N

Nuguard

NuGuardAI

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.

M

MCP Zap Server

dtkmn

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

Z

Zettelforge

ThreatRecall

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

A

Agent Passport System

agent-passport-system

Open protocol and TypeScript SDK for AI agent authority: identity, scoped delegation, enforcement before the action, and signed receipts.

I

Investigators Copilot

assafkip

Free open-source OSINT and investigation toolkit for Claude Code: case management, 54 OSINT enrichment adapters, structured analytic techniques (ACH), chain-of-custody evidence capture, and threat-int

A

Agent Browser

kontext-security

One connection for all your MCP servers.

T

Tengu

rfunix

AI-powered penetration testing MCP server

K

Keyrealm

YZBRH

Local-first credential manager & validator for red teams / pentest：致力于 ALL IN ONE 的本地凭据管理与验证平台 keyrealm（凭域）。 允许将红队渗透测试中获取的散落在各处的 API Key、云厂商 AK/SK、机器人 Token、邮箱授权码、登录态等集中加密保管、便捷验证与快速利用。多插件多类别，单条·批量·定时验

M

MCP Oauth Gateway

atrawog

An OAuth 2.1 Authorization Server that adds authentication to any MCP (Model Context Protocol) server without code modification.

M

MCP Security Testing Guide

OWASP

OWASP MCP Security Testing Guide

P

Python

mcp-auth

Plug-and-play auth for Python MCP servers.

M

MCP Secrets Plugin

amirshk

Secure credential management for MCP servers leveraging system-native keychain storage across macOS, Windows, and Linux platforms

M

MCP Security Audit

qianniuspace

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

B

BurpMCP

swgee

Burp Suite Extension with MCP Server to enhance manual application security testing

M

MCPwner

Pigyon

Model Context Protocol server for autonomous vulnerability discovery

A

AI SOC Agent

M507

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

O

OneSelf

ptonlix

One self. One context. Every AI.

S

Shodan

Cyreslab-AI

MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).

C

Codeinspectus

Synvoya

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

J

Js

mcp-auth

Plug-and-play auth for Node.js MCP servers.

Reference MCP servers that demo how authentication works with the current Model Context Protocol spec.

J

Jsowl

Spade-sec

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交互式 HTML 报告，是渗透测试、红队信息

V

VulneraMCP

telmon95

An AI-Powered Bug Bounty Hunting Platform - Comprehensive MCP server for security testing, vulnerability research, and bug bounty hunting

M

Malvex

JoasASantos

AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server

B

Bugbounty

gokulapap

Comprehensive MCP server for bug bounty hunting and web application penetration testing

V

VulnMCP

vulnerability-lookup

A modular MCP server providing AI-driven vulnerability management skills, including severity classification and automated insights.

C

Copilot Security Instructions

Robotti-io

A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.

S

Search Solodit

LyuboslavLyubenov

MCP server for searching and retrieving Solodit vulnerability reports.

O

Opendevicedb

opendevicedb

Open directory of 30,000+ devices whose protocols or firmware are already open (OpenWrt, LineageOS, coreboot, QMK, Zigbee, printers, mice, tablets, drones…), so nobody — human or AI agent — redoes the

O

OpenDeviceDB

Offiziell

org.opendevicedb

Check 21,000+ devices with open firmware or protocols before reverse engineering one.

D

DevProjex

Avazbek22

Turn any folder or Git repo into safe, token-efficient context for LLMs, AI chats, and coding agents like Claude Code, Codex, and Cursor — local-first GUI, TUI, CLI, and a read-only MCP server with Li

P

Pocket Disasm

whoisqwerz

Multi-session IDALib MCP router for coding agents. Analyze multiple binaries in parallel with IDA-compatible reverse engineering tools.

G

Ggmcp

GitGuardian

MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.

M

MCP For Security Python

f1tz

一个为主流渗透测试工具打造的MCP服务器集合。 | A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into A

R

Retrokit

nautilusbits

Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library signatures, MCP server

F

Fastmcp Threatintel

4R9UN

AI-Powered Threat Intelligence MCP tool