Security MCP servers

Tamper-evident memory + governance MCP for Claude Code, Cursor, Codex. Ships the Seatbelt kit.

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.

Precision-first security scanning for Model Context Protocol servers.

MCP server for CTFd v3: list challenges, submit flags, and query scoreboards via AI agents.

Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real.

MCP bridge for tamper-evident evidence around consequential AI and agent decisions.

Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

Identity/reputation verification for agent-to-agent payments across x402, AP2, MPP, checkout.

Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit

Three-layer firewall for MCP: content, egress and action policy. Proxy or server.

Mask PII in outbound MCP tool-call arguments, unmask the results. Indian identifiers included.

Authorizes MCP tool calls against a session policy, not one call at a time.

Autonomous log surgery & secret redaction MCP server for AI coding agents.

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Unofficial community MCP server for the Spot AI camera and video-intelligence REST API. Read-only.

Risk preflight for AI Agent tool actions and Polymarket settlement and execution checks.

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

Local-first privacy MCP server for sensitive AI workflows

MCP server that reads C2PA Content Credentials: what an image declares about its own origin

Local, privacy-preserving PII toolkit over MCP — shape to the model, substance stays local.

PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

Tamper-evident audit logs for AI agents: submit, fetch, and verify cryptographic proof bundles.

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

Inspect an MCP server for common security risks before you install it. Offline, zero telemetry.