安全 MCP 服务器

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates…

Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.

Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.

Cortex integration for observable analysis and automated security responses.

Retrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific…

Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.

Trust, W3C DID identity and EigenTrust reputation for AI agents, with attestations, disputes, sybil detection and IPFS audit anchoring.

TheHive integration for collaborative security incident response and case management.

Credential isolation for AI agents. Inject secrets at the network boundary.

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

The firewall for MCP tool calls. Block, audit, replay with evidence bundles.

Deterministic execution governance gateway and W3C DID security guardrail for AI agent MCP tool calls.

Pre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX…

Runtime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before…

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

Governance proxy for MCP servers — policy evaluation, human approval, audit trails.

MCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit receipts, plus preflight…

Query the NIST National Vulnerability Database (NVD) API.

Local guardrail proxy that blocks destructive MCP tool calls, rug pulls, and tool poisoning

[glama](https://glama.ai/mcp/servers/@loglux/auth-mcp-gateway) 🐍 ☁️ 🏠 🍎 🪟 🐧 - Auth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate…

Protected RAG storage — agents discover public metadata, content only by access token.

OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.

Verify AI agent communication with session types and formal proofs

Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls

APK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on Termux (Android) or PC.

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes…

Zitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language.

Scan, protect, and monitor APIs from AI coding tools. Device-level rate limiting.

Local privacy testing for AI agents: scan code for PII and secrets, score execution traces across internal channels, redact text, and…

Official BunkerWeb WAF integration to manage services, instances, IP bans, configurations, plugins, and scheduler jobs over stdio or…

Read-only attack-path tools: reachable routes to sensitive assets, and what a fix would cut.

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Thales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring.

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Keep patient identifiers out of AI agent context — a local privacy boundary for healthcare agents.

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.

Stateless zero-knowledge trust gateway and WebMCP shield for AI agents on Midnight.

Detect fake-recruiter and job-offer scams using free OSINT. No API keys.

Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.

Query the RAD Security API for Kubernetes and cloud security findings, reports and runtime data.

Enforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule…

URL scanning and phishing triage: capture DOM snapshots, network requests and screenshots, and hunt historical scans with a custom query…

Search the Russian software registry for import-substitution and FSTEC/FSB-certified products, with full-text search and manufacturer…

Deterministic security layer your AI can't be. 654 rules, 39 tools, CLI + doctor + host audit.

Zero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a…

Pin MCP tool contracts by sha-256; catch silent drift, rug pulls and bait-and-switch in CI.

Offline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.

Impri MCP server — human-in-the-loop approval inbox for AI agents

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.

Headless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse…

Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate…

Offline MCP server: explains shell commands token-by-token and flags destructive ones for AI agents.

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

Passport, mandate, fail-closed action gate and tamper-evident journal for AI agents.

Manage Scalekit organizations, users and SSO.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server