#MCP serverStars · npm/mo

1. 433PolicyLayerPolicyLayer/mcpThe MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.RemoteAccount needed2
2. 434Security Recipesstevologic/security-recipes.aiRead-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.RemoteAccount needed2
3. 435AIMarket MCP Gatewayalexar76/aimarket-mcpSSRF-hardened web gateway with web fetch, web search and Metis verification, sharing an audited security core with Metis and ARGUS.Local + RemoteAccount needed1
4. 436Algentathyn-ai/algenta-sdkAlgenta decision engine: dataset discovery, exact queries, utility models, decision memory and governed agent runs with approvals and execution receipts.Local + RemoteAccount needed1
5. 437Kakuninkakunin-ai/kakunin-mcpAgent compliance and identity: verify an agent's X.509 certificate scope, read its behavioral risk score and append to an immutable audit trail.LocalAccount needed1
6. 438Mandaremandarelabs/mandareAccountability for AI agent fleets: verify a signed, hash-chained ledger, check budgets, kill an agent, and issue passports and mandates, all through the local CLI.LocalFree1
7. 439Aegiswei9072/aegisAdmission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS verdicts.LocalFree1
8. 440Agentforge TrustKOVY/agentforge-trust-mcpQuery AgentForge Trust Scores for MCP servers before connecting, covering security, code health, behavioral audit, community trust and EU compliance.LocalAccount needed1
9. 441Clawguardjoergmichno/clawguard-mcpSecurity scanner for AI agents that detects prompt injections using regex patterns.LocalFree1
10. 442Dawshundsamvas-codes/dawshund_mcpEnumerate AWS IAM data, analyze effective permissions and visualize access relationships across users, roles and resources, based on dAWShund.LocalAccount needed1
11. 443Depscopecuttalo/depscopePackage intelligence across many ecosystems: health, vulnerabilities (OSV, CISA KEV, EPSS), typosquats, malicious packages, alternatives and breaking changes.LocalAccount needed1
12. 444Gooo go Portskimjooyoon/gooo-go-ports/service-grant-mcpLocal stdio server for Gooo-generated service-grant narrowing decisions: checks preservation of one required request and returns the full proof with source/generation bindings. It does not apply grants or authenticate supplied facts.LocalFree1
13. 445HejdarARKALDA/hejdar-mcpRuntime policy enforcement for AI agents: evaluate actions against organization policies before execution, in observe or enforce mode.LocalAccount needed1
14. 446ModelSafetyMCPitsalissonsilva/ModelSafetyMCPScan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan and heuristics.LocalFree1
15. 447Podsuhui-organization/podLeast-privilege compiler for agents: record real tool calls, compile a minimal policy, enforce it at an MCP gateway and keep a hash-chained audit.LocalFree1
16. 448Scamverifyscamverifyai/scamverify-mcpScam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk scores.LocalAccount needed1
17. 449SecureAuditrev2ret/SecureAudit-MCPStatic C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.LocalFree1
18. 450Shieldrob925/mcp-shieldStatic security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt injection.LocalFree1
19. 451Shieldapialberthild/shieldapi-mcpSecurity intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain scanning.LocalAccount needed1
20. 452Sievegautam-u/sieve-mcpLocal macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command execution.LocalFree1
21. 453SkillssafeGUCCI-atlasv/skillssafe-mcpScan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.LocalAccount needed1
22. 454Smallprint Actiongostanos/smallprint-action/mcpQuery the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.LocalAccount needed1
23. 455Vaultedvaulted-fyi/vaulted-mcp-serverShare end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.LocalFree1
24. 456Web ExposurePerufitlife/web-exposure-mcpRead-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.LocalFree1
25. 457Agentic Wallet Guardian v3rudimentall1/agentic-wallet-guardian-v3Self-hosted security layer that evaluates AI agents' proposed blockchain transactions and returns an explainable allow, warn or block decision.LocalFree1
26. 458AgentradarBichev/agentradar-mcpOn-chain trust oracle for ERC-8004 and x402 agents: composite trust scoring, a scam wallet database, ERC-8004 identity lookup and EAS attestations on Base.LocalPaid service1
27. 459AgentscoreThezenmonster/agentscore-mcp-serverSecurity trust layer that monitors MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift and publisher posture.LocalAccount needed1
28. 460Agntoragntor/mcpAgent discovery and certification with a trust and payment rail: identity verification, escrow, settlement and reputation management.LocalAccount needed1
29. 461Captchazekebuilds-lab/captcha-mcpMiddleware that gates MCP tool calls behind a Hashcash proof-of-work challenge or an L402 Lightning payment via self-hosted LNbits.LocalFree1
30. 462Cleaner Codegoldmembrane/cleaner-codeLocally scans AI-generated code for invisible Unicode, Trojan Source, homoglyphs, rules file backdoors and typosquatting using static analysis and CodeBERT.LocalFree1213
31. 463Firewall AIopsAIops-tools/Firewall-AIopsGoverned OPNsense + pfSense firewall operations — gateway-health, rule-shadow, and blocked-traffic RCA, plus guardrailed rule/alias writes (35 tools) with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.LocalFree1
32. 464Inspectorgridinsoft/mcp-inspectorDomain and URL security analysis with GridinSoft Inspector to verify website and link safety.LocalAccount needed1
33. 465McpskillsBeBraveBeKind/mcpskills-serverScores MCP servers, AI skills and npm packages before install, scanning for prompt injection, credential theft and supply-chain risk, with a go/no-go gate.LocalFree1
34. 466PromptSpeak Governancechrbailey/promptspeak-mcp-serverPre-execution governance for agent tool calls: risk classification, behavioral drift detection, a hold queue for dangerous operations and an audit trail.LocalFree1
35. 467Qinisoqinisolabs/qinisoVerify IBAN, VAT, VIN, barcodes, national and tax IDs, crypto addresses, phone numbers, dates and holidays against checksums and curated data.Local + RemoteAccount needed1
36. 468Regulated AI Complianceuchit/mcp-regulated-ai-complianceRegulated-industry AI compliance knowledge: control lookup, use-case classification and crosswalks for EU AI Act, NIST AI RMF, ISO 42001, APRA, GDPR and more.LocalFree1
37. 469Secobservenh4ttruong/secobserve-mcpSecObserve vulnerability and license management: triage observations, manage products and rules, import scan reports and SBOMs, run scans and generate VEX.LocalAccount needed1
38. 470Securecodejuanisidoro/securecode-mcpEncrypted secrets vault for Claude Code that injects secrets into local files so the AI never sees raw values, with audit logs and per-model access rules.LocalAccount needed1
39. 471Umbraelberacasa/umbraTrust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying about tests.LocalFree1
40. 472Unphurl123Ergo/unphurl-mcpURL security signals: redirects, brand impersonation, domain age, SSL validation, parked-domain detection, structural analysis and DNS enrichment.Local + RemoteAccount needed1
41. 473Volta Notesiamredmh/volta-mcp-serverBurn-after-read encrypted Volta Notes for agents: hand off credentials between users and agents without secrets appearing in chat history.LocalAccount needed1
42. 474AW-1 Sovereign Circuit BreakerMvikManners/aw1-circuit-breakerDeterministic sub-0.2ms AST security circuit breaker and proxy for MCP tool call dispatch pipelines.Local + RemoteAccount needed1
43. 475Dcl WebhookFronesis-Labs/dcl-webhookDeterministic audit layer that checks LLM and agent outputs against jailbreak, safety and trading compliance policies and logs verdicts to a hash chain.RemoteAccount needed1
44. 476AdrMcpAtypical-Consulting/AdrMcpMCP server for Architectural Decision Records: navigate, author, validate, link, and analyze them.LocalFree1
45. 477AEMPS — CIMAromanpert/mcp-aempsMCP server for the Spanish AEMPS CIMA pharmaceutical registry (20,000+ authorised medicines).LocalFree1
46. 478agentegressco2water/agentegressSee which AI agent and MCP server talks to what on Windows, with a rule-based security verdictLocalFree1
47. 479AgentTrustagenttrust/mcp-serverIdentity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.LocalAccount needed1
48. 480Arcwallrom-baro/arcwall-mcpSecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.LocalAccount needed1