Security MCP Servers

Search and fetch vibe-coding Agent Skills (SKILL.md files) and prompts from TheSkillVault library.

Official Model Context Protocol (MCP) server for Cowpin Dual-Species Memory Vault

MCP server for SkillsMP: search, read-only GitHub fetch, full Cisco AI Skill Scanner, scan-gated bulk install, and bulk uninstall.

Local MCP server for CVE remediation intelligence from public sources (NVD, CISA KEV, FIRST EPSS). Your model does the reasoning — no API keys, no external LLM calls, no data leaves your machine.

MCP server exposing PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks).

Active, runtime adversarial testing for MCP servers: point it at your own server and find out what breaks.

Security scanner for MCP servers — finds hardcoded secrets, unsafe exec, missing auth

Local-first security scanner, MCP protocol inspector, dynamic fuzzer, sandbox runner, and report generator for Model Context Protocol servers.

Pre-flight checks for MCP servers: passive token footprint, use-case scoping, security, and name safety. LLM-facing quality scorecard.

Local MCP server for Tether — AI Health Sync: your AI agent reads your end-to-end-encrypted Apple Health data (sleep, cycle, weight, water), decrypted only on your machine

Active security scanner that pentests MCP (Model Context Protocol) servers - triggers and out-of-band-confirms real vulnerabilities. Like Burp's Active Scan, but the target is an MCP server.

MCP server for codebase security scanning (secrets, SAST, SCA, IaC)

Drop-in wrapper for mcp-salesforce-connector that auto-refreshes the Salesforce session from your Chrome browser — no more pasting tokens.

A sovereign, local-first MCP server for Technical SEO DNS record auditing, SOA health checks, SSL/TLS inspection, and HTTP security header analysis.

Secure MCP runtime — policy enforcement, SSRF blocking, audit logging

Trust-scan gate for MCP servers: evidence-backed verdicts (SAFE/REVIEW/DO_NOT_INSTALL) before you install

Security scanner for MCP (Model Context Protocol) servers — detects tool poisoning, over-privileged tools, hidden instructions & injection surfaces.

MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning.

An authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log.

Local-first PII and secret scrubber with checksum checks and reversible LLM tokens.

MCP (Model Context Protocol) server for Vergate — run security scans, tech profiling, performance, SEO/AEO and accessibility checks from Claude Code, OpenClaw and other MCP clients.

Discovery and fingerprinting scanner for MCP-over-HTTP servers (tool enumeration + risk heuristics).

Local-first MCP reverse proxy that blocks sensitive, destructive, or policy-violating tool calls before execution using deterministic rules, DLP matchers, and AST-based intent analysis.

Security scanner for MCP (Model Context Protocol) servers: static (SAST), dynamic (live), and authentication-posture analysis, with an A-F score and SARIF output for the GitHub Security tab.