agent-security MCP servers

95 tagged agent-security, measured the same way as everything else here.

Browse within: mcp-server 45policy-as-code 33ai-security 22llm-security 16AI Safety 9agent-security-tools 7api 7Guardrails 5ai-governance 5mcp-security 5model-context-protocol 5

hol-guard

01

hashgraph-online/hol-guard

MCP server Claude CodeCodexCursor +2

Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs. Runs locally from the hol-guard Python package.

not rated 915 +71 today A tokens not measured original Apache-2.0

mcp-server

02

emiliaprotocol/emilia-protocol

MCP server Claude CodeCodexCursor +2

Exact-action approval for consequential agent actions: request, track, and verify signed receipts. Runs locally from the @emilia-protocol/mcp-server npm package. Needs 3 environment variables to run.

not rated 611 +1 4d ago A tokens not measured original Apache-2.0

filesystem

03

opena2a-org/hackmyagent

MCP server Cursor

One of 2 in mcp.json

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

not rated 84 +1 today A tokens not measured original Apache-2.0

signet-mcp-tools

04

Prismer-AI/signet

MCP server Claude CodeCodexCursor +2

MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio. Runs locally from the @signet-auth/mcp-tools npm package.

not rated 40 +1 23d ago A tokens not measured original Apache-2.0

free-memory-report

05

qualixar/skillfortify

MCP server Claude CodeCodexCursor +2

MCP server "free-memory-report" as configured in qualixar/skillfortify. Runs json.tool with python. Needs 1 environment variable to run.

not rated 38 15d ago A tokens not measured

solana-dev

06

GeckoVision/gecko-surf

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "solana-dev", hosted remotely at mcp.solana.com, as configured in GeckoVision/gecko-surf.

not rated 21 +13 4d ago A tokens not measured original Apache-2.0

agentveil

07

agentveil-protocol/agentveil-sdk

MCP server Claude CodeCodexCursor +2

Python SDK for routed AI-agent action decisions, approvals, receipt records, and bounded evidence. Runs locally from the agentveil Python package.

not rated 15 3d ago A tokens not measured original MIT

vaara-server

08

vaaraio/vaara

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Accountable Autonomy for AI agents under the EU AI Act: policy-gated tool calls, hash-chained tamper-evident audit trails with external time anchoring, and independently verifiable attestation plus execution receipts per MCP tool call. Runs locally from the vaara Python package. Needs 2 environment variables to run.

not rated 15 today A tokens not measured AGPL-3.0

tap

09

holonym-foundation/tap-oss

MCP server Claude CodeCodexCursor +2

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval. Remote server at mcp.tap.human.tech.

not rated 13 +1 2mo ago A tokens not measured original Apache-2.0

mcpsafetywarden

10

gautamvarmadatla/mcpsafetywarden

MCP server Claude CodeCodexCursor +2

MCP proxy server with behavioral profiling, security scanning, risk gating, and safe execution. Runs locally from the mcpsafetywarden Python package.

not rated 8 yesterday A tokens not measured

wormhole-x402

11

runningoffcode/agent-wormhole

MCP server Claude CodeCodexCursor +2

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts. Runs locally from the wormhole-x402 npm package. Needs 3 environment variables to run.

not rated 5 22d ago A Socket: warn tokens not measured original Apache-2.0

github

12

arshan846/pluto-aguard

MCP server Claude CodeCodexCursor +2

One of 3 in claude_desktop_config.json

MCP server "github" as configured in arshan846/pluto-aguard. Runs in Docker (ghcr.io/github/github-mcp-server). Needs 1 environment variable to run.

not rated 4 3mo ago A tokens not measured original Apache-2.0

mcp-seatbelt

13

KryptosAI/mcp-seatbelt

MCP server Claude CodeCodexCursor +2

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine. Runs locally from the @kryptosai/mcp-seatbelt npm package.

not rated 3 2mo ago A tokens not measured original MIT

defenter-proxy

14

Defenter-AI/defenter-proxy

MCP server Claude CodeCodexCursor +2

Defenter proxy. Runs locally from the defenter-proxy Python package.

not rated 3 9mo ago A tokens not measured original Apache-2.0

inkog

15

inkog-io/inkog-mcp

MCP server Claude CodeCodexCursor +2

Scan AI agents for security vulnerabilities. Audit MCP servers before installation. Runs locally from the @inkog-io/mcp npm package. Needs 1 environment variable to run.

not rated 3 1mo ago A tokens not measured original Apache-2.0

doteyeso-ops/mcp-server-vibes-coded

MCP server Claude CodeCodexCursor +2

Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools. Remote server at vibes-coded-mcp-production.up.railway.app.

not rated 3 17d ago A tokens not measured original MIT

dfx-agentguard

17

dockfixlabs/agentguard

MCP server Claude CodeCodexCursor +2

Autonomous security scanner for AI agents. Detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities. Runs locally from the dfx-agentguard Python package.

not rated 3 +1 2mo ago A tokens not measured LGPL-3.0

shield

18

kobepaw/goop-shield-community

MCP server Claude CodeCodexCursor +2

MCP server "shield" as configured in kobepaw/goop-shield-community. Launched with goop-shield mcp --port 8787.

not rated 2 6mo ago A tokens not measured original Apache-2.0

kernel

19

Actenon/actenon-kernel

MCP server Claude CodeCodexCursor +2

Open proof-required execution kernel for consequential actions. Runs locally from the actenon-kernel Python package.

not rated 2 9d ago A tokens not measured original Apache-2.0

zyrax-guard

20

tiagosilva07/zyrax-guard

MCP server Claude CodeCodexCursor +2

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages. Runs locally from the zyrax-guard npm package.

not rated 2 2mo ago A tokens not measured original MIT

velvet-rope

21

paulchum/velvet-rope

MCP server Claude CodeCodexCursor +2

MCP server "velvet-rope" as configured in paulchum/velvet-rope. Runs locally from the velvet-rope Python package.

not rated 2 23d ago A tokens not measured

mcpkernel

22

piyushptiwari1/mcpkernel

MCP server Claude CodeCodexCursor +2

MCP server "mcpkernel" as configured in piyushptiwari1/mcpkernel. Launched with mcpkernel serve --host 127.0.0.1 --port 8000. Needs 1 environment variable to run.

not rated 2 4mo ago A tokens not measured original Apache-2.0

rudimentall1/agentic-wallet-guardian-v3

MCP server Claude CodeCodexCursor +2

Decision infrastructure for autonomous AI agents: evaluates a proposed blockchain action intent and returns an explainable ALLOW/WARN/BLOCK decision before execution, signed as a verifiable OAA token. Runs locally from the agentic-wallet-guardian-mcp Python package.

not rated 1 8d ago A tokens not measured original MIT

aisentinel

24

Kabzhanov/AISentinel

MCP server Claude CodeCodexCursor +2

MCP server "aisentinel" as configured in Kabzhanov/AISentinel. Launched with https://github.com/Kabzhanov/AISentinel/releases/download/v1.0.6/aisentinel-v1.0.

not rated 1 3mo ago A tokens not measured