- Wass @tb0hdan/wass-mcpMCP server for web application security scanning8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
- Snyk API & Web MCP Server @snyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- MCP Safety Warden @gautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- Niro @apxlabs-ai/niroAI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.8 GitHub stars.
- Draugr @draugr/draugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
- Redact MCP @r3352/redact-mcpAuto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Lachesis @unboundcompute/lachesisCompiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
- AI AppSec @subodhkc/ai-appsecEvidence-backed AppSec for AI applications and agents. Powered by HAIEC.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Emfirge @theanshsonkar/emfirgeGit branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- OWASP ZAP MCP Server @pierre3/zap-mcpMCP server for OWASP ZAP vulnerability scanning with Docker management6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.4 GitHub stars.
- Cyntrisec CLI (Historical) @cyntrisec/cyntrisecHistorical AWS analysis CLI; not a current Cyntrisec product.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- SAST MCP Server @skyrxin/sast-mcp-server11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- GuardianShield @sparkvibe-io/guardianshieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Keel @lutfizp/keelControl plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- AIShield Security Scanner @lm203688/aishieldScans MCP servers for tool poisoning, prompt injection and supply chain risks.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Raven Nest @tidynest/raven-nest-mcpAI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints25% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
- MCPAmpel - MCP Security Scanner @diemoeve/mcpampelScan installed MCP servers for security vulnerabilities with 16 detection engines.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Bawbel Scanner @bawbel/bawbel-mcpScan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- Audit Gap Auditor @guardbee/audit-gap-auditorOWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Context Oversharing Auditor @guardbee/context-oversharing-auditorOWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Deepsleuth @deepsleuth/deepsleuthDeterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
- A2A Auditor @4hmetuyar/a2a-auditorScans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Agent Graph Auditor @4hmetuyar/agent-graph-auditorFinds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Dechonet @node-man/dechonet-mcp13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
