- SymbioticSec MCP @symbioticsec/mcpSymbiotic CLI MCP Server for security scanning and analysis7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Shipcheck MCP @tatelyman/shipcheck-mcpRead-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mcpshield @mcpshield-dev/mcpshieldSecurity scanner for MCP servers - detects tool poisoning and injection7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Rqwstr @kjopstad-it/rqwstrAI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- Gorgon Scout @gorgon-cyber/gorgon-scoutRun AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
- ExposureGuard @exposureguard/exposureguard-mcpDomain security scanning for AI agents. A-F grades, 8 checks, fix snippets.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Owasp Agentic @csoai-org/owasp-agentic-mcpOwasp Agentic MCP Server by MEOK AI Labs11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Meok Injection Scan @csoai-org/meok-mcp-injection-scan-mcpMCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 202617% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Shippable @egarter/shippableFind leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Audit AI @audit0/auditai-mcpFinds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- VAAST @xtrinel/vaastRead-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Aegis @verrysimatupang99/aegisCharter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Dnstwister @mrfentmen/dnstwister-mcpDNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Security Audit @joepangallo/mcp-server-security-auditScan websites for security vulnerabilities, headers, TLS, and email security.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Kryptheon @jhashantanu987-beep/kryptheonRecord a flow through your app, check it after every change, and attack a copy of your database.19% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codeaudit @infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Fray — WAF Security Testing MCP Server @dalisecurity/frayWAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI30% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- selvo @cope-labs/selvoLinux CVE prioritisation: 16 MCP tools for scan, fleet, runtime, and PR-able fix discovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Scannd @scannd/scanndTrigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Arc Security @arcself/arc-securityScan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- XploitScan @bgage72590/xploitscan-mcpSecurity scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- grim-mcp @abduljabbarbxr/grim-mcpSecurity audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Weakspot @weakspot/weakspotAudit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402.22% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Flare @flarehq/securityScan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
