llm-security MCP servers

54 tagged llm-security, measured the same way as everything else here.

Browse within: ai-security 35agent-security 16Prompt Injection 8model-context-protocol 8cursor 7AI Safety 6cybersecurity 5devsecops 5mcp-security 5

shellward

01

jnMetaCode/shellward

MCP server Claude CodeCodexCursor +2

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Runs locally from the shellward npm package. Needs 3 environment variables to run.

not rated 140 17d ago A tokens not measured original Apache-2.0

filesystem

02

opena2a-org/hackmyagent

MCP server Cursor

One of 2 in mcp.json

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

not rated 84 +1 today A tokens not measured original Apache-2.0

mastyf.ai

03

mastyf-ai/mastyf.ai

MCP server Claude CodeCodexCursor +2

Runtime proxy for MCP security, cost governance & audit. Runs locally from the @mastyf_ai/server npm package. Needs 3 environment variables to run.

not rated 21 2d ago A tokens not measured AGPL-3.0

hangar

04

mcp-hangar/mcp-hangar

MCP server Claude CodeCodexCursor +2

Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT. Runs locally from the mcp-hangar Python package. Needs 1 environment variable to run.

not rated 18 today A tokens not measured original MIT

prodcheck

05

FarzamHabibi/pre-production-checklist

MCP server Claude CodeCodexCursor +2

4,372 pre-production checks: security, performance, scale, integrations, post-launch. Runs locally from the prodcheck npm package.

not rated 15 today A Socket: warn tokens not measured

tap

06

holonym-foundation/tap-oss

MCP server Claude CodeCodexCursor +2

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval. Remote server at mcp.tap.human.tech.

not rated 13 +1 2mo ago A tokens not measured original Apache-2.0

scanner

07

bawbel/scanner

MCP server Claude CodeCodexCursor +2

Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injection, tool poisoning, and supply chain attacks. Runs locally from the bawbel-scanner Python package.

not rated 12 today A tokens not measured original Apache-2.0

skilltotal

08

pezhik/skilltotal

MCP server Claude CodeCodexCursor +2

AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.

not rated 12 +6 yesterday A tokens not measured original Apache-2.0

mcp-safeguard

09

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

not rated 11 +2 7d ago A tokens not measured original MIT

malskanner

10

Octolabo/malskanner

MCP server Claude CodeCodexCursor +2

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it. Runs locally from the malskanner npm package.

not rated 5 2mo ago A tokens not measured original MIT

aegisforge

11

sunilgentyala/AegisForge-MCP

MCP server Claude CodeCodexCursor +2

MCP server "aegisforge" as configured in sunilgentyala/AegisForge-MCP. Launched with cargo run --manifest-path mcp-server/Cargo.toml --release --. Needs 1 environment variable to run.

not rated 5 21d ago A tokens not measured original MIT

ai-appsec

12

subodhkc/ai-appsec

MCP server Claude CodeCodexCursor +2

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. Runs locally from the ai-appsec npm package.

not rated 4 8d ago A tokens not measured original MIT

github

13

arshan846/pluto-aguard

MCP server Claude CodeCodexCursor +2

One of 3 in claude_desktop_config.json

MCP server "github" as configured in arshan846/pluto-aguard. Runs in Docker (ghcr.io/github/github-mcp-server). Needs 1 environment variable to run.

not rated 4 3mo ago A tokens not measured original Apache-2.0

mcp-guardian

14

rudraneel93/mcp-guardian

MCP server Claude CodeCodexCursor +2

Security, cost, and health governance proxy for MCP infrastructure. Runs locally from the @mcp-guardian/server npm package. Needs 3 environment variables to run.

not rated 4 4mo ago A tokens not measured original MIT

agentguards

15

alelaguard/agentguards-plugins

MCP server Claude CodeCodexCursor +2

MCP server "agentguards", hosted remotely at prod.agentguards.co, as configured in alelaguard/agentguards-plugins.

not rated 4 yesterday A tokens not measured original MIT

Xiangyu-Li97/prompt-injection-mcp

MCP server Claude CodeCodexCursor +2

MCP server "prompt-injection-mcp" as configured in Xiangyu-Li97/prompt-injection-mcp. Runs locally from the prompt-injection-mcp npm package.

not rated 3 8mo ago A tokens not measured

dfx-agentguard

17

dockfixlabs/agentguard

MCP server Claude CodeCodexCursor +2

Autonomous security scanner for AI agents. Detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities. Runs locally from the dfx-agentguard Python package.

not rated 3 +1 2mo ago A tokens not measured LGPL-3.0

mcp-sentinel

18

jiangmuran/sentinel

MCP server Claude CodeCodexCursor +2

Automated testing framework for MCP (Model Context Protocol) servers. Runs locally from the mcp-sentinel Python package.

not rated 2 2mo ago A tokens not measured original Apache-2.0

kernel

19

Actenon/actenon-kernel

MCP server Claude CodeCodexCursor +2

Open proof-required execution kernel for consequential actions. Runs locally from the actenon-kernel Python package.

not rated 2 8d ago A tokens not measured original Apache-2.0

agent-sec

20

kernora-ai/agent-sec

MCP server Claude CodeCodexCursor +2

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP. Remote server at agentsec.kernora.ai.

not rated 1 2mo ago A tokens not measured original Apache-2.0

aisentinel

21

Kabzhanov/AISentinel

MCP server Claude CodeCodexCursor +2

MCP server "aisentinel" as configured in Kabzhanov/AISentinel. Launched with https://github.com/Kabzhanov/AISentinel/releases/download/v1.0.6/aisentinel-v1.0.

not rated 1 3mo ago A tokens not measured

yagami

22

MatthewTracy/yagami

MCP server Claude CodeCodexCursor +2

Open-source AI context firewall for governed model, retrieval, memory, and tool access. Runs locally from the yagami Python package. Needs 3 environment variables to run.

not rated 1 yesterday A tokens not measured original MIT

sentinel-scan-cli

23

Ventrova/sentinel-scan-cli

MCP server Claude CodeCodexCursor +2

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics. Runs locally from the sentinel-scan-cli npm package.

not rated 1 1mo ago A tokens not measured original MIT

zugashield

24

Zuga-Technologies/ZugaShield

MCP server Claude CodeCodexCursor +2

Comprehensive 7-layer security system for AI agents — prompt injection, tool exploitation, memory poisoning, data exfiltration, and more. Runs locally from the zugashield Python package.

not rated 1 6d ago A tokens not measured original MIT