, Claude, Grok Bot, Codex, Cursor, MCP), threat-model PR checks, MCP server, drift guard and posture report.
npm Apache-2.0 -
mvmtgithub.com/philipnee/mvmtupdated this year
security layer between your data and agent!
MIT ★ 2