Security MCP servers

Rotate API keys across AWS, GitLab, Cloudflare, OpenAI & more. Secrets never reach the model.

Inspect Kairon VMs, network policy and VM-edge flows from an agent. Read-only by default.

PKI MCP server: inspect, verify, issue, sign X.509, CSR, CRL, OCSP, CMS, TSP, PKCS#12. 34 tools

The record layer for the machine age: counter-signed receipts and agent action records.

x402 APIs for AI agents: bounty radar, honeypot scoring, verdicts. USDC on Base. Stable origin.

PAN-OS firewall MCP server: scoped, audited, two-person change control. Rust.

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

Pay-per-call x402 agent tools (USDC): web reader, token/wallet/email/site checks, screenshots, PDFs.

Local MCP runtime for policy-governed, verified agent actions with durable receipts.

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

Ask the human for API keys in a browser page and write them to .env. The model only sees key names.

Create-only, age-encrypted deposits of new logins and notes into Vaultwarden, without vault reads.

Sanctions, crypto wallet, email and IP screening for agents. Pay per check in USDC via x402.

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Microsoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock.

Read, verify and export a tamper-evident log of what an AI agent did. Read-only.

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

Open-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.

Local execution gate: fixed deadlines, operator-only controls, read-only setup and readable denials.

Verify PDF signatures, detect tampering, and identify PDF/A and PAdES conformance levels.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

Share agent skills across your team, scan them for risk, and track what's actually used.