Security MCP servers

Save and use 1Password secrets locally without exposing plaintext to AI agents.

Local verification of nomue Protocol Records; current release supports the Release 1 Welch bundle.

Local verification of nomue Protocol Records; current release supports the Release 1 Welch bundle.

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

Local STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

The open-source governance layer for AI agents. Byte-identical run receipts, 40+ adapters, air-gap.

Trust metadata for AI agents — check files before building on them, stamp verified work.

Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.

Discover x402 endpoints and check their trust score before your agent pays them.

Pre-sign wallet safety: tx simulation, signature decoding, address risk, ABI, URL phishing.

Token safety: honeypot sim, contract powers, rug checks, watch alerts, plain card, paper test.

An MCP server whose confirmation cannot be replayed against a different call.

Send a file to a person as a one-time, encrypted, auto-deleting download link.

Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally

Provenance gateway for stdio MCP servers: blocks tool calls fed by untrusted tool results.

Plain-English website security check for agents: certificate, headers, scripts, forms, spam.

Local-first Base64, Luhn, key-component XOR, and synthetic ISO-0 PIN block tools.

OAuth 2.1/OIDC resource-server reference for secure MCP authorization

Static blast-radius audit for MCP servers before agent install. Manifest optional.

Self-hosted signing wallet: DIDs, agency grants, and task mandates for AI agents.

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

AI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.

Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

Manage a self-hosted DNS firewall: block domains, create policies, read query logs and metrics.