Security MCP servers

Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

Identity/reputation verification for agent-to-agent payments across x402, AP2, MPP, checkout.

Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit

Three-layer firewall for MCP: content, egress and action policy. Proxy or server.

Mask PII in outbound MCP tool-call arguments, unmask the results. Indian identifiers included.

Authorizes MCP tool calls against a session policy, not one call at a time.

Autonomous log surgery & secret redaction MCP server for AI coding agents.

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Unofficial community MCP server for the Spot AI camera and video-intelligence REST API. Read-only.

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

Local-first privacy MCP server for sensitive AI workflows

MCP server that reads C2PA Content Credentials: what an image declares about its own origin

Local, privacy-preserving PII toolkit over MCP — shape to the model, substance stays local.

PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

Tamper-evident audit logs for AI agents: submit, fetch, and verify cryptographic proof bundles.

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

Inspect an MCP server for common security risks before you install it. Offline, zero telemetry.

Audit AI responses and artifacts with ALLOW, REVIEW, or BLOCK decisions and trust scores.

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Is this address safe to pay? OFAC sanctions, ERC-8004 reputation, contract analysis.

A local receipt and approval gate for AI agent sessions. The agent can act, but it cannot sign.

Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.