Security

Everything here was classified as security by keyword match against the maintainer's own description, so treat the grouping as a starting point rather than a verdict.

The list is ordered by the most recent commit, not by stars. A popular project that stopped in 2024 is not a better answer than a smaller one shipped last week.

Worked on in the last 90 days (60)

Someone pushed a commit recently. This is the shortlist worth trying first.

• io.github.CSOAI-ORG/uk-ai-bill-compliance-mcp — last commit 2026-06-26, v1.0.6
  UK AI Regulation Compliance MCP. Automates audits against the UK AI White Paper five principles ...
• io.github.CSOAI-ORG/uk-ai-act-mcp — last commit 2026-06-26, v1.0.9
  UK AI regulation compliance tools for AI agents. Capabilities: UK risk classification, AISI
• io.github.CSOAI-ORG/nrswa-ai-mcp — last commit 2026-06-26, v1.0.6
  UK street works compliance. Section 50 licences, S58 deferral, S74 overrun penalties, NRSWA accr...
• io.github.CSOAI-ORG/nis2-compliance-mcp — last commit 2026-06-26, v1.3.9
  NIS2 Directive (EU 2022/2555) compliance for AI agents. 10 Article 21 risk-management measures a...
• io.github.CSOAI-ORG/meok-attestation-verify — last commit 2026-06-26, v1.0.3
  Tiny zero-dependency verifier for MEOK AI Labs compliance attestations (DORA, NIS2, CRA, EU AI Act,
• io.github.CSOAI-ORG/mdr-medical-device-mcp — last commit 2026-06-26, v1.0.6
  EU MDR (Reg 2017/745) and IVDR (Reg 2017/746) compliance for medical device + IVD manufacturers...
• io.github.CSOAI-ORG/korea-ai-basic-act-mcp — last commit 2026-06-26, v1.0.2
  Korea AI Basic Act compliance MCP — in force 22 Jan 2026. High-impact AI + GenAI labelling + MSIT
• io.github.CSOAI-ORG/hipaa-compliance-mcp — last commit 2026-06-26, v1.0.6
  hipaa-compliance-mcp MCP server by MEOK AI Labs
• io.github.CSOAI-ORG/dora-compliance-mcp — last commit 2026-06-26, v1.4.13
  DORA (EU Digital Operational Resilience Act) compliance for AI agents. 5-pillar audit, incident ...
• io.github.CSOAI-ORG/coppa-ferpa-mcp — last commit 2026-06-26, v1.0.8
  Children's privacy compliance: COPPA (US), FERPA (US edu), EU AI Act children's provisions, UK A...
• io.github.CSOAI-ORG/construction-iso-19650-mcp — last commit 2026-06-26, v1.0.9
  ISO 19650 / UK BIM Level 2 compliance for construction projects. EIR, BEP, MIDP, TIDP, and CDE s...
• io.github.CSOAI-ORG/care-home-cqc-mcp — last commit 2026-06-26, v1.0.13
  UK Care Quality Commission (CQC) Single Assessment Framework compliance for care homes. AI-assisted
• io.github.CSOAI-ORG/aml-ai-mcp — last commit 2026-06-26, v1.0.11
  6AMLD + UK MLR 2017 + FinCEN BSA AML/CFT compliance for AI-enabled transaction monitoring, sanct...
• io.github.CSOAI-ORG/ai-incident-reporting-mcp — last commit 2026-06-26, v1.1.9
  AI Incident Reporting Compliance MCP. Unified classification + reporting-clock tracker across EU...
• io.github.CSOAI-ORG/agent-audit-logger-mcp — last commit 2026-06-26, v1.1.10
  Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-ha...
• io.github.groundlogic-ai-source/accessibility-ai — last commit 2026-06-25, v1.0.0
  Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.
• Windows Management — last commit 2026-06-25, v0.3.1
  Local Windows management, diagnostics, security, cleanup, and optimization MCP server.
• io.github.Baneado98/ci-sentinel — last commit 2026-06-24, v0.1.0
  Multi-CI security scanner with a live threat-intel feed of compromised CI components
• MCP Server for OSCAL — last commit 2026-06-23, v0.4.0
  AI agent tools for Open Security Controls Assessment Language (OSCAL)
• Apiiro Guardian Agent — last commit 2026-06-22, v1.0.0
  Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants.
• io.github.eliottreich/taskbounty-check — last commit 2026-06-21, v0.1.6
  Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.
• Trestle — last commit 2026-06-21, v1.4.1
  Detects leaked secrets (API keys, tokens, private keys) in source code.
• io.github.CSOAI-ORG/meok-vehicle-handover-mcp — last commit 2026-06-16, v1.0.2
  Vehicle handover compliance — NAMA Vehicle Grading, BVRLA Fair Wear & Tear, photographic POD
• io.github.CSOAI-ORG/meok-ev-recall-transport-mcp — last commit 2026-06-16, v1.0.2
  EV-recall transport compliance — ADR Class 9 (UN3480/3481/3536/3556/3557/3558), DGSA workflow
• io.github.CSOAI-ORG/meok-eu-platform-worker-mcp — last commit 2026-06-16, v1.0.0
  EU Platform Workers Directive (2024/2831) compliance — employment-status presumption
• io.github.CSOAI-ORG/meok-eu-mobility-package-mcp — last commit 2026-06-16, v1.0.0
  EU Mobility Package compliance — EU 561/2006 drivers' hours, 4-week return-to-base, Posted Workers
• io.github.CSOAI-ORG/meok-cra-art14-reporter-mcp — last commit 2026-06-16, v1.0.3
  MEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d
• io.github.CSOAI-ORG/meok-bs7121-mcp — last commit 2026-06-16, v1.0.3
  BS 7121 lift-plan compliance for UK crane + hiab operators. Parts 1/3/4/5 clause lookup, Appointed
• io.github.CSOAI-ORG/mcp-spec-compliance-mcp — last commit 2026-06-16, v1.0.1
  MCP Spec Compliance MCP — audits any MCP server.json against the official Model Context Protocol
• io.github.CSOAI-ORG/csrd-compliance-mcp — last commit 2026-06-16, v1.3.10
  Csrd Compliance MCP Server by MEOK AI Labs
• io.github.ai-supply-store/ai-supply — last commit 2026-06-15, v1.0.0
  Search, install, publish & review security-scanned AI capabilities from ai-supply.store.
• io.github.CSOAI-ORG/cybersecurity-ai-mcp — last commit 2026-06-15, v1.0.11
  Cybersecurity Ai MCP Server by MEOK AI Labs
• Tripwire — last commit 2026-06-12, v0.3.1
  Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.
• io.github.Fashad-Ahmed/universal-db-mcp — last commit 2026-06-11, v1.1.2
  Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.
• MCP Modal Server — last commit 2026-06-11, v0.2.4
  MCP server for managing Modal apps, containers, volumes, and secrets.
• AI Firewall MCP — last commit 2026-06-09, v1.0.1
  Multi-agent LLM security layer detecting prompt injection and jailbreaks.
• io.github.getgapup/gapup-mcp — last commit 2026-06-08, v0.2.4
  271 agent-payable tools: competitive intel, finance, KYC, compliance, ESG. x402 per-call.
• io.github.bch1212/agentvault — last commit 2026-06-06, v0.1.0
  Credential vault for AI agents — Fernet-encrypted keys, per-agent budgets, audit logs.
• com.rulemesh/compliance — last commit 2026-06-05, v1.0.0
  Engineered GDPR compliance for engineers and AI agents: pull rules, implement, submit evidence.
• io.github.ark-forge/mcp-eu-ai-act — last commit 2026-06-04, v2.0.31
  EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.
• Keyblind — last commit 2026-06-03, v0.1.4
  Encrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.
• Attestor — last commit 2026-05-30, v4.0.0
  Self-hosted memory for agent teams. Bi-temporal replay, deterministic retrieval, audit log.
• io.github.DingDawg-dev/dingdawg-compliance — last commit 2026-05-26, v2.0.4
  EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.
• io.github.dingdawg/dingdawg-compliance — last commit 2026-05-26, v2.0.11
  EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.
• io.github.gsepcore/gsep-mcp — last commit 2026-05-24, v1.0.0
  AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.
• io.github.BurtTheCoder/virustotal — last commit 2026-05-24, v1.0.17
  MCP server for querying VirusTotal API with comprehensive security analysis tools.
• io.github.erikirby/domain-intel — last commit 2026-05-20, v1.0.0
  Website intelligence for AI agents: tech stack, hosting, security posture, SEO, and DNS.
• com.clauxel.antigravityextensiongate/antigravityextensiongate-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for Antigravity extension compatibility MCP, structured receipts, audit logs, and re
• com.clauxel.agentichtmlexportqa/agentichtmlexportqa-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for agentic HTML export QA MCP, structured receipts, audit logs, and reviewer-ready
• com.clauxel.semblecodesearchgate/semblecodesearchgate-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for agent code search routing MCP, structured receipts, audit logs, and reviewer-rea
• com.clauxel.speckitacceptance/speckitacceptance-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for spec driven development acceptance gate MCP, structured receipts, audit logs, an
• com.clauxel.veocreditwaste/veocreditwaste-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for Veo 4 credit waste gate MCP, structured receipts, audit logs, and reviewer-ready
• com.clauxel.opendesignguard/opendesignguard-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for agent design system guard MCP, structured receipts, audit logs, and reviewer-rea
• com.clauxel.agentskillupdategate/agentskillupdategate-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for Claude Code skill update gate MCP, structured receipts, audit logs, and reviewer
• com.clauxel.aistudioworkspaceapproval/aistudioworkspaceapproval-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for AI Studio Workspace approval gate MCP, structured receipts, audit logs, and revi
• com.clauxel.webmcpactionreceipt/webmcpactionreceipt-mcp — last commit 2026-05-20, v1.0.0
  Paid remote MCP for WebMCP action receipt MCP, structured receipts, audit logs, and reviewer-ready e
• com.clauxel.geminiomnirights/geminiomnirights-mcp — last commit 2026-05-20, v1.0.0
  Remote MCP for Gemini Omni commercial rights receipt MCP, structured receipts, audit logs, and revie
• com.clauxel.c2padisclosure/c2padisclosure-mcp — last commit 2026-05-20, v1.0.0
  Remote MCP for C2PA disclosure policy MCP, structured receipts, audit logs, and reviewer-ready evide
• com.clauxel.mcpdeprecation/mcpdeprecation-mcp — last commit 2026-05-20, v1.0.0
  Remote MCP for MCP tool deprecation receipt, structured receipts, audit logs, and reviewer-ready evi
• com.clauxel.a2areplayreceipt/a2areplayreceipt-mcp — last commit 2026-05-20, v1.0.0
  Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.

Page 3 of 13

• ← Previous
• Page 1
• Page 2
• Page 3 (you are here)
• Page 4
• Page 5
• Page 13
• Next →

How this page is ordered

Entries are grouped by whether anyone is still working on them, using the date of the most recent push to the repository. They are not ordered by stars, because a star is a bookmark somebody left once and never took back.

Where we have not checked an entry yet, it says so rather than being mixed in with the verified ones.