Security MCP servers

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

Check any MCP server or agent skill before installing: upkeep, real adoption, and OSV advisories.

Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

Privacy-first Danish caller ID, CVR company lookup, operator data, and community spam signals.

End-to-end-encrypted, sovereign inbox for AI agents. The server only ever sees ciphertext.

Screen the counterparty of an x402 payment before an agent pays it. Runs offline by default.

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Every ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all

Local verification of nomue Protocol Records; current release supports the Release 1 Welch bundle.

Run commands, transfer files and browse assets on a JumpServer v4 bastion from your AI assistant.

MCP server for Box admin-log analytics — external-sharing visibility, read-only

AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

Policy-enforcing MCP proxy with portable evidence output.

Connects MCP servers, packages, security checks, and release gates in one repo.

Governed access to private code for coding agents: policy, redaction, audit chain, provenance.

MCP server for RouteVerdict — x402 endpoint trust checks ($0.05 USDC on Base)

Provision, ship, and pay from your coding agent — keys and cards never leave the vault.

Check an AI-built app is safe to launch, then deploy it on accounts you own.

Maps every service that sends email as a domain, with the public record behind each one.

MCP security firewall: stdio wrap proxy or inspection tools; zero runtime dependencies.

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

Read-only attack-path tools: reachable routes to sensitive assets, and what a fix would cut.

Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status.

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

Check Proof of Process chains: record, file match, timestamps, registry. Never one verdict.