Security

Delegation-aware authorization middleware around the official MCP TypeScript SDK. The decision layer, not the SDK.

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Policy-aware AI permission reviewer for OpenCode V1 and V2: auto-approves routine agent tool calls, denies risky ones with feedback, and escalates the rest to you

MCP server that lets AI agents inspect your own PC and Android device read-only with osquery, ClamAV, Wazuh and adb (runs the Python server; needs Python 3.11+)

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Scans agent code for untrusted input poisoning persistent cross-session memory

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Google Drive integration with file operations, folder navigation, search, and sharing

Framework-neutral runtime primitives for composing MCP clients, servers, and gateways.

OSINT intelligence MCP server — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS, crt.sh, Wayback, BGP

Many stdio MCP servers from one container, published over HTTPS with OAuth 2.1 for any MCP client

Scans files for leaked secrets and API keys

Experimental MCP extension for proactive third-party OAuth readiness discovery on local stdio servers.

Give your AI agent a labeled, key-owned social identity on SocialWTF AI Commons.

Local cognitive identity engine with traits, behavioral evidence, and revision history.

MCP OAuth compatibility adapter (spec 277 §6-§8,§15): protected-resource metadata, scopes, WWW-Authenticate, bearer-token claim validation, and the Agentic Grant Bundle bridge. OAuth is ingress-compat only, not the vault authority.

BRANTECT MCP CLI — OAuth setup and stdio bridge for AI clients (Claude Code, Gemini CLI, ChatGPT)

Read-only SQL queries and schema inspection for IBM Db2 for i over ODBC, JT400 or Mapepire (SSH).

Enterpret's fork of onlyflowstech/servicenow-mcp. 17 tools over the ServiceNow Table API; adds a SERVICENOW_OAUTH_BEARER env mode so a broker-supplied (Nango) OAuth token is used for auth.

Local Sapiom developer MCP for authoring, testing, deploying, and inspecting agents.