安全 MCP 服务器
安全 分类 — 344 个 MCP 服务器,按 GitHub star 数排序。
verify-mcp
Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.
Impri
Impri MCP server — human-in-the-loop approval inbox for AI agents
Lachesis
Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.
ida-headless-mcp
Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse…
AgentAvow
Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate…
cmdxray
Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.
mcpwall
iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.
enigma-python-mcp
Encrypt and decrypt messages with historically accurate Enigma machine emulators from the enigmapython library.
patch-tuesday-mcp
Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
MolTrust MCP Server
Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.
kepil
Passport, mandate, fail-closed action gate and tamper-evident journal for AI agents.
scalekit-mcp-server
Manage Scalekit organizations, users and SSO.
PCI DSS v4.0.1 Compliance Checker
PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server
osv-ui
Visual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after…
Agent Passport System — Cryptographic Identity for AI Agents
Cryptographic identity, delegation, governance, and commerce for AI agents. 154 tools.
Czech PII Anonymizer & NLP
Anonymize PII & redact text (GDPR): Czech + 35-lang NER, morphology, translation, spellcheck
Cyntrisec CLI (Historical)
Historical AWS analysis CLI; not a current Cyntrisec product.
mcp-pin
Check if an MCP server's tool definitions changed after approval, from a signed public log.
q-ring
OS keychain secrets for AI coding agents, over MCP.
shohei
Infrastructure diagnostics: DNS checks, TLS certificate chain inspection, email security, global DNS propagation and DNS latency…
qURL
Mint, resolve, audit, and rotate scope-limited expiring access links (qURLs) for AI agents.
mcp-guardian
Security, cost, and health governance proxy for MCP infrastructure
thales-cdsp-cakm-mcp-server
Thales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle…
SAST MCP Server
11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations
VMware Harden
VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.
solvitor-mcp
Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.
air-blackbox-mcp
EU AI Act compliance scanner for Python AI agents. 14 tools across 6 articles.
agent-trust-stack-mcp
Cryptographic provenance, blind reputation scoring and tamper-evident logging for agent interactions, with dispute resolution and…
arkforge-mcp
Third-party certifying proxy that signs any HTTP call with an independent Ed25519 signature, RFC 3161 timestamp and Sigstore Rekor anchor.
calllint
Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
datanexusmcp/mcp-server
Public data lookups: CVE/SBOM security audits, license compliance, patents, federal contracts, NPI providers, nonprofit 990 filings and…
claude-plugin
Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated…
inkog-mcp
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
agentseal-mcp
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.
basedagents
MCP server for BasedAgents, the task marketplace for AI agents: claim paid tasks, get paid in USDC.
privacyscrubber-mcp
Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.
Keycloak Admin
Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.
noor202401938-netizen/cyber-chef-mcp
CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy,…
OSINT Toolbox
Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally
thales-cdsp-crdp-mcp-server
Integration with the Thales CipherTrust Manager RESTful Data Protection service.
AgentValet
Identity and credential broker for MCP servers: issues scoped, short-lived credentials per agent, with audit logging and human approval…
aggrete
MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.
chronoverify-mcp
Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.
sicarius-guard
Solana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and…
lucairn-sdks
Pseudonymizes PII before your LLM and returns a cryptographically signed receipt per response.
waxseal-sdk
Ed25519 identity for AI agents. Verify seals, sign documents, gate actions with approvals.
ssid-mcp
Router default logins, compliance index, MAC/OUI lookup. Reads free; submit_correction is Pro.
taskbounty-check
Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.
fetch-guard
URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content…
SpendShield
Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.
MINT Protocol — Universal Work Attestation
Trust stack for AI agents: identity, attest, verify, rate, recommend, discover — on Solana.
HoneyLabs
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
jamjet-policy
MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks…
openterms-mcp
Ed25519-signed consent receipts and a policy engine for agents: spending caps, action allowlists, escalation thresholds and JWKS-backed…
mcp-bytesmith
Offline byte toolbox: hex/Base64/Base58 encoding, cryptographic and CRC hashing, base conversion, secure tokens, plus optional…
M2M Sentinel
Base bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.
Mandare
Verify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.
agentdevx-sdk
Identity and credential gateway for agents: Ed25519 identity, encrypted credential vault, OPA policies with audit logging, per-agent…
muhannad-hash/mcp-shield
Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and…
mcp-server-malcolm
MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents