MCP Servers

Encrypted secrets vault for AI agents stores API keys in AES-256-GCM and resolves them at MCP runtime so plaintext never touches the LLM transcript.

Azure DevOps MCP

Integrates with Azure DevOps, allowing interaction with its services. Requires a Personal Access Token (PAT) for authentication.

TaskBounty Check

Local-only MCP, CLI, and GitHub Action that checks GitHub Actions and CI maintenance risks without modifying code or making outbound requests by default.

@4da/mcp-server

Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.

Kodus OSV

Open source vulnerability lookup via osv_query/osv_query_batch tools.

TLS MCP Server

Analyze TLS certificates using OpenSSL and zlint.

Agent Prompt Injection Audit

Security scanner for MCP servers and AI agent tooling. Detects prompt injection, command injection, auth bypass, and excessive permissions.

Local Code Security Scan

MCP Server for local code security scanning - detects secrets, vulnerable dependencies, and insecure code patterns

webear and web perception

Give your AI real senses (audio, visuals, performance, network, security, and console logs) in real time from any running web application.

Tripwire MCP

Security gateway that blocks prompt-injection-driven tool calls (poisoned payments, fabricated results) using cryptographic receipts, value-provenance enforcement, and multi-model consensus. Sits in front of any MCP server.

Spring Boot Actuator MCP

Spring Boot Actuator MCP server — analyzes health, metrics, environment, beans, and startup endpoints. Detects configuration issues and security risks with actionable recommendations.

npm Registry MCP

Search packages, check versions, audit vulnerabilities and compare libraries directly from the npm registry (no API key required)

Fetter MCP

Get the most-recent Python package without vulnerabilities, and more.

MCP Vaultwarden Connector

Provides a bridge for scripts and AI agents to interact with a self-hosted Vaultwarden instance.

Vulnfeed MCP

Dependency vulnerability scanner with EPSS exploit scoring. Scans lockfiles, prioritizes by actual exploit probability, recommends fix versions. 9 MCP tools. Free tier + $14/mo subscription + x402 micropayments.

AILint

AI-powered code quality analysis to detect best practice violations, security issues, and architectural problems in real-time.

pdfnative PDF Engine

Local-first PDF engine for AI agents. Zero-dep TypeScript, PDF/A, signatures, 800+ pages/sec.

mcp-code-sanitizer

Strict AI code reviewer powered by Groq. Finds bugs, SQL injections, hardcoded secrets and vulnerabilities. Scores code 0–100 with concrete fixes.

MCP Config Doctor

Diagnose, secure, and benchmark your MCP servers

Shrike Security

AI agent security scanner — protect LLM-powered apps from prompt injection, SQL injection, data exfiltration, and adversarial attacks via MCP.

Network Monitor MCP Server

A server for real-time network packet monitoring and security analysis.

AgentStamp

Trust intelligence platform for AI agents — identity certification, trust scoring, forensic audit trails, and x402 micropayments. 14 MCP tools.

pyobfus Python Obfuscator

Official MCP server for the pyobfus Python obfuscator — pre-flight risk scan, framework-aware config init, reverse stack-trace mapping

MGC Blackbox

A local execution vault for AI Agents: providing encrypted key authorization, encrypted task‑chain execution, and controlled external execution permissions. It preserves the high‑efficiency execution capability of AI while protecting user data and cognitive assets — putting a real harness on AI (AI Harness).

GhostHunt Secret Scanner

Find every leaked secret on your machine. Scans .env files, shell history, and config directories for API keys, tokens, and credentials. Everything runs locally.

Authn8

Access your team's 2FA codes from AI agents without sharing secrets. List accounts, generate TOTP codes, and maintain full audit trails

ServerCard Trust MCP

Trust checks for MCP server cards and metadata.

Cloudgate Builder MCP Server

Build and ship live APIs from chat. No servers to manage. Cloudgate Builder lets Claude create and run real workflow-APIs in your Cloudgate workspace. Sign in once with OAuth and your endpoints go live instantly.

Agent Identity Trust MCP

Agent identity and trust framework — DID verification, capability attestation, agent-to-agent authentication by MEOK AI Labs

WatchTower

Cost tracking + security scanning for AI builders