Security & Identity

The agent switchboard: identity, policy, loop-guard, and an append-only audit ledger.

Scout Security

Varpost

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

HODLXXI Read-Only

hodlxxi

Public read-only MCP server for HODLXXI agent identity, trust, receipts, and verification.

io.github.rijul170/sophos-central-mcp

rijul170

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

io.github.companybetatel/mcp-server

companybetatel

Phone verification: free keyless coverage/pricing discovery + 4-channel OTP send. 15 tools.

io.github.Easton-OU/rootpilot-ssh-diagnose

Easton-OU

Read-only SSH server diagnostics via a fixed 38-command whitelist; secrets redacted, no write path.

Ansvar: Threat Intelligence

Ansvar-Systems

CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.

io.github.datahogo/datahogo

datahogo

Scan a project for security issues locally with the open-source Data Hogo engine.

mcp-scan

CodingSelim

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

io.github.shieldly-io/mcp

shieldly-io

AI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.

Purify Security Feeds

eason4kim-rocket

Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

io.github.kakunin-ai/kakunin

kakunin-ai

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

com.policylayer/registry

PolicyLayer

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.

DevUtils MCP Server

paladini

36 local developer utilities for AI agents. Hash, encoding, UUID, JWT, JSON, network, text.

io.github.nqzai/kakunin

nqzai

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

io.github.jarod-vyent/xrpl-identity-mcp

jarod-vyent

MCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.

ai.cobbles/cobbles

Yu1586

The shared task board for teams and their AI agents — connect over OAuth, every action signed.

io.github.VamsiSudhakaran1/release-gate

VamsiSudhakaran1

Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

com.dustforge/demipass

bildow

Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

AgentSecurityLens MCP Security Trust Check

professor2k8

MCP security trust-check for agents before installing MCPs, Skills or tools.

HTTP

Abhishekkumar2021

HTTP/REST client with saved collections, env secrets, and SSRF-safe host allowlisting.

io.github.H129hj/checkmcp

H129hj

Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

works.mima/governance-mcp

mimaworks

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

io.github.codespar/mcp-niubiz

codespar

MCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse