agentmods.dev

Prompt Injection MCP servers

45 tagged Prompt Injection, measured the same way as everything else here.

Browse within: ai-security 23model-context-protocol 15llm-security 8mcp-server 7LLM 6devsecops 5

Sort RelevanceRecently updatedFewest tokensSecurity gradeRepo starsStars this weekTop rated 45 mods

shellward

01

jnMetaCode/shellward

MCP server Claude CodeCodexCursor +2

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Runs locally from the shellward npm package. Needs 3 environment variables to run.

not rated 139 +1 20d ago A tokens not measured original Apache-2.0

tooltrust-scanner

02

AgentSafe-AI/tooltrust-scanner

MCP server Claude CodeCodexCursor +2

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.

not rated 19 5d ago A tokens not measured original MIT

infrabroker

03

luisgf/infrabroker

MCP server Claude CodeCodexCursor +2

MCP server "infrabroker" as configured in luisgf/infrabroker. Runs in Docker (ghcr.io/luisgf/infrabroker:3.1.3).

not rated 13 changed 1mo ago A tokens not measured GPL-3.0

koma-gate-mcp

04

swnotmetal/Project-Koma

MCP server Claude CodeCodexCursor +2

One of 2 in server.json

Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it. Runs locally from the koma-gate-mcp npm package. Needs 6 environment variables to run.

not rated 13 6d ago A tokens not measured original MIT

pkgxray

05

adamsjack711-ux/pkgxray

MCP server Claude CodeCodexCursor +2

MCP server "pkgxray" as configured in adamsjack711-ux/pkgxray. Runs ./bin/mcp-server.js with node.

not rated 11 4d ago A tokens not measured original MIT

mcp-safeguard

06

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

not rated 11 yesterday A tokens not measured original MIT

scenario-assistant

07

prime-radiant-inc/scenarios

MCP server Claude CodeCodexCursor +2

MCP server "scenario-assistant" as configured in prime-radiant-inc/scenarios. Runs locally from the ../../tools/mcp_server.py Python package.

not rated 10 4mo ago A tokens not measured original Apache-2.0

veracium

08

veracium-ai/Veracium

MCP server Claude CodeCodexCursor +2

Provenance-aware memory for AI agents. Runs locally from the veracium Python package. Needs 3 environment variables to run.

not rated 10 today A tokens not measured original MIT

code-factory

09

zrk222/code-factory

MCP server Claude CodeCodexCursor +2

Audit AI-built code with six evidence lanes, intent-to-proof traces, agent workflow receipts, and human-owned release gates. Runs locally from the factoryline-code-factory Python package.

not rated 6 changed 26d ago A Socket: warn tokens not measured

fs-utils

10

r3dlight/phantom

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "fs-utils" as configured in r3dlight/phantom. Runs ./scripts/fs-utils-server.mjs with node.

not rated 5 2mo ago A tokens not measured original Apache-2.0

malskanner

11

Octolabo/malskanner

MCP server Claude CodeCodexCursor +2

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it. Runs locally from the malskanner npm package.

not rated 5 2mo ago A tokens not measured original MIT

wormhole-x402

12

runningoffcode/agent-wormhole

MCP server Claude CodeCodexCursor +2

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts. Runs locally from the wormhole-x402 npm package. Needs 3 environment variables to run.

not rated 5 24d ago A Socket: warn tokens not measured original Apache-2.0

quickbooks-mcp

13

nichewizard/quickbooks-mcp

MCP server Claude CodeCodexCursor +2

MCP server "quickbooks-mcp" as configured in nichewizard/quickbooks-mcp. Runs locally from the @nichewizard/quickbooks-mcp npm package.

not rated 4 2mo ago A tokens not measured copy · 66% Apache-2.0

docs-helper

14

ralfyishere/agent-zero-trust

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

MCP server "docs-helper" as configured in ralfyishere/agent-zero-trust. Runs locally from the @example/docs-helper-mcp npm package.

not rated 4 1mo ago A tokens not measured original MIT

github

15

adudley78/mcp-audit

MCP server Claude CodeCodexCursor +2

One of 3 in claude_desktop_config.json

Lets the agent work with GitHub: search code, read and create issues and pull requests, and manage repositories through the GitHub API. Runs locally from the @modelcontextprotocol/server-github npm package. Needs 1 environment variable to run.

not rated 4 3d ago A tokens not measured copy · 89% Apache-2.0

prompt-injection-mcp

16

Xiangyu-Li97/prompt-injection-mcp

MCP server Claude CodeCodexCursor +2

MCP server "prompt-injection-mcp" as configured in Xiangyu-Li97/prompt-injection-mcp. Runs locally from the prompt-injection-mcp npm package.

not rated 3 8mo ago A tokens not measured

dfx-agentguard

17

dockfixlabs/agentguard

MCP server Claude CodeCodexCursor +2

Autonomous security scanner for AI agents. Detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities. Runs locally from the dfx-agentguard Python package.

not rated 3 2mo ago A tokens not measured LGPL-3.0

security-gate-x402

18

nohosa001-pixel/security-gate-x402

MCP server Cursor

MCP server "security-gate-x402" as configured in nohosa001-pixel/security-gate-x402. Runs mcp_server with python. Needs 1 environment variable to run.

not rated 3 +1 yesterday A tokens not measured original MIT

aishield

19

lm203688/aishield

MCP server Claude CodeCodexCursor +2

MCP server "aishield" as configured in lm203688/aishield. Runs api.mcp_server with python.

not rated 2 changed 15d ago A Socket: warn tokens not measured original MIT

guard-scanner

20

koatora20/guard-scanner

MCP server Claude CodeCodexCursor +2

Agent Skill Security Scanner - ASI Sanctuary Enforcer (v17 — OWASP Agentic Top 10 2026 Full Coverage). Runs locally from the @guava-parity/guard-scanner npm package.

not rated 2 3mo ago A tokens not measured original MIT

sentinel-scan-cli

21

Ventrova/sentinel-scan-cli

MCP server Claude CodeCodexCursor +2

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics. Runs locally from the sentinel-scan-cli npm package.

not rated 1 1mo ago A tokens not measured original MIT

agent-readiness-auditor

22

asish-singh/agent-readiness-auditor

MCP server Claude CodeCodexCursor +2

Audits any website for AI agent readiness and safety, scoring prompt injection risk and llms.txt. Runs locally from the agent-readiness-auditor npm package.

not rated 1 8d ago A tokens not measured original MIT

agent-safety-mcp

23

LuciferForge/agent-safety-mcp

MCP server Claude CodeCodexCursor +2

MCP server for AI agent safety — cost guards, injection scanning, decision tracing, agent identity (KYA), and signed receipts. Runs locally from the agent-safety-mcp Python package.

not rated 1 7mo ago A tokens not measured original MIT

magpie-scraper

24

MBemera/magpie

MCP server Claude CodeCodexCursor +2

MCP server "magpie-scraper" as configured in MBemera/magpie. Runs locally from the magpie-scraper npm package.

not rated 1 3mo ago A tokens not measured original MIT