Security MCP Servers

Stdio + HTTP MCP gateway: SSRF-hardened web_fetch, web_search, metis_verify, market_search.

ARGUS-3 stdio MCP with WARDEN firewall: argus_ask, argus_status, argus_capabilities.

Runtime policy enforcement for AI agents: evaluate actions against organization policies before execution, in observe or enforce mode.

Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and…

Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.

Trust scoring, scam detection, and EAS attestations for ERC-8004 + x402 agents on Base.

Pre-execution governance for AI agents. Validates tool calls before they execute.

Package intelligence across many ecosystems: health, vulnerabilities (OSV, CISA KEV, EPSS), typosquats, malicious packages, alternatives…

Redact or anonymize PDFs: black boxes or consistent [Person 1] tags. EU/Swiss, no AI training.

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base.

Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and…

Scans AI-generated code for invisible Unicode, Trojan Source, and supply-chain threats.

Check an MCP server, skill or plugin before your agent uses it: tool text on record, changes graded.

Website safety and trust analysis. Verify domain reputation and detect phishing with GridinSoft.

Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc…

Burn-after-read encrypted notes. E2E encrypted, decentralised on the Internet Computer.

Scan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan…

Screen the counterparty of an x402 payment before an agent pays it. Runs offline by default.

Security scanner for AI agents that detects prompt injections using regex patterns.

Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

Compare recorded MCP tool definitions before reusing a saved tool selection.

Query AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU…

Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains

Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and…

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Deterministic fact verification for AI agents — checksums & curated data, not guesses.

Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.

Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and…

Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.

Enumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on…

Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox,…

Least-privilege compiler for agents: record real tool calls, compile a minimal policy, enforce it at an MCP gateway and keep a…

MCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.

Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.

Regulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety.

Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.

Admission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS…

Pre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.

Charge AI agents per-call without accounts. PoW solve = free tier, Lightning = paid tier.

Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.

Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

Stdio MCP: 17 verifiable AIMarket oracles, 35 pay-per-call tools for AI agents.

Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained,…

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Stops agents double-charging across processes: exactly one execution, confirmed by the provider.

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email).

Read-only safety checks for Base and EVM: honeypot and rug-pull detection, risky approvals, verified source, balances, ENS and Basenames,…

Core Web Vitals metrics by CMS, CDN, and framework — free remote MCP, no auth.

HTTP MCP gateway that attaches a principal to tool calls and SSE streams, with allowlists and vault rotation.

Trust and risk control plane for AI teams, with phases, routes and a package catalog.

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Transparent MCP proxy that keeps a signed, hash-chained audit trail of agent tool calls, with YAML policy enforcement and OpenTelemetry…

Register/verify your domains, queue security scans, and read findings (CVE, severity).

Policy sidecar for any MCP server: deny-by-default tool allowlist with argument rules, call and USD budget caps, and a hash-chained audit…