owasp MCP servers

10 tagged owasp, measured the same way as everything else here.

scanner

01

bawbel/scanner

MCP server Claude CodeCodexCursor +2

Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injection, tool poisoning, and supply chain attacks. Runs locally from the bawbel-scanner Python package.

not rated 12 today A tokens not measured original Apache-2.0

subodhkc/mcp-tenant-isolation

MCP server Claude CodeCodexCursor +2

Static analysis scanner for MCP server code and multi-tenant SaaS applications. Runs locally from the mcp-tenant-isolation npm package.

not rated 4 11d ago A tokens not measured original MIT

dfx-agentguard

03

dockfixlabs/agentguard

MCP server Claude CodeCodexCursor +2

Autonomous security scanner for AI agents. Detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities. Runs locally from the dfx-agentguard Python package.

not rated 3 2mo ago A tokens not measured LGPL-3.0

mcp-hardened

04

Nu1lstep/MCP-Hardened

MCP server Claude CodeCodexCursor +2

MCP server "mcp-hardened" as configured in Nu1lstep/MCP-Hardened. Runs locally from the mcp-hardened Python package.

not rated 0 2mo ago A tokens not measured original MIT

gorgon-scout

05

Gorgon-Cyber/gorgon-scout-mcp

MCP server Claude CodeCodexCursor +2

MCP server "gorgon-scout" as configured in Gorgon-Cyber/gorgon-scout-mcp. Launched with https://github.com/Gorgon-Cyber/gorgon-scout-mcp/releases/download/v1.0.38/gorgo.

not rated 0 2mo ago A tokens not measured

owasp

06

pipeworx-io/mcp-owasp

MCP server Claude CodeCodexCursor +2

MCP server "owasp", hosted remotely at gateway.pipeworx.io, as configured in pipeworx-io/mcp-owasp.

not rated 0 23d ago A tokens not measured original MIT

mcp-semgrep-scanner

07

archimedes-market/mcp-semgrep-scanner

MCP server Claude CodeCodexCursor +2

MCP server "mcp-semgrep-scanner" as configured in archimedes-market/mcp-semgrep-scanner. Runs locally from the mcp-semgrep-scanner Python package.

not rated 0 5mo ago A tokens not measured original MIT

blindoracle

08

craigmbrown/blindoracle-mcp

MCP server Claude CodeCodexCursor +2

Trust layer for the x402 agent economy: 40 pay-per-call SKUs, USDC on Base, verifiable proofs. Remote server at api.craigmbrown.com.

not rated 0 changed 29d ago A tokens not measured original Apache-2.0

provekit-mcp

09

Th3Circle-app/provekit-mcp

MCP server Claude CodeCodexCursor +2

MCP server "provekit-mcp" as configured in Th3Circle-app/provekit-mcp. Runs locally from the provekit-mcp Python package.

not rated 0 2mo ago A tokens not measured original MIT

compuute-scan-api

10

Compuute/compuute-scan-api

MCP server Claude CodeCodexCursor +2

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages. Remote server at scan.compuute.se.

not rated 0 1mo ago A tokens not measured copy · 86% MIT