audit MCP servers

73 tagged audit, measured the same way as everything else here.

Browse within: compliance 16cli 13AI Safety 9mcp-server 8LLM 6devsecops 5eu-ai-act 5model-context-protocol 5

squirrelscan

01

squirrelscan/squirrelscan

MCP server Claude CodeCodexCursor +2

Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP. Remote server at mcp.squirrelscan.com.

not rated 281 +9 changed 22d ago A tokens not measured original MIT

cloud-audit

02

gebalamariusz/cloud-audit

MCP server Claude CodeCodexCursor +2

Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance…

not rated 72 yesterday A tokens not measured original MIT

commands

03

ready-to-release/eac

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "commands" as configured in ready-to-release/eac. Launched with go run ./go/mcp/commands. Needs 1 environment variable to run.

not rated 28 yesterday A tokens not measured

delego

04

Delego-Dev/delego

MCP server Claude CodeCodexCursor +2

Intent-bound action authorization for AI agents — authorise before a credential is used, require human approval for sensitive actions, and prove every action traces back to the instruction that authorised it. Runs locally from the delego Python package. Needs 1 environment variable to run.

not rated 25 4mo ago A tokens not measured original Apache-2.0

krait-solodit

05

ZealynxSecurity/krait

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "krait-solodit" as configured in ZealynxSecurity/krait. Runs mcp-servers/solodit/build/index.js with node.

not rated 25 +2 16d ago A tokens not measured original MIT

agent-harness-kit

06

enmanuelmag/heimdall-mcp

MCP server Claude CodeCodexCursor +2

Another Handler Knex. Runs locally from the ahk npm package.

not rated 11 3mo ago A tokens not measured

mssql-reader

07

ConnorBritain/mssql-mcp-reader

MCP server Claude CodeCodexCursor +2

Read-only MCP server for Microsoft SQL Server - schema discovery, profiling, and safe querying without write operations. Runs locally from the @connorbritain/mssql-mcp-reader npm package.

not rated 9 2mo ago A tokens not measured original MIT

proofflow

08

Hyperion-GPU/ProofFlow-v0.1

MCP server Claude CodeCodexCursor +2

MCP server "proofflow" as configured in Hyperion-GPU/ProofFlow-v0.1. Launched with proofflow-mcp. Needs 1 environment variable to run.

not rated 7 +42 2mo ago A tokens not measured original MIT

apex-copilot

09

Apex-Foundation/copilot-mcp

MCP server Claude CodeCodexCursor +2

Apex Copilot — MCP server for Apex Foundation portfolio diligence and operator tools. Runs locally from the @apexfdn/copilot-mcp npm package. Needs 2 environment variables to run.

not rated 7 2mo ago A tokens not measured original MIT

codegraph-mcp

10

cognis-digital/codegraph-mcp

MCP server Claude CodeCodexCursor +2

MCP server "codegraph-mcp" as configured in cognis-digital/codegraph-mcp. Runs locally from the codegraph-mcp Python package.

not rated 7 3mo ago A tokens not measured

pseolint

11

ouranos-labs/pseolint

MCP server Claude CodeCodexCursor +2

Penalty-risk audit for programmatic SEO sites: verdict, risk score, and a fix manifest. Runs locally from the @pseolint/mcp npm package. Needs 2 environment variables to run.

not rated 7 23d ago A tokens not measured original MIT

mcp-bastion

12

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

not rated 7 yesterday A tokens not measured

context7

13

nerviq/nerviq

MCP server Claude CodeCodexCursor +2

Gives the agent up-to-date documentation and code examples for libraries and frameworks, fetched on demand so answers are not stuck at the model's training cutoff. Runs locally from the @upstash/context7-mcp npm package.

not rated 6 2mo ago A tokens not measured copy · 100% MIT

warrant

14

s0fractal/warrant

MCP server Claude CodeCodexCursor +2

Verify what an AI agent decided — signed, hash-addressed decision records with reasons you can re-run on your own machine. Runs locally from the warrant-verify Python package. Needs 3 environment variables to run.

not rated 5 today A tokens not measured original MIT

gia-mcp-server

15

knowledgepa3/gia-mcp-server

MCP server Claude CodeCodexCursor +2

Runtime AI governance: decision gates, human approval, hash-chained audit, compliance mapping. Runs locally from the gia-mcp-server npm package.

not rated 5 1mo ago A tokens not measured

haldir

16

ExposureGuard/haldir

MCP server Claude CodeCodexCursor +2

The guardian layer for AI agents — scoped sessions, AES-256-GCM secrets, hash-chained audit, policy proxy. Runs locally from the haldir Python package.

not rated 4 11d ago A tokens not measured original MIT

ai-audit-trail

17

sundsoffice-tech/ai-audit-trail

MCP server Claude CodeCodexCursor +2

Cryptographically verifiable audit trail for AI systems — Ed25519 signed, hash-chained Decision Receipts with ISO 42001 / NIST AI RMF compliance mappings. Runs locally from the ai-audit-trail Python package.

not rated 4 5mo ago A tokens not measured original MIT

agence

18

l-agence/agence

MCP server Claude CodeCodexCursor +2

AI governance MCP server — policy enforcement, skills, memory, multi-LLM consensus. Runs locally from the @l-agence/mcp-server-agence npm package. Needs 1 environment variable to run.

not rated 4 5mo ago A tokens not measured

mcp-audit

19

saagpatel/MCPAudit

MCP server Claude CodeCodexCursor +2

MCP Permission Auditor — scan, enumerate, and risk-score all locally configured MCP servers. Runs locally from the mcp-audits Python package.

not rated 4 2d ago A tokens not measured original MIT

mcp-guardian

20

rudraneel93/mcp-guardian

MCP server Claude CodeCodexCursor +2

Security, cost, and health governance proxy for MCP infrastructure. Runs locally from the @mcp-guardian/server npm package. Needs 3 environment variables to run.

not rated 4 4mo ago A tokens not measured original MIT

dsh-audit-bundle

21

dongsheng123132/dsh-audit-bundle

MCP server Claude CodeCodexCursor +2

MCP server "dsh-audit-bundle" as configured in dongsheng123132/dsh-audit-bundle. Runs ./mcp-server.mjs with node.

not rated 2 10d ago A tokens not measured original MIT

dsh-safety

22

easygame921/dsh-safety

MCP server Claude CodeCodexCursor +2

MCP server "dsh-safety" as configured in easygame921/dsh-safety. Runs locally from the dsh-safety npm package.

not rated 2 2mo ago A tokens not measured original Apache-2.0

aikido-mcp

23

Bajuzjefe/Aikido-Security-Analysis-Platform

MCP server Claude CodeCodexCursor +2

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors. Runs locally from the aikido-mcp npm package. Needs 1 environment variable to run.

not rated 2 7mo ago A tokens not measured original MIT

agentseal

24

JoeyBrar/agentseal-mcp

MCP server Claude CodeCodexCursor +2

Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain. Runs locally from the agentseal-mcp npm package. Needs 1 environment variable to run.

not rated 2 5mo ago A tokens not measured original MIT