Security Scanning

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

A comprehensive HTTP client MCP server for security testing, API testing, and web automation

Reconnaissance and known-issue scanner for Model Context Protocol (MCP) servers

Security toolkit for FastAPI-based MCP servers — pre-flight audit + runtime prompt-injection guardrail.

MCP server for PyPI: search packages and audit dependency trees against OSV vulnerability data before an agent suggests them.

An authorising reverse proxy for MCP servers: capability-scoped tokens, per-tool and per-argument policy, rate limits, dry-run, and a tamper-evident audit log.

SquatGuard MCP Template for Python

Security middleware for MCP servers. Content scanning, integrity verification, trust boundaries, and audit trails.

MCP Server for Nmap scanning

Model Context Threat Scanner — local MCP security scanning, attack chains, inventory, CI gates, and optional Semgrep/LLM analysis

A local integrity monitor for stdio MCP servers

CI-first conformance, security, and benchmarking CLI for MCP servers. Lint your MCP server before your users do.

Drop-in deterministic policy layer for MCP-using AI agents

Security scanner for MCP servers - audit capabilities, detect risks

Precision-first security scanning for Model Context Protocol servers.

An evidence-based benchmark and runtime evaluation framework for secure Model Context Protocol tool-using agents.

Security audit CLI for MCP servers and AI agents: risky tools, tool poisoning, leaked secrets

A CI linter for what your MCP server publishes: tool poisoning and prompt injection across every surface an agent sees, definition drift between runs, and schema rot.

Vet a third-party MCP server before you trust it: sandboxed connect-and-enumerate plus deterministic security detectors.