Security Review

Front desk for the AIS MCP campus: lists our buildings (CVE, Flight Recorder), prices, how to pay

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

Vet MCP and AI-agent tool metadata locally before attachment.

The verifiable live-data agent. Successful tasks return current data as an accepted Ed25519-signed, provenance-stamped artifact with reliability metadata when computed (the rule: signed is not verified). Keyless fair-use. A neutral witness, never the money path.

Framework-aware code intelligence MCP server — 87 framework integrations, 81 languages, 40–50% fewer tokens on average

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration.

Audit AI applications and agents for security risks before commit, PR, merge, or deployment. Deterministic findings with coverage and evidence receipts.

MCP security scanner: scan MCP servers and tool manifests for tool poisoning, prompt injection, tool-name shadowing, excessive-agency schemas, unpinned/remote sources, and rug-pulls - 10 OWASP-mapped heuristics, CLI + MCP server, fully offline. Also runs

AI agent security scanner and npm audit for MCP servers, Claude Code, Cursor, and Windsurf. Find prompt injection, hallucinated packages, secrets, unsafe tools, and vulnerable code.

Detect grooming, bullying, fraud, and 16+ online threats across text, voice, image, and video.

Production readiness for vibe-coded apps — know your AI code is ready to ship

Local deterministic pre-attachment security scanner for MCP and AI-agent tool manifests.

Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.

Multi-language repository map for agents and humans: MCP tools, dependency graphs, symbol indexes, impact review, and bounded source evidence.

Deterministic readiness checker for the MCP 2026-07-28 specification break

Auditable AST code intelligence for AI agents: 18 task-oriented commands through one MCP tool, CLI, or agent skill. Supports JS/TS, Python, Go, Rust, Java, C, C++, C#, and HTML.

YuanXinMCP (元信MCP) - the pre-install security scanner for Agent skills, exposed as a stdio MCP server: scan_skill (dir/package -> verdict + findings), generate_badge (audited badge), gate_check (CI gate), get_report (JSON/Markdown). Local offline static s

45 specialized judges that evaluate AI-generated code for security, cost, and quality.

The anti-hallucination gate for AI coding agents: 9 MCP tools (undefined-symbol verification in 17 languages with real toolchain adapters, hallucination-word scan, sandboxed run, evidence receipts), a cross-client hook and a CI gate — so 'done' means obse

A screen ↔ endpoint ↔ field dependency map: answers which screens break if you change an endpoint or a response field. Local-first, git-friendly, open source.