audit mcp servers

squirrelscan/squirrelscan

MCP server Claude CodeCodexCursor +2

MCP server "squirrelscan", hosted remotely at mcp.squirrelscan.com, as configured in squirrelscan/squirrelscan.

raintree-technology/hig-doctor

MCP server Claude CodeCodexCursor +2

Apple Human Interface Guidelines search, lookup, and project audits for AI coding agents. Runs locally from the hig-mcp npm package. Needs 1 environment variable to run.

gebalamariusz/cloud-audit

MCP server Claude CodeCodexCursor +2

Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance…

Hyperion-GPU/ProofFlow-v0.1

MCP server Claude CodeCodexCursor +2

MCP server "proofflow" as configured in Hyperion-GPU/ProofFlow-v0.1. Launched with proofflow-mcp. Needs 1 environment variable to run.

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

MCP server for the Solana Security Standard (SOL-0XX): scan Solana/Anchor Rust and serve the rules to any MCP client (Cline, Copilot, Cursor, Claude, Windsurf). Runs locally from the @jelleo/solana-security-mcp npm package.

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients. Runs locally from the @jelleo/solana-security-mcp npm package.

ready-to-release/eac

MCP server Claude CodeCodexCursor +2

MCP server "commands" as configured in ready-to-release/eac. Launched with go run ./go/mcp/commands. Needs 1 environment variable to run.

ready-to-release/eac

MCP server Claude CodeCodexCursor +2

MCP server "github" as configured in ready-to-release/eac. Runs in Docker (ghcr.io/github/github-mcp-server).

Delego-Dev/delego

MCP server Claude CodeCodexCursor +2

Intent-bound action authorization for AI agents — authorise before a credential is used, require human approval for sensitive actions, and prove every action traces back to the instruction that authorised it. Runs locally from the delego Python package. Needs 1 environment variable to run.

ZealynxSecurity/krait

MCP server Claude CodeCodexCursor +2

MCP server "krait-solodit" as configured in ZealynxSecurity/krait. Runs mcp-servers/solodit/build/index.js with node.

ZealynxSecurity/krait

MCP server Claude CodeCodexCursor +2

MCP server "krait-forge" as configured in ZealynxSecurity/krait. Runs mcp-servers/forge/build/index.js with node.

enmanuelmag/heimdall-mcp

MCP server Claude CodeCodexCursor +2

Another Handler Knex. Runs locally from the ahk npm package.

berrzebb/quorum

MCP server Claude CodeCodexCursor +2

MCP server "quorum" as configured in berrzebb/quorum. Runs platform/core/tools/mcp-server.mjs with node.

Apex-Foundation/copilot-mcp

MCP server Claude CodeCodexCursor +2

Apex Copilot — MCP server for Apex Foundation portfolio diligence and operator tools. Runs locally from the @apexfdn/copilot-mcp npm package. Needs 2 environment variables to run.

Apex-Foundation/copilot-mcp

MCP server Claude CodeCodexCursor +2

Web3 founder diligence: code audit, jurisdiction, fund matching, portfolio, scoring. Runs locally from the @apexfdn/copilot-mcp npm package. Needs 2 environment variables to run.

cognis-digital/codegraph-mcp

MCP server Claude CodeCodexCursor +2

MCP server "codegraph-mcp" as configured in cognis-digital/codegraph-mcp. Runs locally from the codegraph-mcp Python package.

ConnorBritain/mssql-mcp-reader

MCP server Claude CodeCodexCursor +2

Read-only MCP server for Microsoft SQL Server - schema discovery, profiling, and safe querying without write operations. Runs locally from the @connorbritain/mssql-mcp-reader npm package.

ouranos-labs/pseolint

MCP server Claude CodeCodexCursor +2

Penalty-risk audit for programmatic SEO sites: verdict, risk score, and a fix manifest. Runs locally from the @pseolint/mcp npm package. Needs 2 environment variables to run.

nerviq/nerviq

MCP server Claude CodeCodexCursor +2

Gives the agent up-to-date documentation and code examples for libraries and frameworks, fetched on demand so answers are not stuck at the model's training cutoff. Runs locally from the @upstash/context7-mcp npm package.

vaquarkhan/MCP-Bastion

MCP server Claude CodeCodexCursor +2

Security middleware for MCP servers protecting LLM agents from prompt injection, resource exhaustion, and PII leakage. Runs locally from the mcp-bastion-python Python package.

ExposureGuard/haldir

MCP server Claude CodeCodexCursor +2

The guardian layer for AI agents — scoped sessions, AES-256-GCM secrets, hash-chained audit, policy proxy. Runs locally from the haldir Python package.

sundsoffice-tech/ai-audit-trail

MCP server Claude CodeCodexCursor +2

Cryptographically verifiable audit trail for AI systems — Ed25519 signed, hash-chained Decision Receipts with ISO 42001 / NIST AI RMF compliance mappings. Runs locally from the ai-audit-trail Python package.

l-agence/agence

MCP server Claude CodeCodexCursor +2

AI governance MCP server — policy enforcement, skills, memory, multi-LLM consensus. Runs locally from the @l-agence/mcp-server-agence npm package. Needs 1 environment variable to run.

s0fractal/warrant

MCP server Claude CodeCodexCursor +2

Verify what an AI agent decided — signed, hash-addressed decision records with reasons you can re-run on your own machine. Runs locally from the warrant-verify Python package. Needs 3 environment variables to run.