- Trent @trent/trentSecurity reviews, threat models over a repo or website, and remediation tracking, in your editor.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.9 GitHub stars.
- Clearfront @clearfront/clearfrontOSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs17% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
- Bug Bounty Intelligence @holistis/bug-bounty-intelligence-mcpAI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.9 GitHub stars.
- StackHawk @stackhawk/stackhawkAn MCP server that provides interaction with StackHawk's security scanning platform.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
- BlackVeil DNS & Email Security Scanner @blackveilsecurity/dnsDNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.9 GitHub stars.
- Wass @tb0hdan/wass-mcpMCP server for web application security scanning8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
- Snyk API & Web MCP Server @snyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- MCP Safety Warden @gautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- Niro @apxlabs-ai/niroAI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.16% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.8 GitHub stars.
- Draugr @draugr/draugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
- Redact MCP @r3352/redact-mcpAuto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- PreClick — An MCP-native URL preflight scanning service for autonomous agents. @preclick/preclick-mcpPreClick scans links for threats and confirms intent match with high accuracy before agents click.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.6 GitHub stars.
- Lachesis @unboundcompute/lachesisCompiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
- Skill Audit @eltociear/skill-audit-mcpMCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
- AI AppSec @subodhkc/ai-appsecEvidence-backed AppSec for AI applications and agents. Powered by HAIEC.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- Emfirge @theanshsonkar/emfirgeGit branch for your cloud. Understand AWS risk, prove fixes, and ship safer changes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
- OWASP ZAP MCP Server @pierre3/zap-mcpMCP server for OWASP ZAP vulnerability scanning with Docker management6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.4 GitHub stars.
- Cyntrisec CLI (Historical) @cyntrisec/cyntrisecHistorical AWS analysis CLI; not a current Cyntrisec product.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- SAST MCP Server @skyrxin/sast-mcp-server11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner @anshumanatrey/gitleaks-github-secret-scannerGitleaks Cloud - GitHub API Key Hunter & Secret Scanner26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.3 GitHub stars.
- GuardianShield @sparkvibe-io/guardianshieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Pentest Tools MCP @pentest-tools/mcp-serverMCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.3 GitHub stars.
- Bounty Operator @bountyoperator/bounty-operatorArgues against a security finding or a draft bug bounty report before you submit it.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
- Keel @lutfizp/keelControl plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
