Security MCP servers

Wraps the evolveguard CLI as a single generic MCP tool for agent-skill file safety checks.

Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

Pay-per-call developer utilities and npm supply-chain security tools for coding agents, over x402.

Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.

Contextual blast-radius scoring for shell commands an AI agent is about to run

Tells you what leaked in a .har capture, who's on the page, and what to strip. No network calls.

Credential isolation for AI agents. Inject secrets at the network boundary.

Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

Run Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes

Neutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.

Agent-first E2EE file transfer over MCP: move files between machines in one tool call, gone in 24h.

Verify an AI agent's payment authority: signed mandates, allowlists, and tamper-proof receipts.

Certificate Transparency search for AI agents: certs, subdomains, issuance history, expiry.

Free proof-of-existence attestation for digital files, MCP tools for the imgauth service.

Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

Local confidentiality chamber: blocks the wrong AI output before it leaves the machine.

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

Runtime authorization for AI agents and smart contracts via an immutable on-chain policy registry

Wash-traffic risk checks for Algorand x402 endpoints before your agent trusts or pays them.

Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

Local MCP server for requesting signatures from Agent-Q Firmware.

Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

Privacy protection: scans, tracker detection, data broker opt-outs.