- VulnCheck @vulncheck-oss/mcpVulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.10 GitHub stars.
- Starlog @starloghq/starlogVet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.10 GitHub stars.
- Wass @tb0hdan/wass-mcpMCP server for web application security scanning8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.8 GitHub stars.
- MCP Safety Warden @gautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
- Draugr @draugr/draugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
- Vulners @vulnerscom/vulners-mcpMCP server for the Vulners.com API6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.7 GitHub stars.
- Husk @husk-security/huskLocal-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Guardvibe @goklab/guardvibeDeterministic security layer your AI can't be. 574 rules, 39 tools, CLI + doctor + host audit.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
- Pkgdiet @om-tajne/pkgdietPut your node_modules on a diet - find unused dependencies, analyze health, and reduce size4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
- SAST MCP Server @skyrxin/sast-mcp-server11-scanner SAST/DAST MCP server with closed-loop remediation, SBOM/SARIF, and CI integrations4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
- GuardianShield @sparkvibe-io/guardianshieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
- Npm @alisaitteke/npm-mcpMCP server for npm package management, security analysis, and compatibility checking6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
- NativeKeel @alicanakyol/nativekeelReact Native and Expo health check: upgrade blockers, store rules, crash risks, security findings3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Valca @pranlabs/valcaScans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.Not assessed yet.Runs on your machine, installed from PyPI.2 GitHub stars.
- RATATOSK @garlickim21/ratatosk-mcpCNCF release intelligence: typed changes from release notes; check_stack compares versions locally.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
- Zyrax Guard @tiagosilva07/zyrax-guardAudit AI agent configs for prompt injection & rogue MCP servers; vet packages6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Raven Nest @tidynest/raven-nest-mcpAI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints25% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.2 GitHub stars.
- DugganUSA CLI — Local STDIO MCP @pduggusa/dugganusa-cliLocal STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Bawbel Scanner @bawbel/bawbel-mcpScan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 GitHub stars.
- npm Registry MCP Server @yawlabs/npmjs-mcpnpm registry MCP server — package intelligence, security audits, dependency analysis10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
- Security Suite @guardbee/security-suiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- OSV Advisories @basitalisandhu/mcp-osv-advisoriesQuery OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
- Vulnerability Scanner @4hmetuyar/vulnerability-scannerTriggers GuardBee scans, queries findings, AI-assisted remediation guidance7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
- Dependency Auditor @4hmetuyar/dependency-auditorCVE scanning for npm/pip/cargo dependencies via OSV6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
