Security MCP Servers

Visual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after…

Cryptographic identity, delegation, governance, and commerce for AI agents. 154 tools.

Anonymize PII & redact text (GDPR): Czech + 35-lang NER, morphology, translation, spellcheck

Historical AWS analysis CLI; not a current Cyntrisec product.

Check if an MCP server's tool definitions changed after approval, from a signed public log.

OS keychain secrets for AI coding agents, over MCP.

Infrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency…

Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.

Security, cost, and health governance proxy for MCP infrastructure

Thales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle…

11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.

Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.

EU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.

Cryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and…

Third-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.

Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.

Public data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and…

Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated…

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.

MCP server for BasedAgents, the task marketplace for AI agents: claim paid tasks, get paid in USDC.

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy,…

Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally

Integration with the Thales CipherTrust Manager RESTful Data Protection service.

Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval…

MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.

Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.

Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and…

Pseudonymizes PII before your LLM and returns a cryptographically signed receipt per response.

Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content…

Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.

Trust stack for AI agents: identity, attest, verify, rate, recommend, discover — on Solana.

Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.

MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks…

Ed25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed…

Base bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.

Verify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.

Identity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent…

Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and…

MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

Permission tiers, approval gates, and audit logging for MCP servers - the server is the gatekeeper

Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.

Needs the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your data

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

Cross-repository code knowledge graph for Java, Kotlin, JavaScript and TypeScript: call-flow tracing, taint analysis, reachability and…

Redacts emails, phone numbers, national IDs, private keys and financial data before text reaches LLMs, in English, Spanish, Portuguese,…

Gate for coding agents' MCP and built-in tool calls: rules, approvals and hash-chained receipts

Identity certificates, public registry, and wishing well for AI agents — x402 micropayments on Base

Write, validate and convert Sigma detection rules for Splunk, Elastic, Kibana and Wazuh, backed by a rule corpus covering MITRE ATT&CK…

Generate zero-knowledge proofs of identity claims (Coinbase KYC, country, Google OIDC, Microsoft 365) without revealing personal…

URL intelligence for AI agents and developers. 16 tools, 25 signal weights, 20 free checks.

Trust layer for AI agents: identity, guard, redact, escrow, and x402 payments.

Governed OPNsense + pfSense firewall ops: rules, NAT, VPN, DHCP, RCA. 35 tools.

Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain…