69 agent tools in this category, ranked by GitHub stars for now. Hands-on test results will replace this ranking as they finish.
The three most-starred tools here. Not tested together yet.
Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real.
mcpb:https://github.com/0x1Adi/Klarion/releases/download/v0.4.3/klarion-mcp-v0.4.3.mcpbLocal AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.
npm:enigmagent-mcpHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
npm:@1claw/mcp| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| Klarion Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real. MCP serverGitHub-verified authorLocal · MCPB | 11 | MIT | ||
| io.github.Agnuxo1/enigmagent-mcp Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. MCP serverGitHub-verified authorLocal · npm | 7 | MIT | ||
| 1Claw Vault HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. MCP serverGitHub-verified authorLocal · npm | 4 | MIT | ||
| Keyblind Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them. MCP serverGitHub-verified authorLocal · npm | 3 | MIT | ||
| Secret Sentinel Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text MCP serverGitHub-verified authorLocal · PyPI | 3 | MIT | ||
| vaultgate Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only MCP serverGitHub-verified authorRemote | 3 | Apache-2.0 | ||
| io.github.0xdirectping/escrow Agent-to-agent escrow on Base. Post quests with ETH/USDC bounties and settle on-chain. MCP serverGitHub-verified authorRemote | 2 | — | ||
| AI Scanner Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets. MCP serverGitHub-verified authorLocal · npm | 1 | MIT | ||
| io.github.Aguantar/vibescan-mcp-server MCP server for VibeScan — scan projects for leaked secrets and security issues MCP serverGitHub-verified authorLocal · PyPI | 1 | MIT | ||
| io.github.AInoAKARI/keymaster-mcp Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents. MCP serverGitHub-verified authorLocal · npm | 1 | MIT | ||
| 28/28 Agent Service Desk: Fix & Verify Check SPF/DKIM/DMARC of a domain, get a non-binding Fix & Verify quote, re-verify after the DNS fix. MCP serverVerified domain · 28in28.aiRemote | — | — | ||
| Agent Secret Store Scoped secrets and HSM wallet signing for agents; humans approve out of band. OAuth 2.1. MCP serverVerified domain · agentsecretstore.comRemote | — | — | ||
| ai.agentrapay/agentra Identity oracle and trust layer for autonomous AI agents. Bidirectional KYA and trust scoring. MCP serverVerified domain · agentrapay.aiRemote | — | — | ||
| ai.facesign/facesign-mcp Build and test FaceSign step-up verification flows from your AI coding tool MCP serverVerified domain · facesign.aiRemote | — | — | ||
| ai.getvda/password-hashing-and-jwt-service Password Hashing and JWT Service MCP serverVerified domain · getvda.aiRemote | — | — | ||
| ai.tachyo/verify Cryptographic proof of wallet ownership in two steps, with no keys and no custody. MCP serverVerified domain · tachyo.aiRemote | — | — | ||
| AllClear Connect (OAuth, OIDC, and MCP) Verified identity plus consented personal context, starting with medical records, images & insurance MCP serverVerified domain · allclearid.comRemote | — | — | ||
| APICK Identity Korean ID document verification and PII masking APIs MCP serverVerified domain · apick.appRemote | — | — | ||
| Auth Usuários, sessões, logins sociais e webhooks da sua aplicação MCP serverVerified domain · myinfrastructure.clickRemote | — | — | ||
| Auth0 MCP Server Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language MCP serverVerified domain · auth0.comLocal · npm | — | — | ||
| Bitwarden Give your assistant its own Bitwarden vault for logins, passwords, 2FA codes and passkeys. MCP serverVerified domain · foreverworks.comLocal · npm | — | — | ||
| BlackVeil DNS & Email Security Scanner DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. MCP serverVerified domain · blackveilsecurity.comRemote | — | — | ||
| braXos Maestro Governed access to your org's systems (Salesforce, Workday, CCure, Genetec, Zoom, etc.) via braXos. MCP serverVerified domain · braxos.comRemote | — | — | ||
| Breach402 — Email Data-Breach Check Data-breach & credential-exposure check for one owner-approved email. $1 USDC on Solana (x402). MCP serverVerified domain · bmcxiv.comRemote | — | — | ||
| Certificate Checker Got Simplified Check a website's TLS certificate and how many days until it expires. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| cn.pianam/ip-location-mcp MCP server for IPv4 geolocation lookup with Chinese output, supports batch queries. MCP serverVerified domain · pianam.cnRemote | — | — | ||
| com.buyukesim/mcp No-logs VPN, real UK +44 number eSIMs and travel-data eSIMs, bought with crypto. No KYC, no account. MCP serverVerified domain · buyukesim.comRemote | — | — | ||
| com.chaingrantor/grantor-mcp Wrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke. MCP serverVerified domain · chaingrantor.comLocal · npm | — | — | ||
| com.cryptoamlpolicy/site Crypto AML Policy: the site's own MCP server — enquiry (enquiry = a human handoff, not a... MCP serverVerified domain · cryptoamlpolicy.comRemote | — | — | ||
| com.dustforge/demipass Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context. MCP serverVerified domain · dustforge.comLocal · npm | — | — | ||
| com.edgethirteen.www/killcord Dead-man's switch for Anthropic API spend: kills the key the instant it crosses a limit you set. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/sanctions Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/us-diligence Screen a US company against SEC EDGAR, OFAC sanctions, federal awards and federal court dockets. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.eleyed/redact Redact PII from text before it reaches a model. Nothing stored, no third-party AI. MCP serverVerified domain · eleyed.comRemote | — | — | ||
| com.flo-voice1/agent-identity-mcp Give an AI agent a throwaway email and phone number to test signup/verification flows end to end. MCP serverVerified domain · flo-voice1.comRemote | — | — | ||
| com.insumermodel/insumer Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains. MCP serverVerified domain · insumermodel.comLocal · npm | — | — | ||
| com.korushield/koru-shield Manage Koru Shield DNS filtering: profiles, rules, categories, schedules, and logs. MCP serverVerified domain · korushield.comLocal · npm | — | — | ||
| com.myprivacyagent/public Read-only opt-out guides, removal routes for 950+ data brokers, and privacy library search. MCP serverVerified domain · myprivacyagent.comRemote | — | — | ||
| com.oksigenia/checker-mcp Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first. MCP serverVerified domain · oksigenia.comLocal · npm | — | — | ||
| com.olane/copass-local Local encryption and project setup plugin for Copass. Keys never leave your machine. MCP serverVerified domain · olane.comLocal · PyPI | — | — | ||
| com.olane/cosync-local Local encryption and project setup plugin for CoSync. Keys never leave your machine. MCP serverVerified domain · olane.comLocal · PyPI | — | — | ||
| com.pentonym/clearance US & EU trademark, domain & handle clearance — a signed three-state verdict, not legal advice. MCP serverVerified domain · pentonym.comRemote | — | — | ||
| ConsentLayer Cookie consent for GDPR/CCPA: scan sites for trackers, configure consent banners, get install code. MCP serverVerified domain · consentlayer.comRemote | — | — | ||
| Cookie Compliance Add a cookie consent banner that blocks trackers before consent and records proof of consent. MCP serverVerified domain · cookie-compliance.coRemote | — | — | ||
| Código 07 · Human verification in Peru Marketplace of vetted human verifiers in Peru, hired and paid by AI agents in USDC via x402. MCP serverVerified domain · codigo07.vercel.appRemote | — | — | ||
| Domain Health Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers. MCP serverVerified domain · modernmustardseed.comRemote | — | — | ||
| ENYAL by Greenland AI Accounts are powered by ENYAL identity, and records are verifiable without trusting us. MCP serverVerified domain · enyal.aiRemote | — | — | ||
| Exepal Safety tools for AI agents: safe page reader, prompt-injection, secrets, PII and MCP server scans MCP serverVerified domain · exepal.comRemote | — | — | ||
| Fairquery Agent Trust & Data Safety PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check. MCP serverVerified domain · getfairquery.comLocal · npm | — | — | ||
| Hash Generator Got Simplified Compute MD5, SHA-256 or SHA-512 hashes of text. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| isIPsafe Check whether an IP address or network is malicious and report abusive IPs to isIPsafe. MCP serverVerified domain · isipsafe.comRemote | — | — | ||
| Keycloak Admin Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events. MCP serverGitHub-verified authorLocal · npm | — | — | ||
| KeyHalve - verify sealed documents Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys. MCP serverVerified domain · keyhalve.comLocal · npm | — | — | ||
| KeySlip Send and read one-time encrypted secrets with local encryption. MCP serverVerified domain · keyslip.appLocal · MCPB | — | — | ||
| KeyZula Use passwords and API keys from your KeyZula vault without the assistant seeing them. MCP serverVerified domain · keyzula.comLocal · npm | — | — | ||
| Kin Connect accounts once. Set what agents may do per account. Enforced when the action runs. MCP serverVerified domain · kinlab.aiRemote | — | — | ||
| LeakGuard Find and redact leaked secrets, wallet keys and PII before an AI agent sends text. MCP serverVerified domain · youraitools.coLocal · npm | — | — | ||
| MX Verdict Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health. MCP serverVerified domain · mxverdict.comRemote | — | — | ||
| Odile Gate Free, no signup: per-app keys, allowed calls, approvals and an audit log for your API or model key. MCP serverVerified domain · odilelabs.comRemote | — | — | ||
| Password Generator Got Simplified Generate strong passwords with the character sets you choose. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| Porticol Coding agents call your APIs without the keys. A person approves risky calls; each call is logged. MCP serverVerified domain · porticol.app | — | — | ||
| PrivacyPill GDPR cookie banners with Consent Mode v2, plus a free scan of what loads before consent. MCP serverVerified domain · privacy-pill-consent-studio.lovable.appRemote | — | — | ||
| Provian Self-custodial agent wallet on Base and a verifiable record of its work (Provenance Envelopes). MCP serverVerified domain · provian.aiRemote | — | — | ||
| Scrub MCP Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported. MCP serverVerified domain · scrub-mcp.malgorath.comRemote | — | — | ||
| Skarn Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted MCP serverVerified domain · getskarn.comLocal · npm | — | — | ||
| ThornGuard Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging. MCP serverVerified domain · thorns.qwady.app | — | — | ||
| Trusty Squire Provision, ship, and pay from your coding agent — keys and cards never leave the vault. MCP serverVerified domain · trustysquire.aiLocal · npm | — | — | ||
| US Business Verification (KYB) MCP Server Keyless KYB: verify, OFAC SDN + GLEIF ownership/UBO graph (parents+subsidiaries). NY/CO/CT. No key. MCP serverVerified domain · greyridgesignals.aiRemote | — | — | ||
| vault-ask Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat. MCP serverVerified domain · erseni.comLocal · npm | — | — |
Filters apply to the top 69 of 69 tools by stars. Full list for agents: sec-secrets.json