137 agent tools in this category, ranked by GitHub stars for now. Hands-on test results will replace this ranking as they finish.
The three most-starred tools here. Not tested together yet.
Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
https://mcp-server-production-5112.up.railway.app/mcpSecurity scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
pypi:prism-scannerGuardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done.
npm:eslint-plugin-ai-guard| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| io.github.aks129/healthclaw-guardrails Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation MCP serverGitHub-verified authorRemote | 34 | MIT | ||
| Prism Scanner Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading. MCP serverGitHub-verified authorLocal · PyPI | 28 | Apache-2.0 | ||
| AI Guard Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done. MCP serverGitHub-verified authorLocal · npm | 19 | MIT | ||
| ToolTrust Scanner Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. MCP serverGitHub-verified authorLocal · npm | 19 | MIT | ||
| aikido Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server. PluginAnthropic marketplace | 15 | — | ||
| pkgxray Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence. MCP serverGitHub-verified authorLocal · npm | 12 | MIT | ||
| Corvus Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch. MCP serverGitHub-verified authorLocal · NuGet | 11 | Apache-2.0 | ||
| FairMind Release gate for AI systems from FairMind: evaluations, framework evidence and ledger snapshots. MCP serverGitHub-verified authorLocal · PyPI | 11 | AGPL-3.0 | ||
| io.github.andrasfe/vulnicheck HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis. MCP serverGitHub-verified authorLocal · Docker | 11 | MIT | ||
| CookieGuard Audit HTTP cookie security against your local policy. Returns findings without cookie values. MCP serverGitHub-verified authorLocal · npm | 5 | MIT | ||
| Android Security Analyzer MCP server for static security analysis of Android source code MCP serverGitHub-verified authorRemote | 3 | — | ||
| io.github.Aitejiu/jev Jev judgments for agents: injection scanning, shell risk gating, ranking MCP serverGitHub-verified authorLocal · PyPI | 3 | — | ||
| io.github.KryptosAI/mcp-seatbelt MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine. MCP serverGitHub-verified authorLocal · npm | 3 | MIT | ||
| io.github.shotwellj/air-blackbox EU AI Act compliance scanner for Python AI agents — scan, analyze, and remediate MCP serverGitHub-verified authorLocal · PyPI | 3 | Apache-2.0 | ||
| Actenon Kernel Verify consequential AI actions before they execute. MCP serverGitHub-verified authorLocal · PyPI | 2 | Apache-2.0 | ||
| CVSS Calculator MCP Calculate and validate CVSS 2.0, 3.0, 3.1, and 4.0 base scores. MCP serverGitHub-verified authorRemote | 2 | Apache-2.0 | ||
| Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner GitHub Secret Scanner - Find Leaked API Keys | Gitleaks MCP serverGitHub-verified authorRemote | 2 | MIT | ||
| 42crunch-api-security-testing Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Securit PluginAnthropic marketplace | 1 | — | ||
| Aileron Journal Read-only queries over Aileron audit journals: verify integrity, search recorded tool calls MCP serverGitHub-verified authorLocal · PyPI | 1 | Apache-2.0 | ||
| Oxiploitability Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV. MCP serverGitHub-verified authorLocal · Cargo | 1 | Apache-2.0 | ||
| SecLens.ONE Email Security Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT. MCP serverVerified domain · seclens.oneRemote | 1 | Apache-2.0 | ||
| VeriSight MCP Sub-3ms OpenCV 5 image forensics, deepfake, AI inpainting & tamper fraud detection MCP. MCP serverGitHub-verified authorLocal · PyPI | 1 | Apache-2.0 | ||
| AcidPeak Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches. MCP serverVerified domain · acidpeak.comRemote | — | — | ||
| Agent Guestbook Read and verify the Blue Cloud Cyber agent guestbook, and sign one Ed25519 entry per UTC day. MCP serverVerified domain · bluecloudcyber.comLocal · npm | — | — | ||
| AGORA Omega Pay-per-call checks for AI agents: sanctions, MiCA, French KYB, AI Act. USDC via x402. MCP serverVerified domain · agoraverify.comRemote | — | — | ||
| AI application security research and assessments Read AI security guides and lab research, and request an LLM or AI agent security assessment. MCP serverVerified domain · airedteamingservices.comRemote | — | — | ||
| AI Website Security Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering. MCP serverVerified domain · aiwebsitesecurity.comRemote | — | — | ||
| ai.kaiv/dependency-trust Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems. MCP serverVerified domain · kaiv.aiRemote | — | — | ||
| ai.smithery/PabloLec-keyprobe-mcp Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.… MCP serverVerified domain · smithery.aiRemote | — | — | ||
| AIS CVE Priorities — daily exploit-ranked patch list for AI agents Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full MCP serverVerified domain · aislabs.aiRemote | — | — | ||
| app.vercel.exploitwatch-kappa/exploitwatch Check dependencies against CISA's real Known Exploited Vulnerabilities feed. MCP serverVerified domain · exploitwatch-kappa.vercel.appRemote | — | — | ||
| Arbiter Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix. MCP serverVerified domain · arbiterscan.comRemote | — | — | ||
| Arcjet An MCP server for Arcjet - the runtime security platform that ships with your AI code. MCP serverVerified domain · arcjet.comRemote | — | — | ||
| Aribot Threat modeling, code, API & cloud security, shadow-AI & compliance governance. MCP serverVerified domain · ayurak.comRemote | — | — | ||
| ASL Colorado Complaint Access Colorado DORA license lookups, the SOMB provider directory and answers from the rules and standards. MCP serverVerified domain · autosecurelogin.comRemote | — | — | ||
| ASMHunter Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports. MCP serverVerified domain · asmhunter.appLocal · PyPI | — | — | ||
| ATK Security Checks PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps MCP serverVerified domain · atkvn.comRemote | — | — | ||
| AttackerView quick website security check Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed. MCP serverVerified domain · attackerview.comRemote | — | — | ||
| Auditon security assessments Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes. MCP serverVerified domain · auditon.coRemote | — | — | ||
| AurelianFlo OFAC wallet screening, EDD memos, exposure forecasts, review queues and watchlists. Free to try. MCP serverVerified domain · aurelianflo.comRemote | — | — | ||
| AuthiChain Verification of signed records, plus an EU DPP check. MCP serverVerified domain · authichain.comRemote | — | — | ||
| Automaton Onchain Tools Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan. MCP serverVerified domain · automaton-tx-explainer.vercel.appRemote | — | — | ||
| Axiom Solana Token Risk Solana SPL token risk checks: free preview tool plus links to paid x402 (USDC) full reports. MCP serverVerified domain · axiom-risk-mcp.vercel.appRemote | — | — | ||
| Aya scam check Screens a message or its links for scam patterns with Aya's offline rules, in English and Spanish. MCP serverVerified domain · autosecurelogin.comRemote | — | — | ||
| BizVerify KYB for AI agents: verify business registrations from MCP clients. MCP serverVerified domain · bizverify.coRemote | — | — | ||
| Black Duck Security Scanner AI-powered security scanning using Black Duck Signal for vulnerability detection. MCP serverVerified domain · blackduck.comLocal · npm | — | — | ||
| Bot403 Invisible bot shield for HTML forms: the browser solves a proof of work and your server checks it. MCP serverVerified domain · bot403.comRemote | — | — | ||
| Bright Security Enables AI agents to access Bright Security tools for app discovery and security testing. MCP serverVerified domain · brightsec.comRemote | — | — | ||
| Bynn Document fraud detection for manipulated, fake and AI-generated PDF and image documents. MCP serverVerified domain · bynn.comRemote | — | — | ||
| ByteRay AI Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai MCP serverVerified domain · byteray.aiRemote | — | — | ||
| captcha.cc Human Verification Human verification CAPTCHA with visual and selective-listening audio challenges. MCP serverVerified domain · captcha.ccRemote | — | — | ||
| CERT-FR Security Advisories — buy per-query in-session (certfrwatch) CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Chainitor Monitor EVM wallets, tokens, contracts and Safe multisigs, and read their alerts. MCP serverVerified domain · chainitor.comRemote | — | — | ||
| Chainsaw package firewall Package firewall for agents: route npm, pip and docker installs through Chainsaw. MCP serverVerified domain · chain305.comRemote | — | — | ||
| CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) CISA advisories & ICS alerts: new CVEs, remediation. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| CISA Known Exploited Vulnerabilities (kevwatch) CISA KEV catalog: active-exploit alerts, hourly. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| co.auditro/auditro UAE ICV compliance: governed scores, evidence gaps and actions with deterministic numbers. MCP serverVerified domain · auditro.coRemote | — | — | ||
| com.arcnautical/mcp Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included. MCP serverVerified domain · arcnautical.comLocal · npm | — | — | ||
| com.arcself/arc-security Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings. MCP serverVerified domain · arcself.comLocal · npm | — | — | ||
| com.bidda/bidda-compliance 10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE). MCP serverVerified domain · bidda.comRemote | — | — | ||
| com.cautellus/scam-detection Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages. MCP serverVerified domain · cautellus.comRemote | — | — | ||
| com.chaink9/chaink9 Token risk checks on BSC, ETH, Base and Arc: trades the token on a fork. Paid in USDC/USDT via x402. MCP serverVerified domain · chaink9.comLocal · npm | — | — | ||
| com.checkmarx/checkmarx Official Checkmarx MCP Server MCP serverVerified domain · checkmarx.comRemote | — | — | ||
| com.cognivators/mcp-safeguard MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning. MCP serverVerified domain · cognivators.comLocal · PyPI | — | — | ||
| com.compliapi/screening OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo MCP serverVerified domain · compliapi.comRemote | — | — | ||
| com.craftedtrust/mcp-shield Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers. MCP serverVerified domain · craftedtrust.comRemote | — | — | ||
| com.dechonet/mcp 30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots. MCP serverVerified domain · dechonet.comLocal · npm | — | — | ||
| com.edgethirteen.www/exploitwatch Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/tariff-refund-screen Screen US public companies for IEEPA tariff-refund exposure disclosed in their SEC filings. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/triageshield Verify a vuln report's file/line/function claims against a real GitHub repo. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.encompassconfirm/ec360 KYC automation from authoritative public sources. Requires an Encompass licence. MCP serverVerified domain · encompassconfirm.comRemote | — | — | ||
| com.fidacy/ai-agent-firewall Every agent action watched, every money-moving one gated, every verdict independently verifiable. MCP serverVerified domain · fidacy.comLocal · npm | — | — | ||
| com.grcmigrate/directory Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only. MCP serverVerified domain · grcmigrate.comRemote | — | — | ||
| ContinueOps Public MCP BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA. MCP serverVerified domain · continueops.comRemote | — | — | ||
| Contractor Licence Changes Did this contractor's licence change? Observed lapses and reinstatements, not a snapshot. MCP serverVerified domain · ottobot.agencyRemote | — | — | ||
| ContrastAPI 55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key. MCP serverVerified domain · contrastcyber.comRemote | — | — | ||
| Crovia — verifiable silence (TACET) and Crovia Seal Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals MCP serverVerified domain · croviatrust.comRemote | — | — | ||
| Custosa Tools Scans schema metadata to classify PHI, score HIPAA readiness, and generate compliant migrations. MCP serverVerified domain · custosa.comRemote | — | — | ||
| CVE Intelligence by Casco Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key. MCP serverVerified domain · casco.comRemote | — | — | ||
| CVE Risk Check Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is. MCP serverVerified domain · openkrill.appRemote | — | — | ||
| CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch) CVE advisories: high/critical NVD vulns, daily digest. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch) Cybersecurity news & breach alerts: hacks, patches. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| CyberSPF Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card. MCP serverVerified domain · cyberspf.comLocal · PyPI | — | — | ||
| CYBO Attest Scan, fix and justify your application code until it is approved to ship. MCP serverVerified domain · ulapcybo.appRemote | — | — | ||
| Cybret findings Validated API and app vulnerability findings with remediation guidance. MCP serverVerified domain · cybret.aiRemote | — | — | ||
| DataNexus MCP Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains. MCP serverVerified domain · datanexusmcp.comLocal · npm | — | — | ||
| Debian Security Advisories — buy per-query in-session (debianwatch) Debian Security Advisories (DSA). $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Dependency Vulnerability Tracker — package security advisories ($0.01/query) Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Dregs Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules. MCP serverVerified domain · dregs.comRemote | — | — | ||
| Employee Operations — Access Request Review — Larkspur Partners (81479355) Free to compete: testnet faucet funds everything. 12 synthetic access request exception cases:… MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Enoki Test your AI agents for security and safety weaknesses, and re-verify the fixes. MCP serverVerified domain · enokilabs.aiRemote | — | — | ||
| EuroComply EU AI Act Classify AI systems by EU AI Act risk tier, estimate fines, write Art. 50 notices, list deadlines. MCP serverVerified domain · eurogpsr.comRemote | — | — | ||
| Evolize Accessibility scans with evidence, public reports, and fresh checks after fixes. MCP serverVerified domain · evolize.comRemote | — | — | ||
| Excession Labs: CVE intelligence and security research Search CVEs, source software/version evidence, KEV, EPSS and public security research. MCP serverVerified domain · excessionlabs.aiRemote | — | — | ||
| ExecBro Catches what reading the code misses: AI agents check running React Native apps MCP serverVerified domain · execbro.comLocal · npm | — | — | ||
| Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs) MCP serverVerified domain · exploit-intel.comLocal · PyPI | — | — | ||
| Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb) Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| FEDLIN Scanners Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP. MCP serverVerified domain · fedlin.comRemote | — | — | ||
| FillTrust security questionnaire corpus Guidance for answering vendor security questionnaires. Every result carries the page it came from. MCP serverVerified domain · filltrust.comRemote | — | — | ||
| FlawPilot Scan websites and code for security, performance and SEO issues from your AI assistant. MCP serverVerified domain · flawpilot.comRemote | — | — | ||
| Front Sentinel Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls MCP serverVerified domain · frontsentinel.comRemote | — | — | ||
| GeekWala Dependency Scanner Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token. MCP serverVerified domain · geekwala.comRemote | — | — | ||
| Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch) Go vulns: CVEs per module, fixed versions. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Go-Live Check Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching. MCP serverVerified domain · dontdeployonfriday.comRemote | — | — | ||
| Grisoco AI security audits Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports. MCP serverVerified domain · grisoco.comRemote | — | — | ||
| Helixar Security Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases. MCP serverVerified domain · helixar.aiRemote | — | — | ||
| Human for AI Ask a human for legal review, confirmation, a signature, or a physical-world act MCP serverVerified domain · yourhuman.aiRemote | — | — | ||
| IT Security — Access Change Request Recertify — Alder Court Partners (b578285f) Free to compete: testnet faucet funds everything. 12 synthetic access change request exception… MCP serverVerified domain · a2awire.comRemote● Live | — | — | ||
| Katla GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies. MCP serverVerified domain · katla.appRemote | — | — | ||
| Koot by Datakoot One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places. MCP serverVerified domain · datakoot.comRemote | — | — | ||
| LaunchTrust Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure. MCP serverVerified domain · launchtrust.coRemote | — | — | ||
| Licensed House Painters Find licensed house painters in 11 US states, with dated license status from state boards. MCP serverVerified domain · ottobot.agencyRemote | — | — | ||
| MacroCyber Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes. MCP serverVerified domain · macrocyber.coRemote | — | — | ||
| Malinois Check a live app you own for public databases, leaked keys and exposed files. MCP serverVerified domain · malinois.appRemote | — | — | ||
| Merron Inspect selected project excerpts and screen user-confirmed facts for bounded EU AI Act readiness. MCP serverVerified domain · merron.appRemote | — | — | ||
| Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch) MSRC Windows updates: CVE rollups, Patch Tuesday. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Ostorlab Query and act on your Ostorlab scans, vulnerabilities, tickets and assets. MCP serverVerified domain · ostorlab.coRemote | — | — | ||
| PentaTrail CTEM PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level MCP serverVerified domain · pentatrail.coRemote | — | — | ||
| Person Enrichment Identify a person from partial information and return a profile with a confidence score per field. MCP serverVerified domain · theona.appRemote | — | — | ||
| Pilotex KYC KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result. MCP serverVerified domain · pilotex.clubRemote | — | — | ||
| PkgGuard Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker MCP serverVerified domain · youraitools.coLocal · npm | — | — | ||
| Pre-Trip compliance scanner Screen regulated-health marketing copy against source-cited rulesets, all 50 states. MCP serverVerified domain · kesey.agencyLocal · npm | — | — | ||
| Preflight Scans an MCP server for security gaps before your agent connects. Free tier, no signup. MCP serverVerified domain · allthepossibles.comRemote | — | — | ||
| Rust Crate Security Advisories — buy per-query in-session (rustsecwatch) Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| ScamVerify Threat Verification AI-powered scam and threat verification for phone numbers, URLs, texts, and emails. MCP serverVerified domain · scamverify.aiRemote | — | — | ||
| SecureNow Production security for Node.js apps: investigate live attacks, block IPs, tune detections. MCP serverVerified domain · securenow.aiLocal · npm | — | — | ||
| Security Intel MCP CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. MCP serverVerified domain · datakoot.comRemote | — | — | ||
| Sekura Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent. MCP serverVerified domain · sekura.aiRemote | — | — | ||
| ShipSafe — Independent security verification Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access. MCP serverVerified domain · ship-safe.coLocal · npm | — | — | ||
| SkillTotal Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. MCP serverVerified domain · skilltotal.aiLocal · PyPI | — | — | ||
| Summer Telehealth support for Claude, Codex and Cursor: investigate cases and connect your tools. MCP serverVerified domain · gosummer.aiRemote | — | — | ||
| Trent Security reviews, threat models over a repo or website, and remediation tracking, in your editor. MCP serverVerified domain · trent.aiRemote | — | — | ||
| Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session Ubuntu security: USNs per CVE, patched versions. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| VerifyDesk Verify French and UK companies, EU VAT and IBANs; screen OFAC, UN, EU and UK sanctions lists. MCP serverVerified domain · agenttoolworks.comRemote | 0 | — | ||
| Vongola Read-only operator instrumentation for the vongola TLS gateway. MCP serverVerified domain · qompass.aiLocal · MCPB | — | — | ||
| VulX Watch Independent security review for AI-built apps. Watch a GitHub repo. Never a patch. MCP serverVerified domain · vulx.aiRemote | — | — | ||
| ZEN SecDB ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits. MCP serverVerified domain · secdb.nttzen.cloudRemote | — | — |
Filters apply to the top 137 of 137 tools by stars. Full list for agents: sec-appsec.json