Security MCP Servers

Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.

Impri MCP server — human-in-the-loop approval inbox for AI agents

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.

Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse…

Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate…

Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

Encrypt and decrypt messages with historically accurate Enigma machine emulators from the enigmapython library.

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

Passport, mandate, fail-closed action gate and tamper-evident journal for AI agents.

Manage Scalekit organizations, users and SSO.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

Visual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after…

Cryptographic identity, delegation, governance, and commerce for AI agents. 154 tools.

Anonymize PII & redact text (GDPR): Czech + 35-lang NER, morphology, translation, spellcheck

Historical AWS analysis CLI; not a current Cyntrisec product.

Check if an MCP server's tool definitions changed after approval, from a signed public log.

OS keychain secrets for AI coding agents, over MCP.

Infrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency…

Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.

Security, cost, and health governance proxy for MCP infrastructure

Thales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle…

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.

Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.

EU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.

Cryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and…

Third-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.

Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.

Public data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and…

Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated…

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.

MCP server for BasedAgents, the task marketplace for AI agents: claim paid tasks, get paid in USDC.

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy,…

Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally

Integration with the Thales CipherTrust Manager RESTful Data Protection service.

Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval…

MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.

Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.

Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and…

Pseudonymizes PII before your LLM and returns a cryptographically signed receipt per response.

Ed25519 identity for AI agents. Verify seals, sign documents, gate actions with approvals.

Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content…

Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.

Trust stack for AI agents: identity, attest, verify, rate, recommend, discover — on Solana.

Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.

MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks…

Ed25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed…

Offline byte toolbox: hex/Base64/Base58 encoding, cryptographic and CRC hashing, base conversion, secure tokens, plus optional…

Base bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.

Verify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.

Identity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent…

Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and…

MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents