- Cybersecurity Ai @csoai-org/cybersecurity-ai-mcpCybersecurity Ai MCP Server by MEOK AI Labs13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Black Duck Security Scanner @blackduck/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- VAAST @xtrinel/vaastRead-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Safe Upgrade @white-hat-lab/safe-upgradeEvidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Codeaudit @infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sphior Code @toraastrta/sphior-code-mcpDeterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Global Intel Exchange @joseph-ceo/global-intel-exchangeReal-time sanctions screening, CVE, and company registry checks for agents.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- selvo @cope-labs/selvoLinux CVE prioritisation: 16 MCP tools for scan, fleet, runtime, and PR-able fix discovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Keyboardcrumbs MCP @keyboardcrumbs/mcpLive threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- grim-mcp @abduljabbarbxr/grim-mcpSecurity audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Security Scanner @vpatser1/mcp-server-security-scannerScan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- index365 MCP @index365usa/index365Start index365 scans and read prioritized findings your coding agent can use.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ScriptDocs MCP @timwal78/scriptdocs-mcp-serverReal, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Mception @soufianetahiri/mceptionAudits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Opzyai Security Check @opzyai/mcpLocal-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
