- MEOK Hardening @csoai-org/meok-mcp-hardening-mcpMEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 1021% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Checkmarx @checkmarx/checkmarxOfficial Checkmarx MCP Server3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- TenantGuard @rudrendupaul/tenantguardScans self-hosted multi-tenant AI-agent platforms for tenant-isolation gaps via an MCP tool.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- WP HealthKit @wphealthkit/mcp-serverSecurity audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Umbra @elberacasa/umbraTrust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- O360 @offensive360/o360-mcpRun Offensive360 SAST scans (60+ languages) on local code; findings with file/line and fixes7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sitelemetry @sitelemetry/sitelemetryOAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Voyager Agent @dir-ai/voyager-agentOne universal Voyager: name a goal; it activates senses (repo, net) and runs a live mission.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Voyager Browser @dir-ai/voyager-browserVoyager's web-page sense: safe read-only observation of one live URL (structure, security, a11y).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Scout Security @varpost/scoutDeterministic, zero-token security scanner your AI agent calls to find and re-verify issues.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Aribot @aristiun/aribotThreat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Datahogo @datahogo/datahogoScan a project for security issues locally with the open-source Data Hogo engine.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- mcp-scan @codingselim/mcp-scanPassive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MCP Shield @sophiacave/mcp-shieldSecurity scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CyberLens @shadoprizm/cyberlens-mcp-serverSecurity scanning for websites, public repositories, and Open CLAW skills.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- vuln-intel @rozetyp/vuln-intelFree hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MiddleBrick MCP @middlebrick/mcp-serverScan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Contract Security Scanner @mastrophot/contract-security-scannerMCP smart contract scanner with NEAR-focused security context.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mcpwatch @lazymac2x/mcpwatchAudit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Cybersim Pro @kayembahamid/cybersim-proCybersecurity training, simulation, and incident response MCP server6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Audit @joepangallo/mcp-audit-serverThin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Turbopentest @integsec/turbopentestAI-powered penetration testing. Launch scans, review findings, download reports.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Eleion Scanner @hernaninverso/eleion-scanner-mcpRegister/verify your domains, queue security scans, and read findings (CVE, severity).6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mcpcheckup @fpetitit/mcpcheckupScans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
