ai-security MCP servers

128 tagged ai-security, measured the same way as everything else here.

Browse within: llm-security 35Prompt Injection 23agent-security 22LLM 19AI Safety 16model-context-protocol 14devsecops 13mcp-server 12cursor 10ai-governance 9cognis-digital 8cognis-neural-suite 8cybersecurity 7Guardrails 6

hol-guard

01

hashgraph-online/hol-guard

MCP server Claude CodeCodexCursor +2

Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs. Runs locally from the hol-guard Python package.

not rated 907 +70 today A tokens not measured original Apache-2.0

crm-mcp

02

adithyan-ak/AgentHound

MCP server Cursor

MCP server "crm-mcp", hosted remotely at crm-mcp, as configured in adithyan-ak/AgentHound.

not rated 451 +4 2d ago A tokens not measured original Apache-2.0

shellward

03

jnMetaCode/shellward

MCP server Claude CodeCodexCursor +2

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Runs locally from the shellward npm package. Needs 3 environment variables to run.

not rated 140 17d ago A tokens not measured original Apache-2.0

stripe-mcp

04

apisec-inc/AI-Surface

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "stripe-mcp" as configured in apisec-inc/AI-Surface. Runs locally from the @stripe/mcp-server npm package.

not rated 136 +1 7d ago A tokens not measured original MIT

sinewaveai/agent-security-scanner-mcp

MCP server Claude CodeCodexCursor +2

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities. Runs locally from the agent-security-scanner-mcp npm package.

not rated 124 +2 2d ago A tokens not measured original MIT

filesystem

06

opena2a-org/hackmyagent

MCP server Cursor

One of 2 in mcp.json

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

not rated 84 +1 today A tokens not measured original Apache-2.0

codex-security

07

bex-co/bex-security

MCP server Claude CodeCodexCursor +2

MCP server "codex-security" as configured in bex-co/bex-security. Launched with ./scripts/launch_codex_security_mcp --stdio.

not rated 51 changed 13d ago A tokens not measured copy · 98% Apache-2.0

codeinspectus

08

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

not rated 48 12d ago A tokens not measured original Apache-2.0

agrus-scanner

09

NYBaywatch/AgrusScanner

MCP server Claude CodeCodexCursor +2

MCP server "agrus-scanner", hosted remotely at localhost, as configured in NYBaywatch/AgrusScanner.

not rated 37 +5 yesterday A tokens not measured

enterprise-gateway

10

datacline/secure-mcp-gateway

MCP server Claude CodeCodexCursor +2

MCP server "enterprise-gateway", hosted remotely at localhost, as configured in datacline/secure-mcp-gateway.

not rated 32 5mo ago A tokens not measured original MIT

research-filesystem

11

msaad00/agent-bom

MCP server Cursor

One of 2 in mcp.json

MCP server "research-filesystem" as configured in msaad00/agent-bom. Runs services/research-mcp/server.py with python. Needs 2 environment variables to run.

not rated 31 6d ago A Socket: warn tokens not measured original Apache-2.0

mastyf.ai

12

mastyf-ai/mastyf.ai

MCP server Claude CodeCodexCursor +2

Runtime proxy for MCP security, cost governance & audit. Runs locally from the @mastyf_ai/server npm package. Needs 3 environment variables to run.

not rated 21 2d ago A tokens not measured AGPL-3.0

tooltrust-scanner

13

AgentSafe-AI/tooltrust-scanner

MCP server Claude CodeCodexCursor +2

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.

not rated 19 2d ago A tokens not measured original MIT

ida-pro-mcp

14

Gindhar2112/frida-mcp

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "ida-pro-mcp" as configured in Gindhar2112/frida-mcp. Launched with /opt/homebrew/opt/[email protected]/bin/python3.11 /Volumes/Realtek/project/idapython/.

not rated 18 +1 2d ago A tokens not measured

hangar

15

mcp-hangar/mcp-hangar

MCP server Claude CodeCodexCursor +2

Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT. Runs locally from the mcp-hangar Python package. Needs 1 environment variable to run.

not rated 18 today A tokens not measured original MIT

prodcheck

16

FarzamHabibi/pre-production-checklist

MCP server Claude CodeCodexCursor +2

4,372 pre-production checks: security, performance, scale, integrations, post-launch. Runs locally from the prodcheck npm package.

not rated 15 today A Socket: warn tokens not measured

aegis

17

getaegis/aegis

MCP server Claude CodeCodexCursor +2

Credential isolation for AI agents. Inject secrets at the network boundary. Runs locally from the @getaegis/cli npm package. Needs 11 environment variables to run.

not rated 14 2mo ago A tokens not measured original Apache-2.0

mcpstrike

18

ente0/mcpstrike

MCP server Claude CodeCodexCursor +2

MCP server "mcpstrike" as configured in ente0/mcpstrike. Runs locally from the mcpstrike Python package.

not rated 14 1mo ago A tokens not measured GPL-3.0

plantuml

19

friedbotstudio/baseline

MCP server Claude CodeCodexCursor +2

One of 4 in .mcp.json

MCP server for generating PlantUML diagrams. Runs locally from the plantuml-mcp-server npm package. Needs 1 environment variable to run.

not rated 14 3d ago A tokens not measured original Apache-2.0

koma-gate-mcp

20

swnotmetal/Project-Koma

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it. Runs locally from the koma-gate-mcp npm package. Needs 6 environment variables to run.

not rated 13 +1 3d ago A tokens not measured original MIT

skilltotal

21

pezhik/skilltotal

MCP server Claude CodeCodexCursor +2

AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.

not rated 12 +6 yesterday A tokens not measured original Apache-2.0

scopeblind-mcp

22

tomjwxf/scopeblind-gateway

MCP server Claude CodeCodexCursor +2

Scan, protect, and monitor APIs from AI coding tools. Device-level rate limiting. Runs locally from the scopeblind-mcp npm package.

not rated 11 3mo ago A tokens not measured original MIT

mcp-safeguard

23

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

not rated 11 +2 7d ago A tokens not measured original MIT

scenario-assistant

24

prime-radiant-inc/scenarios

MCP server Claude CodeCodexCursor +2

MCP server "scenario-assistant" as configured in prime-radiant-inc/scenarios. Runs locally from the ../../tools/mcp_server.py Python package.

not rated 10 4mo ago A tokens not measured original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: