Provides authentication, authorization, encryption, and threat detection to protect users, data, and AI models from vulnerabilities.
48 projects available
by 1Password
Enables Codex to securely manage 1Password Developer Environments via the local MCP server, allowing listing environments, inspecting and adding variables, and creating .env mounts without exposing secret values.
by danoszz
Provides offline, open‑source security scanning, automated remediation, and compliance evidence generation for applications, APIs, dependencies, and AI agent tooling directly on the developer’s machine.
by hashgraph-online
Open-source antivirus for AI agents that blocks risky tools, secret exposure, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
by opena2a-org
Provides a unified command‑line interface to scan, protect, and manage AI agents and MCP servers for credential leaks, shadow AI, unsigned configurations, and ungoverned agents, then automatically routes each finding to the appropriate remediation tool.
by Aletheore
Provides a deterministic repository scanner that produces structured evidence for code intelligence, enabling static analysis, secret detection, dependency‑vulnerability checks, API endpoint mapping, and integration with MCP servers, dashboards, and GitHub Actions.
by Cyreslab-AI
Provides AI assistants with searchable access to the ExploitDB repository, enabling queries for exploits, CVE identifiers, platforms, authors, and related metadata through the Model Context Protocol.
by Cyreslab-AI
Provides access to Shodan API functionality and CVE database through a Model Context Protocol server, enabling AI assistants to query internet-connected device information, services, and vulnerabilities.
by alexgoller
Provides a programmable interface to Illumio Policy Compute Engine for workload management, label operations, traffic flow analysis, automated ringfencing, and infrastructure service identification.
by icoretech
Enables AI agents and automation to securely access Vaultwarden or Bitwarden vault items—including passwords, TOTPs, notes, attachments, and sends—through the official Bitwarden CLI without re‑implementing client‑side cryptography.
by 2akouwu
Provides deterministic verification of AI‑generated claims against binary artifacts, ensuring every structural or behavioral assertion is grounded in the actual file and preserving verified state across context resets.
by tufantunc
Provides controlled SSH access for LLM agents with command classification, policy‑based authorization, human‑in‑the‑loop approval, and immutable audit logging.
by sattyamjjain
Provide strict type‑checking and deny‑by‑default contract enforcement for AI agent tool calls, stripping ghost arguments and offering self‑healing retries.
by KeyValueSoftwareSystems
Enables adversary emulation for AI agents, LLM applications, and MCP servers, letting teams test their AI systems against realistic attack scenarios.
by OpenOSINT
Provides an AI‑driven OSINT workflow that lets users query a natural‑language REPL, CLI, web UI, or MCP server, automatically selecting and chaining 18 reconnaissance tools to collect, pivot, verify, and report public‑source intelligence.
by AynOps
Enables AI clients to perform real‑time cybersecurity reconnaissance directly from a local server, automating WHOIS, DNS, port scanning, SSL inspection, header analysis, tech‑stack detection, CVE lookup and more.
by exjskdjsdfks
Provides a persistent Model Context Protocol server that enables AI agents to conduct autonomous penetration testing on Linux distributions such as Kali and Parrot OS.
by snyk
Scans installed AI agent components, MCP servers, and skill files for prompt‑injection, tool poisoning, toxic flows, hard‑coded secrets and other supply‑chain risks.
by goweft
Provides a policy‑and‑trust layer for MCP tool servers, turning declarative YAML configurations into validated, policy‑enforced MCP tools with built‑in credential brokering and tamper‑evident audit logging.
by UPinar
Provides security intelligence tools for AI agents, offering CVE/KEV/CWE lookup with EPSS, domain and IP audit, IOC enrichment, code security analysis, and MITRE ATLAS and D3FEND data through a free MCP server that requires no API key.
by appsecco
Provides a local HTTP proxy that forwards traffic to MCP servers and routes all requests through Burp Suite (or any configured upstream proxy), with optional SSL bypass, proxychains integration, and direct remote MCP support.
by CheckPointSW
A collection of Model Context Protocol servers for Check Point security platforms, exposing structured security data through TypeScript packages.
by gensecaihq
Provides AI‑driven conversational access to Wazuh SIEM data, allowing natural‑language queries, threat analysis, incident triage, and compliance checks through a Model Context Protocol‑compliant remote server.
by CooperCyberCoffee
Enables analysts to converse with OpenCTI using natural language through Claude Desktop, turning plain‑English questions into instant, context‑rich threat‑intelligence answers.
by sjkim1127
Provides a security‑first MCP server that enables AI agents to orchestrate Ghidra, Radare2, and YARA for fully automated reverse‑engineering and malware‑analysis workflows.
by Karthikathangarasu
Provides a robust server that bundles Nmap, Go/Dirbuster, Nikto, John the Ripper and additional utilities to streamline professional penetration testing workflows.
by semgrep
Offers an MCP server that lets LLMs, agents, and IDEs run Semgrep scans to detect security vulnerabilities in source code.
by safedep
Provides enterprise‑grade open source software supply chain security by scanning source code, dependencies, containers and SBOMs, detecting vulnerabilities and malicious packages, and enforcing policy as code.
by epicweb-dev
Provides remote MCP servers with OAuth 2.1 authentication and authorization for workshop applications.
by mobb-dev
Provides automatic security vulnerability remediation for code via a command‑line interface and an MCP server, leveraging findings from popular SAST tools such as Checkmarx, CodeQL, Fortify, and Snyk.
by fluidattacks
Provides command‑line utilities to interact with the Fluidattacks API, enabling automated security data retrieval and actions.
by cycodehq
Boost security in the development lifecycle via SAST, SCA, secrets, and IaC scanning.
by chaitin
A self‑hosted web application firewall and reverse proxy that protects web applications from attacks and exploits by filtering, monitoring, and blocking malicious HTTP/S traffic.