Security

Vulnerability scanning, secrets management, and security tooling. 1 111 entrées correspondantes dans le registre Forge — affichage des 150 premières.

• microsoft/mcp-for-beginnersThis open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cr
• 0x4m4/hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomousl
• firerpa/lamda The most powerful Android RPA agent framework, next generation mobile automation.
• wgpsec/ENScan_GO一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
• snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
• elementalsouls/Claude-BugHunterA Claude Code skill bundle for bug hunting and external red-team work — 71 skills, 15 slash commands, 681 disc
• cyberagiinc/DevDocsCompletely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers
• stacklok/toolhiveToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
• @aikidosec/mcpAikido MCP server
• mukul975/cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco
• cisco-ai-defense/mcp-scannerScan MCP servers for potential threats & security findings.
• utkusen/sast-skillsCollection of agent skills that turn your AI coder into a SAST scanner
• ghostsecurity/skillsGhost Security's collection of AppSec skills for AI coding agents
• semgrep/skillsA collection of skills for AI coding agents from Semgrep
• @trusty-squire/mcpTrusty Squire gives coding agents the ability to provision, ship, and pay — without your keys or card ever lea
• grim-mcpSecurity audit for AI agents. Finds code, dependency, exposure, secrets, and active-compromise gaps across any
• mcp-slim-guardMCP proxy for schema compression, tool access control, SSRF protection, injection detection, rate limiting and
• cisco-ai-defense/a2a-scannerScan A2A agents for potential threats and security issues
• Houseofmvps/ultraship"ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pe
• AndrewAltimit/template-repoAgent orchestration & security template featuring MCP tool building, agent2agent workflows, mechanistic interp
• io.github.sinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
• @kryptosai/mcp-observatoryMCP security scanner and CI gate. Test, secure, and monitor MCP servers with attack simulation, schema drift d
• nel-veil-mcpFree passive security scanning for AI agents. Check any domain for email spoofing (DMARC/SPF/DKIM), TLS, secur
• @pan-sec/notebooklm-mcpSecurity-hardened MCP server for NotebookLM API with compliance-ready architecture (GDPR, SOC2, CSSF controls
• @ship-safe/mcpShipSafe MCP server — the independent verifier for AI-built apps: your AI coding agent checks the code it writ
• codemoreThe static analyzer your AI agent reads — finds production-blocking bugs in vibe-coded apps (CLI, GitHub Actio
• @grantor/mcpGrantor permission broker for multi-agent frameworks — grant, delegate, check, revoke bounded capabilities ove
• safeinstall-cliLocal-first CLI that blocks risky npm, pnpm, and bun installs before they run. Open source.
• @vantasdk/vanta-mcp-serverModel Context Protocol server for Vanta's security compliance platform
• mcp-bastionReliability + security proxy for the Model Context Protocol (MCP): self-healing connections, runtime tool-secu
• mnki-mcpmnki-mcp — a local MCP proxy that verifies every tools/call against Agent Trust before it reaches the server (
• @takescake/1password-mcpMCP server for 1Password service accounts — tools, prompts, and resources for vault and credential management
• import-guardian-mcpCatch AI-hallucinated (slopsquatted) npm imports in generated code BEFORE npm install. Scans a code block, fla
• @4da/mcp-serverDependency intelligence for AI coding agents. Live CVE scanning, dependency health, upgrade planning, ecosyste
• onepassword-mcp-serverMCP server for interacting with 1Password via the CLI
• taskbounty-checkPre-launch safety check for AI-built apps (Lovable, Bolt, Replit, Cursor, v0). Scans your GitHub Actions + CI
• dsh-cert-mcpRead-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-
• intodns-mcpMCP server for IntoDNS.ai — complete DNS, email security, scan, BIMI, API, and citation tools for AI assistant
• @aimarket/wardenMCP security firewall: vet tool definitions before they reach the model.
• @slidingbox/hydrate-dehydrate-mcpMCP server for Slidingbox: hand a secret from one agent to another as an encrypted, pay-per-read, delivered-on
• @ostico/bruno-mcpAn MCP server that turns an agent's API testing into files you keep: it authors and edits Bruno collections in
• claude-skill-security-auditorClaude Code skill for running structured security audits with actionable remediation plans
• correctover-mcp-serverCompatibility package for Correctover runtime security. The legacy standalone MCP server has been replaced by
• mcp-server-scfMCP server for the SCF Controls Platform — security compliance controls, frameworks, evidence, and risk manage
• dechonet-mcpDomain security reconnaissance MCP server — 20 tools for AI agents. DNS, SSL, HTTP headers, email auth, port s
• claude-pentest-skillsStructured web application penetration testing with OWASP methodology, curated payload references, 6-gate vali
• @skarn-security/skarnSkarn - AI coding session security scanner. Single static binary; this launcher resolves and runs the prebuilt
• owasp-mcp-scanSecurity scanner for Model Context Protocol (MCP) servers. Audits running servers against the OWASP MCP Top 10
• ModelContextProtocol-Security/modelcontextprotocol-security.ioOfficial website and documentation hub for the Model Context Protocol Security initiative. Provides security g
• flutter-apk-securityReview Flutter Android APK/AAB release artifacts for manifest, permission, cleartext traffic, exported compone
• @black-duck/mcp-serverBlack Duck MCP brings Signal's AI-powered security analysis directly into your development environment. Provid
• capiscio/a2a-demosDemo agents showcasing CapiscIO Agent Guard and MCP Guard — trust badges, identity verification, and tool-leve
• @domainintel/mcpMCP server for domain intelligence: WHOIS, DNS, SSL/TLS, security headers, reputation, and subdomain analysis
• federal-compass-mcpYour AI compass from private sector to federal career — MCP server for USAJobs API
• @getaegis/cliCredential isolation for AI agents. Store, guard, and record — your agent never sees your API keys.
• @sidclaw/sdkGovernance SDK for AI agents — identity, policy, approval, and audit
• io.github.ashlrai/phantom-secrets-mcpStop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
• gadrielGadriel - Code-security CLI for AI-assisted development
• reputa-mcpMCP server exposing Reputa on-chain wallet risk & security analysis and neutral DeFi cover (insurance) analyse
• @backbond/agent-scanLocal deterministic pre-attachment security scanner for MCP and AI-agent tool manifests.
• @mcplookup/mcpOfficial stdio compatibility wrapper for the MCPLookup remote MCP server.
• com.blackveilsecurity/dnsDNS and email security scanner with 80 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
• ipgeolocation-io-mcpOfficial MCP server for IP geolocation, IP security, abuse contacts, ASN, timezone, astronomy, and user-agent
• @digicatalyst/dep-diff-mcpMCP server that translates a lockfile diff into a human-readable upgrade plan.
• visus-mcpSecurity-first MCP server. Sanitizes web content before it reaches your LLM — strips prompt injection, redacts
• phi-guard-mcpLocal-first MCP server that detects PHI flowing into LLM prompts, logs, and analytics calls in source code
• shrike-mcpMCP server for action governance on AI agents — 14 tools that govern tool calls, SQL queries, file writes, she
• @mukundakatta/shellquote-mcpMCP server for safe shell argument escaping (bash, sh, cmd.exe, PowerShell). Stops LLM-generated shell command
• ia-security-skillAuditoria de segurança defensiva pré-entrega para projetos Claude Code. Cobre web, mobile (MASVS), cloud/IaC,
• mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guard for child_process.exec/spawn, AST audit CLI for u
• @palisadeemail/mcpLocal stdio bridge to the Palisade MCP server (email authentication: SPF, DKIM, DMARC, MTA-STS, BIMI).
• @clavisagent/mcp-serverMCP server for secure credential management. Handles encrypted storage, auto token refresh, and rate limiting
• dingdawg-shieldGovernance receipts for AI agents — AI-driven security scanning with a stack-specific threat model, signed aud
• io.github.zw008/vmware-nsx-securityVMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.
• vmware-nsx-securityVMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.
• lazaretto-mcpFree lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
• demipassSecrets management for LLM sessions. Keep credentials out of context windows.
• quantumguard-mcpQuantumGuard MCP Server - Post-quantum cryptography security tools for AI coding agents. Scan for quantum vuln
• vaultboxEncrypted secrets for Next.js. No vault needed.
• @promptguard/mcp-serverPromptGuard MCP server — scan prompts, redact PII, and audit LLM SDK usage from any MCP client
• defiguard-mcpDeFiGuard MCP Server - DeFi protocol risk analysis tools for AI coding agents. Analyze token contracts, detect
• smartguard-mcpSmartGuard MCP Server - AI-powered smart contract security audit tools for Claude Code, Cursor, and AI coding
• PiQrypt/piqryptAI agent governance layer — sign, monitor and control every agent action. EU AI Act · ANSSI · NIST ready.
• vitonique/a2a-secureEnd-to-end encrypted communication for AI agents. The security layer that Google A2A forgot.
• io.github.MCPower-Security/mcpower-proxySecurity proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement
• solidity-security-auditComprehensive Solidity smart contract security auditing and vulnerability analysis skill. Based on methodologi
• @aiwerk/mcp-server-vaultBitwarden/Vaultwarden MCP server — BYOK vault access with 6 tools, Send-based reveal, TOTP, and safe agent-wri
• @sitecurl/mcpMCP server for SiteCurl website governance and audit platform. Run website audits, check scores, track regress
• io.github.Shrike-Security/shrike-mcpAI agent security scanner — prompt injection detection, SQL injection, PII isolation, threat intel.
• io.github.ako2345/android-security-analyzerMCP server for static security analysis of Android source code
• io.github.diemoeve/mcpampelScan installed MCP servers for security vulnerabilities with 16 detection engines.
• io.github.Kurok1/mcp-server-mysqlSecurity-first MySQL MCP server with AST validation, table whitelist, schema resources, and audit.
• @scanlabsai/mcp-serverScanLabsAI security scanner MCP server — scan websites for vulnerabilities and get fixes directly inside Claud
• @jelleo/solana-security-mcpMCP server for the Solana Security Standard (SOL-0XX): scan Solana/Anchor Rust and serve the rules to any MCP
• @getvetai/mcpAn MCP server that discovers MCP servers — search 200K+ AI tools with verification, security data, RAG chat, a
• ledd-mcp-audit-serverMCP server interface for AI agent and MCP security auditing — config analysis, trust audits, prompt injection
• @gera-services/mcp-geraguardMCP server for PrivacyGuard — privacy scanning, tracker detection, data broker opt-outs, and personal data pro
• io.github.eltociear/secrets-audit-mcpDetects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.
• io.github.lordbasilaiassistant-sudo/base-security-scanner-mcpMCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
• io.github.rom-baro/arcwall-securitySecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
• @cyanheads/pentest-mcp-serverOffline methodology engine for authorized penetration testing, CTF, and security research.
• @opzyai/mcpLocal-first security check MCP server for AI coding agents — finds hardcoded secrets, exposed .env files, secr
• io.github.ECD5A/tkach-securityFail-closed MCP adapter for untrusted model output over a local Tkach runtime.
• io.github.gaurav-kumar-sinha-060705/singularityFind, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring
• raven-verify-mcpLocal developer-preview MCP tool (raven_verify_token): run Raven's deterministic Solana token-launch verifier
• QWED-AI/qwed-a2aFail-closed Agent-to-Agent verification, provenance, and attestation infrastructure for AI systems.
• ai.helixar/mcpSecurity tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
• com.arcself/arc-securityScan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.
• com.olyport/cdc-sviSVI scores and theme breakdowns by county and tract
• io.github.Ansvar-Systems/ot-security-mcpOT security standards: IEC 62443, NIST 800-82/53, MITRE ATT&CK for ICS
• io.github.Compuute/compuute-scan-apiScan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
• io.github.DevInder1/tridentchain-securityLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
• io.github.Kloudle/cloud-security-scannerAWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs
• io.github.NeuraLegion/mcpAI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.
• io.github.Nomadu27/insaitsRuntime AI-to-AI security monitor. 23 anomaly types, OWASP MCP Top 10 coverage.
• io.github.RobotFleet-HQ/security-orchestraMulti-agent MCP platform for data centers and critical power.
• io.github.Servosity/abnormal-mcpAbnormal Security email threats, cases, and reporting in your terminal and your AI agents.
• io.github.Tyox-all/mundScan for prompt injection, secrets, PII, and vet MCP servers before installation
• io.github.dalisecurity/frayWAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI
• io.github.fino-oss/contract-scannerScans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.
• io.github.joepangallo/mcp-server-security-auditScan websites for security vulnerabilities, headers, TLS, and email security.
• io.github.mastrophot/contract-security-scannerMCP smart contract scanner with NEAR-focused security context.
• io.github.mcpsbom/sbom-mcpGenerate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
• io.github.mdfifty50-boop/agent-securitySecurity scanning and threat detection for AI agents
• io.github.nzdsf2-gif/relayshield-mcpBreach detection, SIM swap, domain lookalikes, OAuth watchlist, URL scanning. Subscription or PAYG.
• io.github.weiseer/cve-cacheRecent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).
• io.github.wyre-technology/abnormal-mcpMCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.
• @forge-registry/cliVerify, install, and publish MCP servers, A2A agents, and AI skills via the Forge trust registry.
• io.github.nouchix/pqc-khepra-mcpPost-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.
• agent-security-lensMCP security trust-check for agents before installing MCPs, Skills or tools.
• @safeprompt.dev/mcpModel Context Protocol (MCP) server for SafePrompt — gives any MCP-compatible AI agent a tool to detect prompt
• lockfile-guardian-mcpAudit a package-lock.json for supply-chain attacks BEFORE npm install. Cross-checks every resolved dependency
• npm-guardian-mcpSupply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-reference
• contract-auditor-mcpSecurity quick-scan for smart contracts, as an MCP tool and a pay-per-call x402 endpoint. Given an address+cha
• secret-scanner-mcpScan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, S
• web-doctor-mcpLive web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does
• rugshield-mcpOn-chain rug-pull / honeypot risk screen for ERC-20 tokens: owner powers, renounce status, supply concentratio
• io.github.pipeworx-io/security-feedsSecurity Feeds MCP.
• relayshield-mcpBreach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.
• @trestlescan/mcpMCP server for Trestle, a local secret scanner for source code.
• @frangelbarrera/osint-agent-skillsOSINT Agent Skills — 23 MCP tools for autonomous OSINT investigation. DNS, WHOIS, CT logs, Shodan, breach data
• tripwire-robloxTripwire: an MCP server for Roblox Studio and Open Cloud. Downloads the prebuilt Rust binary for your platform
• radmail-mcpRadMail MCP server — email operating system for agents: two-axis triage (importance x urgency), a 'Right Now'
• io.github.shuaicongxiaomai/agentguardSecret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).
• @yobekasbah/mcp-serverKasbah MCP Server — cryptographic trust layer for agentic AI. Govern, sign, and verify every agent action from
• @akeyless-community/devin-connectorAkeyless Agentic Runtime Authority MCP connector for Devin Desktop (Windsurf) — SDK-based, no CLI required
• gwsadm-mcpMCP server for Google Workspace security auditing — login audit, external sharing, daily brief
• io.github.eason4kim-rocket/purify-feeds-mcpQuery CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions
• org.notcve/vulnerability-intelligenceCVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.
• scout-securityDeterministic, zero-token security scanner your AI agent calls to find and re-verify issues.