#MCP serverStars · npm/mo

1. 145IdentArk GatewayidentArk/identarkZero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.RemoteAccount needed16
2. 146Depguardmopanc/depguardPre-install npm package checks: static analysis, supply-chain attack detection, vulnerability audits, AI hallucination guard and CycloneDX SBOM generation.LocalFree15
3. 147Runtime Guardruntimeguard/runtime-guardRuntime policy enforcement for AI agents that prevents accidental system damage and unauthorized access, with automatic backups before file writes.LocalFree15
4. 148Sint Protocolsint-ai/sint-protocolMCP governance proxy with capability tokens, tiered approvals, fail-closed execution and tamper-evident audit receipts, plus preflight tool-risk scanning.LocalFree15
5. 149Aegisgetaegis/aegisCredential isolation proxy that injects secrets at the network boundary, with domain restrictions, agent authentication and audit logging.LocalAccount needed15
6. 150Platformsidclawhq/platformGovernance proxy that wraps MCP servers with policy evaluation, human approval workflows and hash-chain audit trails.LocalAccount needed15
7. 151quantakrypto pqc-toolsquantakrypto/pqc-toolsPost-quantum readiness: scan code for quantum-vulnerable cryptography (RSA, ECDH, ECDSA, DH), get ML-KEM/ML-DSA/SLH-DSA migration guidance and verify fixes.Local + RemoteAccount needed15
8. 152s-gwsgateway/s-gwLocal credential gateway for coding agents: agents get handles instead of raw secrets, and one-time approvals inject credentials only into approved commands.LocalFree15
9. 153Scopeblind Gatewaytomjwxf/scopeblind-gatewaySecurity gateway that wraps MCP servers with per-tool policies, approval gates and optional signed receipts, in shadow (log-only) or enforce mode.LocalFree11134
10. 154Osvmrfentmen/osv-mcpUse this MCP server to OSV open source vulnerability data and package security checks. Tools...LocalFree0444
11. 155Pre Production ChecklistFarzamHabibi/pre-production-checklist4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.LocalFree15806
12. 156Quantum Shieldkota1026/quantum-shieldBridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...LocalFree0459
13. 157SafeWeavenickfluxk/safeweaveSecurity scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.Local + RemoteFree5291
14. 158Unicode Securitymrfentmen/unicode-security-mcpLocal first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...LocalFree0448
15. 159Vuln NistHaroldFinchIFT/vuln-nist-mcp-serverQuery the NIST National Vulnerability Database (NVD) API.LocalAccount needed14
16. 160AssayRul1an/assayFail-closed policy-as-code proxy for MCP that denies risky tool calls, produces offline-verifiable evidence bundles and enforces egress via eBPF and Landlock.LocalFree14
17. 161Check AI Freehyai-dev/checkaifree-mcpInspect editable image source clues. No C2PA signature verification or authenticated origin.LocalFree0424
18. 162Heliogethelio/helioOpen-source governance for MCP agents: useful autonomy without unlimited authorityLocalFree14
19. 163ScrubGuardscrubguard-dev/scrubguardLocal-first PII and secret scrubber with checksum checks and reversible LLM tokens.LocalFree414
20. 164TAPholonym-foundation/tap-ossCredential isolation for AI agents: placeholder secrets, policy checks, optional human approval.RemoteAccount needed14
21. 165Xtracticleahmetdeveci3112-crypto/XtracticleRead public X (Twitter) posts, threads and X Articles as clean Markdown. Read-only, no auth.RemoteAccount needed14
22. 166Project Komaswnotmetal/Project-Koma/koma-gate-mcpClassify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier.LocalFree13
23. 167Authmcp Gatewayloglux/authmcp-gatewayAuth proxy for MCP servers: OAuth2 with DCR, JWT, RBAC, rate limiting, multi-server aggregation and a monitoring dashboard.LocalAccount needed13
24. 168chunk-invarianceninadphalak/LLM-Shield-ProxyChecks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.LocalFree13
25. 169Indexstarloghq/indexVet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.LocalFree13346
26. 170skgatehelv-io/skgateSelf-hosted MCP gateway and LLM proxy: OAuth 2.1, model aliases, Grok subscription as an API.LocalPaid service13
27. 171VulnCheckvulncheck-oss/mcpVulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.LocalFree13
28. 172Cervellaswarmrafapra3008/cervellaswarm/mcp-serverVerify agent communication protocols with session types and Lean 4 proofs to catch deadlocks and role violations; includes a linter, formatter and LSP.LocalFree12
29. 173irulescansimonkowallik/irulescan:shield: MCP enabled code security analyzer for F5 iRulesLocalFree12
30. 174Keycloak Adminmrz1880/mcp-keycloak-adminAdminister Keycloak via its Admin REST API: users, roles, clients, groups, identity providers, federation and events, with a read-only mode.LocalAccount needed3265
31. 175Bawbel Scannerbawbel/scannerSecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.LocalFree12
32. 176Cortex Gatewaywellknownmcp/cortex-gatewaySelf-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.Local + RemoteAccount needed12
33. 177Interactive LeetcodeSPerekrestova/interactive-leetcode-mcpInteractive LeetCode MCP server with authorization and solution submission capabilitiesLocalFree12
34. 178MobiLoopenessubass/mobiloop-mcpGuarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.LocalFree12
35. 179pkgxrayadamsjack711-ux/pkgxrayPre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.LocalFree12265
36. 180Visusvisus-mcp/visus-mcpSecurity-first web access for Claude. Sanitizes pages, blocks injection, redacts PII.LocalFree1315
37. 181ZeroSMTPmsgwing/ZeroSMTPA free SMTP relay that still takes a username and password, for devices that cannot do OAuth 2.0.LocalFree5211
38. 182Agentleakyagobski/agentleakLocal privacy testing for AI agents: scan code for PII and secrets, score execution traces across internal channels, redact text, and track new or fixed findings through MCP tools.LocalFree11
39. 183Hexforge Gatewayboy-offi9-inc/hexforge-gatewayAPK reverse engineering workspace that orchestrates jadx, apktool, adb and Frida through a workflow engine, on Termux (Android) or PC.LocalAccount needed11
40. 184Opnsensecoreyhines/opnsense-mcpOPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.LocalAccount needed11
41. 185Secretctlforest6511/secretctlSecrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.LocalFree11
42. 186Zitadeltakleb3rry/zitadel-mcpZitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language.LocalAccount needed11
43. 187Aperion ShieldAperionAI/shieldLocal guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.LocalFree11
44. 188Chronoverifybeeswaxpat/chronoverify-mcpVerify a photo's capture time and provenance: C2PA Content Credentials validation, EXIF/XMP consistency checks and pixel forensics combined into one verdict.LocalAccount needed2257
45. 189HVTrackerYugantM/hvtracker-mcpPre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scan_stack to check a whole requirements.txt, package.json or MCP client config at once.Local + RemoteAccount needed1312
46. 190Bruno MCP StudioOstico/bruno-mcp-studioAuthor, edit and run Bruno collections as files: HTTP, WebSocket, gRPC, per-request pass/fail.LocalFree11
47. 191DMCA.com CasesNetroDev/dmca-cases-public-mcpDMCA.com cases. Your own token via Authorization: Bearer. No function key, no shared token.Local + RemoteFree0328
48. 192Klarion0x1Adi/KlarionSecret scanning for AI agents: rules and entropy find candidates, a model decides which are real.LocalFree11