Security MCP Servers

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

Permission tiers, approval gates, and audit logging for MCP servers - the server is the gatekeeper

Fair-price checks for Japanese renovation quotes, with sources and recomputable records.

Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.

Needs the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your data

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

Cross-repository code knowledge graph for Java, Kotlin, JavaScript and TypeScript: call-flow tracing, taint analysis, reachability and…

Redacts emails, phone numbers, national IDs, private keys and financial data before text reaches LLMs, in English, Spanish, Portuguese,…

Gate for coding agents' MCP and built-in tool calls: rules, approvals and hash-chained receipts

Identity certificates, public registry, and wishing well for AI agents — x402 micropayments on Base

Write, validate and convert Sigma detection rules for Splunk, Elastic, Kibana and Wazuh, backed by a rule corpus covering MITRE ATT&CK…

Generate zero-knowledge proofs of identity claims (Coinbase KYC, country, Google OIDC, Microsoft 365) without revealing personal…

URL intelligence for AI agents and developers. 16 tools, 25 signal weights, 20 free checks.

Trust layer for AI agents: identity, guard, redact, escrow, and x402 payments.

Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.

Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain…

Stdio + HTTP MCP gateway: SSRF-hardened web_fetch, web_search, metis_verify, market_search.

ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.

Runtime policy enforcement for AI agents: evaluate actions against organization policies before execution, in observe or enforce mode.

Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and…

Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.

Trust scoring, scam detection, and EAS attestations for ERC-8004 + x402 agents on Base.

Pre-execution governance for AI agents. Validates tool calls before they execute.

Package intelligence across many ecosystems: health, vulnerabilities (OSV, CISA KEV, EPSS), typosquats, malicious packages, alternatives…

Redact or anonymize PDFs: black boxes or consistent [Person 1] tags. EU/Swiss, no AI training.

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base.

Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and…

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

Check an MCP server, skill or plugin before your agent uses it: tool text on record, changes graded.

Website safety and trust analysis. Verify domain reputation and detect phishing with GridinSoft.

Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc…

Burn-after-read encrypted notes. E2E encrypted, decentralised on the Internet Computer.

Scan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan…

Screen the counterparty of an x402 payment before an agent pays it. Runs offline by default.

Security scanner for AI agents that detects prompt injections using regex patterns.

Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

Compare recorded MCP tool definitions before reusing a saved tool selection.

Query AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU…

Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains

Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and…

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Deterministic fact verification for AI agents — checksums & curated data, not guesses.

Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.

Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and…

Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.

Enumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on…

Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox,…

Least-privilege compiler for agents: record real tool calls, compile a minimal policy, enforce it at an MCP gateway and keep a…

MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.

Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.

Regulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety.

Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.

Admission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS…

Pre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.

Charge AI agents per-call without accounts. PoW solve = free tier, Lightning = paid tier.