Security MCP servers

IP intelligence lookups and FindIP Shield visitor risk signals for AI assistants.

Role-based access to your Qdrant vector store, via MCP. OIDC in, scoped JWTs out.

Send and read end-to-end encrypted documents. Your private key never leaves your machine.

Post-quantum (ML-DSA-65/Dilithium-3) proof, provenance & AI-decision receipts, paid via x402.

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic.

Tailscale MCP server for managing your tailnet from AI assistants

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

Hosts, metrics, Docker and authorized_keys over a macOS terminal's live SSH connections

Check whether a URL or IP is safe before an AI agent fetches or opens it.

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

The cryptography a JavaScript or TypeScript codebase uses, and which a quantum computer would break.

Open-source AI context firewall for governed model, retrieval, memory, and tool access.

Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.

Check products, credentials, claims, and agents against NPC Labs verification records.

Check if an MCP server's tool definitions changed after approval, from a signed public log.

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

ScriptProbe: Check npm install scripts and publisher changes before installing.

Exact-action approval for consequential agent actions: request, track, and verify signed receipts.

A security-focused MCP server for self-hosted n8n Community Edition.

Local-first MCP security scanner and CLI for AI-generated applications.

Network scanner for AI agents: discover hosts, scan TCP and UDP ports, query DNS and mDNS.

Check messages, npm packages and crypto addresses before acting. Read-only scanner tools.

Commit-time policy checks for AI agent writes (ALLOW/DENY/STEP_UP) with a tamper-evident audit log.

Who can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).

Redact EU personal data (names, national IDs, IBANs) in text and files; restore it later.

Governed MCP gateway: policy gate on every tool call, hash-chained DSSE receipt on every result.