Security MCP Servers

Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.

Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

Stdio MCP: 17 verifiable AIMarket oracles, 35 pay-per-call tools for AI agents.

Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained,…

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Stops agents double-charging across processes: exactly one execution, confirmed by the provider.

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email).

Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames,…

Core Web Vitals metrics by CMS, CDN, and framework — free remote MCP, no auth.

HTTP MCP gateway that attaches a principal to tool calls and SSE streams, with allowlists and vault rotation.

Trust and risk control plane for AI teams, with phases, routes and a package catalog.

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry…

Register/verify your domains, queue security scans, and read findings (CVE, severity).

Policy sidecar for any MCP server: deny-by-default tool allowlist with argument rules, call and USD budget caps, and a hash-chained audit…

Static scanner that checks Claude Code skills, plugins and MCP servers for exfiltration, install hooks and prompt injection before you…

Cryptographic receipts for AI outputs on Base or Solana via x402.

Fact-check LLM outputs with cited sources. API key: aihcc.cloud/keys.

Verify timestamp proofs offline, anchor hashes through ProofLedger, keep agent run receipts.

Was this document edited, did its redactions hold, is it safe for a model to read — Tamperlens API.

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

Default-deny action registry, append-only spend ledger, and human sign-off audit trail (MCP tools).

Zero-trust security proxy, pre-execution blast radius simulation, DLP secret redaction, and cryptographic audit logging for MCP.

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

Toxicity scores (0-1) for text before an agent posts it. Perspective API compatible. No LLM.

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI

Find MCP servers by describing a task and get advisory trust screens before connecting, using the mcpindex directory.

Fail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.

Verify artifacts produced by AI agents: schema, emptiness, provenance, authority.

Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

Offline, read-only auditing of MCP client configuration files with redacted findings

JSON risk briefs for wallet addresses, tokens and URLs: scores, flags and sources from phishing, scam and URL-reputation heuristics,…

Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.

Enterprise security and code-safety guardrail for AI agents featuring AST taint analysis, SARIF/SBOM generation, and policy gates.

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

Policy proxy for MCP tool calls. A denied call never reaches the downstream server.

Check messages, npm packages and crypto addresses before acting. Read-only scanner tools.

Offline security helpers for AI-built (vibe-coded) apps: classify whether a key is safe to expose, generate Supabase RLS audit SQL and…

Check the reputation of AI microservices and public APIs from an open trust registry.

The body an agent asks before it acts: decide, approve, and keep a signed record on your machine.

Read-only AWS audit scanner: public S3 buckets, root and user MFA gaps, unused access keys, world-open security groups, CloudTrail gaps,…

Free U.S. exclusion, debarment and licence screening with a signed receipt of the lists checked.