agentmods.dev

devsecops MCP servers

50 tagged devsecops, measured the same way as everything else here.

Browse within: ai-security 13cli 10model-context-protocol 10LLM 7appsec 7Prompt Injection 5audit 5code-quality 5cybersecurity 5llm-security 5mcp-server 5

Sort RelevanceRecently updatedFewest tokensSecurity gradeRepo starsStars this weekTop rated 50 mods

cve-mcp

01

mukul975/cve-mcp-server

MCP server Claude CodeCodexCursor +2

MCP server "cve-mcp" as configured in mukul975/cve-mcp-server. Runs cve_mcp.server with python. Needs 4 environment variables to run.

not rated 1.6k +2 15d ago A tokens not measured original Apache-2.0

vet-mcp

02

safedep/vet

MCP server Cursor

One of 2 in mcp.json

MCP server "vet-mcp" as configured in safedep/vet. Runs in Docker (ghcr.io/safedep/vet:latest).

not rated 1.1k +4 changed 1mo ago A tokens not measured original Apache-2.0

skylos

03

duriantaco/skylos

MCP server Claude CodeCodexCursor +2

Open-source, local-first static analysis and PR gates for Python, TypeScript/JavaScript, Go, Java, Kotlin, PHP, Rust, Dart, C#, C++, and Shell. Finds dead code, security issues, secrets, quality regressions, and AI-code mistakes. Runs locally from the skylos Python package. Needs 1 environment variable to run.

not rated 847 +3 yesterday A Socket: warn tokens not measured original Apache-2.0

stripe-mcp

04

apisec-inc/AI-Surface

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "stripe-mcp" as configured in apisec-inc/AI-Surface. Runs locally from the @stripe/mcp-server npm package.

not rated 136 +1 7d ago A tokens not measured original MIT

codeinspectus

05

Synvoya/codeinspectus

MCP server Claude CodeCodexCursor +2

Local-first MCP security scanner and CLI for AI-generated applications. Runs locally from the codeinspectus npm package.

not rated 48 12d ago A tokens not measured original Apache-2.0

mythos-agent

06

mythos-agent/mythos-agent

MCP server Claude CodeCodexCursor +2

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP. Runs locally from the mythos-agent npm package.

not rated 45 +1 4mo ago A tokens not measured original MIT

guardlink

07

Bugb-Technologies/guardlink

MCP server Claude CodeCodexCursor +2

MCP server "guardlink" as configured in Bugb-Technologies/guardlink. Launched with guardlink mcp.

not rated 19 yesterday A tokens not measured original MIT

defectdojo-mcp

08

jamiesonio/defectdojo-mcp

MCP server Claude CodeCodexCursor +2

DefectDojo MCP server for integrating with DefectDojo vulnerability management system. Runs locally from the defectdojo-mcp Python package.

not rated 17 +1 1y ago A tokens not measured original MIT

prodcheck

09

FarzamHabibi/pre-production-checklist

MCP server Claude CodeCodexCursor +2

4,372 pre-production checks: security, performance, scale, integrations, post-launch. Runs locally from the prodcheck npm package.

not rated 15 today A Socket: warn tokens not measured

scanner

10

bawbel/scanner

MCP server Claude CodeCodexCursor +2

Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injection, tool poisoning, and supply chain attacks. Runs locally from the bawbel-scanner Python package.

not rated 12 today A tokens not measured original Apache-2.0

skilltotal

11

pezhik/skilltotal

MCP server Claude CodeCodexCursor +2

AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.

not rated 12 +6 yesterday A tokens not measured original Apache-2.0

pkgxray

12

adamsjack711-ux/pkgxray

MCP server Claude CodeCodexCursor +2

MCP server "pkgxray" as configured in adamsjack711-ux/pkgxray. Runs ./bin/mcp-server.js with node.

not rated 11 yesterday A tokens not measured original MIT

niro

13

apxlabs-ai/niro

MCP server Claude CodeCodexCursor +2

MCP server "niro" as configured in apxlabs-ai/niro. Launched with https://github.com/apxlabs-ai/niro/releases/download/v0.1.61/niro.mcpb.

not rated 11 +1 1mo ago A tokens not measured

draugr

14

draugr-dev/draugr

MCP server Claude CodeCodexCursor +2

MCP server "draugr" as configured in draugr-dev/draugr. Launched with https://github.com/draugr-dev/draugr/releases/download/v0.99.1/draugr-0.99.1.mcp.

not rated 7 yesterday A tokens not measured original Apache-2.0

sovereign-observer-mcp

15

kraken222/sovereign-observer-mcp

MCP server Claude CodeCodexCursor +2

Scan AI-generated Terraform for security misconfigurations, in your editor, before it is committed. Runs locally from the sovereign-observer Python package. Needs 2 environment variables to run.

not rated 7 1mo ago A tokens not measured original Apache-2.0

skill-audit-mcp

16

eltociear/skill-audit-mcp

MCP server Claude CodeCodexCursor +2

Scan agent skills and MCP servers for malicious patterns before you load them. Remote server at eltociear-skill-audit.hf.space.

not rated 5 16d ago A tokens not measured original MIT

matrixscroll

17

SSX360/matrixscroll

MCP server Claude CodeCodexCursor +2

MCP server for signed machine-action records, offline tool-surface checks, with device-agnostic custody and CNSA 2.0 Category 5 crypto (ML-DSA-87, ML-KEM-1024). Runs locally from the matrixscroll Python package.

not rated 5 10d ago A tokens not measured original Apache-2.0

leakferret

18

leakferrethq/leakferret

MCP server Claude CodeCodexCursor +2

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing. Runs locally from the @leakferret/mcp npm package.

not rated 4 +1 1mo ago A tokens not measured original MIT

envault

19

DinanathDash/Envault

MCP server Claude CodeCodexCursor +2

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations. Runs locally from the @dinanathdash/envault-mcp-server npm package. Needs 2 environment variables to run.

not rated 4 14d ago A tokens not measured

ai-appsec

20

subodhkc/ai-appsec

MCP server Claude CodeCodexCursor +2

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. Runs locally from the ai-appsec npm package.

not rated 4 8d ago A tokens not measured original MIT

assay

21

chawdamrunal/assay

MCP server Claude CodeCodexCursor +2

MCP server "assay" as configured in chawdamrunal/assay. Launched with assay mcp --transport stdio.

not rated 4 3mo ago C tokens not measured original Apache-2.0

megalinter

22

DownAtTheBottomOfTheMoleHole/megalinter-mcp

MCP server Claude CodeCodexCursor +2

MCP server "megalinter" as configured in DownAtTheBottomOfTheMoleHole/megalinter-mcp. Runs ./dist/index.js with node.

not rated 3 changed 1mo ago A tokens not measured original MIT

inkog

23

inkog-io/inkog-mcp

MCP server Claude CodeCodexCursor +2

Scan AI agents for security vulnerabilities. Audit MCP servers before installation. Runs locally from the @inkog-io/mcp npm package. Needs 1 environment variable to run.

not rated 3 1mo ago A tokens not measured original Apache-2.0

mcp-secret-sentinel

24

AleBrito124356/mcp-secret-sentinel

MCP server Claude CodeCodexCursor +2

MCP server "mcp-secret-sentinel" as configured in AleBrito124356/mcp-secret-sentinel. Runs locally from the mcp-secret-sentinel Python package.

not rated 3 22d ago A tokens not measured original MIT