Security MCP servers

Security scanner for AI agents, MCP servers and agent skills.

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

Async Rust MCP server for the HPE Juniper Mist cloud — bearer-token auth, org/site-scoped tools, bounded responses, guarded WAN-edge change control

lunar.dev: Agent native MCP Gateway for governance and security

Reverse-engineering MCP server for AI agents: .NET and native PE/ELF/Mach-O analysis, decompilation, cross-references and patching. IDA and Ghidra optional.

OWASP Foundation web repository

One workspace all your AI agents can read and write. Encrypted client-side, model-agnostic, gone 24h after the last edit.

Protect against malicious open source packages 🤖

Put your agent inside your Slack. Zero bots, zero admin queues, no Business+ upgrade — 20+ tools for stealth search, thread parsing and mention tracking. Every message attributed. Your session never leaves your Mac.

Reverse engineer anything with agents, from app behavior down to native binaries.

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

Portable, offline-verifiable identity for AI agents: Ed25519 DIDs, signed attestations any world checks without a server, a Monero keeper that holds the money so the agent never does. Draft, wire sigelo/0.

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.

Self-hosted threat intelligence and IOC management platform

pod — least-privilege compiler for AI agents. Compile a least-privilege policy from what your agent actually did, then prove what happened.

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers.

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

Cognitive deterministic memory transaction security kernel for agents, that traces backwards to find the root cause and not the lookalike

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

AI Powered penetration testing Platform for offensive security research

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

Free, open-source guardrails and verifiable evidence for AI coding agents: Claude Code, Cursor, Codex, MCP, and GitHub. Scopebond Cloud is a separate proprietary hosted workspace.