Security MCP servers

MCP server for OneLogin API - manage users, apps, roles, and authentication

CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.

Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

MCP policy proxy: enforces a code of conduct across connectors before the upstream is called.

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

AI Agent Firewall. Enforce signed authority before consequential actions. Free API key required.

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.

Runtime verification MCP server: fail-closed checks for agent tool calls, signed evidence receipts.

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

Wrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke.

Verifies a merchant storefront is legitimate before an AI agent commits payment.

Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.

Real-time sanctions screening, CVE, and company registry checks for agents.

Check an x402 endpoint before you pay it: verdict, risk score and what is wrong. $0.005 in USDC.

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

Locally pseudonymizes sensitive text before cloud LLM work and restores the tokens afterward.

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend

HTTP MCP gateway: principal on tools/call + SSE, allowlists, vault rotate, CHP gates.

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.

Cryptographic audit trail for Claude Code workflows — tamper-proof timestamps, IETF TTTPS compliant.

Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.

Redacts PII/PHI from text before it reaches an LLM. Fail-closed, self-hosted, no egress.

Positive-security for apps, APIs, LLMs and edge, plus fraud scoring and identity/AML screening.

Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.

Verify, discover, and rate AI agents before transacting.

Wraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.