Security MCP Servers

Automated red team reconnaissance combining attack surface mapping, vulnerability scanning, threa...

MCP Server Security Scanning Tool - an LLM-driven autonomous agent for code audit and vulnerability detection

A Model Context Protocol Server for Reddit — browse, search, and read Reddit from any MCP client, with or without Reddit API credentials.

A comprehensive MCP configuration scanner with client-aware security analysis.

Security tools for coding agents: dependency advisory audits and evidence for remediation.

Model Context Protocol server that issues and verifies Vouch Credentials to authorize AI agent tool calls.

Model Context Threat Scanner — local MCP security scanning, attack chains, inventory, CI gates, and optional Semgrep/LLM analysis

Security scanner for MCP (Model Context Protocol) servers - pentest your AI agent's tool connections

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

Self-hosted brain for any LLM: memory, skills, encrypted vault, devices and scheduled jobs.

Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.

Local memory server for AI agents: hybrid search, a fact graph and a hash-chained audit log.

MCP server for Strac DLP — detect and redact PII, PHI, PCI and secrets before an AI agent sees them.

MCP server for Snyk API & Web (Probely) — create targets, run scans, manage findings

Bidirectional in-memory sensitive vault and surrogate token masker protecting credentials in LLM pro

HMAC-signed zero-width invisible canary token generator and output response leak auditor

Pure-Python zero-dependency JWT claims auditor and payload inspector enforcing expiry, audience, and

High-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentials

Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections

One MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.

Local-first AI memory: search your Claude Code, Codex, Claude desktop, Pieces and browser history.

Bounded authorization and independently verifiable execution evidence for agents.

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.