ZBS Index What actually exists in applied AI, with the source next to it

Security

Everything here was classified as security by keyword match against the maintainer's own description, so treat the grouping as a starting point rather than a verdict.

The list is ordered by the most recent commit, not by stars. A popular project that stopped in 2024 is not a better answer than a smaller one shipped last week.

Worked on in the last 90 days (12)

Someone pushed a commit recently. This is the shortlist worth trying first.

Exists, but quiet (47)

No commit in the last 90 days. Often fine for something small and finished, risky for anything you need fixed.

  • io.github.apatilgtn/k8scortex-mcp — last commit 2026-05-08, v1.0.2
    Kubernetes MCP server: 75 tools for GKE, AKS, EKS, RBAC, audit logging, GitOps, multi-cluster.
  • Aegis — AI Agent Governance — last commit 2026-05-05, v0.1.7
    Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.
  • Frogeye Security Scanner — last commit 2026-05-05, v1.5.18
    Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
  • io.github.dewtech-technologies/obsidian-mcp-secure — last commit 2026-05-03, v1.0.4
    Secure MCP server for Obsidian with OWASP Top 10 controls and full audit logging.
  • io.github.atmflow55/datafood-mcp — last commit 2026-05-02, v6.0.2
    DataFood: 16 data sources (crypto/DeFi/security/news/finance) via one MCP. Bundles save ~92%.
  • DMARKOFF — DMARC, SPF & DKIM Analytics — last commit 2026-04-30, v1.0.1
    DMARC analytics for AI assistants — domain health, SPF/DKIM records, compliance stats, anomalies.
  • io.github.Agnuxo1/enigmagent-mcp — last commit 2026-04-26, v1.0.2
    Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.
  • io.github.governmyai/mcp-server — last commit 2026-04-25, v0.1.4
    AI compliance obligations across EU AI Act, ISO 42001, Colorado AI Act, NIST, HIPAA, SOX, FTC
  • SiteGuardian — last commit 2026-04-25, v1.0.0
    EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.
  • Haldir — last commit 2026-04-22, v0.1.0
    Guardian layer for AI agents: identity, secrets, audit via MCP.
  • ExposureGuard — last commit 2026-04-18, v1.0.2
    Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.
  • KTA-Oracle — last commit 2026-04-16, v1.1.0
    Live KTA rates, market data, payment rails, AML/VAT compliance, SDK snippets. 16 tools.
  • FAOSTAT MCP — last commit 2026-04-15, v1.2.2
    FAOSTAT data for 245 countries: crops, trade, food security, and emissions via 21 MCP tools.
  • com.stackhawk/stackhawk — last commit 2026-04-13, v1.1.1
    An MCP server that provides interaction with StackHawk's security scanning platform.
  • FeedOracle Compliance Agent — last commit 2026-04-12, v3.0.0
    MiCA compliance evidence, stablecoin risk, macro regime, agent governance. 79 tools.
  • io.github.DingDawg-dev/dingdawg-finance-agent — last commit 2026-04-09, v2.0.4
    Financial analysis AI. Forecasting, audit prep, SOX/GAAP compliance. Accuracy compounds with use.
  • io.github.dingdawg/dingdawg-finance-agent — last commit 2026-04-09, v2.0.7
    Financial analysis AI. Forecasting, audit prep, SOX/GAAP compliance. Accuracy compounds with use.
  • Arcjet — last commit 2026-04-09, v1.0.0
    An MCP server for Arcjet - the runtime security platform that ships with your AI code.
  • io.github.Digital-Defiance/mcp-filesystem — last commit 2026-04-08, v0.1.9
    Advanced filesystem operations with strict security boundaries for AI agents
  • io.github.Digital-Defiance/mcp-process — last commit 2026-04-08, v0.1.1
    Process management and monitoring for AI agents with strict security boundaries
  • Prism Scanner — last commit 2026-04-07, v0.1.1
    Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
  • Agent Module — last commit 2026-04-04, v0.9.9
    Deterministic compliance and vertical knowledge bases for autonomous agents. Free 24hr trial.
  • MCPAmpel - MCP Security Scanner — last commit 2026-04-02, v0.2.2
    Scan installed MCP servers for security vulnerabilities with 16 detection engines.
  • io.github.BurtTheCoder/shodan — last commit 2026-03-31, v1.0.22
    MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
  • io.github.FinishKit/mcp — last commit 2026-03-30, v0.1.0
    FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
  • ALM X++ MCP Server — last commit 2026-03-25, v1.2.0
    50 AI tools for D365 F&O: X++ search, ADO integration, code gen, security tracing & upgrade impact.
  • com.craftedtrust/mcp-shield — last commit 2026-03-25, v2.0.0
    Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
  • io.github.dockersamples/mcp-docker-release-information — last commit 2026-03-24, v0.3.0
    MCP server providing Docker Desktop release notes and security information.
  • io.github.ExpertVagabond/guardrails — last commit 2026-03-22, v1.0.1
    AI Agent Guardrails MCP server - security layer
  • AI Scanner — last commit 2026-03-21, v1.0.6
    Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
  • Verdict — Compliance for AI-Generated Code — last commit 2026-03-21, v0.3.0
    Compliance verdicts for AI-generated code. SOC 2, HIPAA, HITRUST for healthcare IT.
  • io.github.Aguantar/vibescan-mcp-server — last commit 2026-03-19, v0.1.0
    MCP server for VibeScan — scan projects for leaked secrets and security issues
  • Contract Security Scanner — last commit 2026-03-17, v1.0.0
    Scans Base L2 smart contracts for security risks. Risk score 0-100, detects backdoors & proxies.
  • io.github.Cyberweasel777/botindex-mcp-server — last commit 2026-03-16, v2.2.0
    DeFi signal intelligence + agent discovery. Funding arb, whale alerts, Zora, compliance.
  • Android Security Analyzer — last commit 2026-03-14, v1.0.0
    MCP server for static security analysis of Android source code
  • io.github.ertugrulakben/dep-oracle — last commit 2026-03-13, v1.3.0
    Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.
  • SkillsSafe Security Scanner — last commit 2026-03-13, v1.1.0
    AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
  • TheArtOfService Compliance Intelligence — last commit 2026-03-07, v1.1.0
    Query 692+ compliance frameworks, 13,700+ controls, and 280K+ cross-framework mappings.
  • io.github.bighippoman/license-compliance — last commit 2026-03-06, v1.0.2
    Scan npm dependencies for license compliance issues. Catch GPL contamination.
  • io.github.andrewszk/clawvault-mcp-server — last commit 2026-03-06, v0.1.1
    AI agent payment security - spending limits, whitelists, and human approval.
  • Fetter MCP — last commit 2026-02-26, v1.0.1
    Real-time Python package and vulnerability data for AI coding agents.
  • io.github.Bajuzjefe/aikido-mcp — last commit 2026-02-26, v0.1.1
    Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
  • Bulwark — last commit 2026-02-25, v0.2.0
    AI agent governance: content scanning, audit logs, policy evaluation, session management.
  • io.github.Company-Gibraltar/company-gi — last commit 2026-02-24, v1.0.1
    Gibraltar company tools: corporate tax, compliance deadlines, and PDF form generation.
  • io.github.Company-Gibraltar/company-gibraltar — last commit 2026-02-24, v1.0.0
    Gibraltar company tools: corporate tax, compliance deadlines, and PDF form generation.
  • io.github.365xbusiness/vigo-mcp — last commit 2026-02-24, v1.0.0
    AI-powered Hong Kong SFC regulatory intelligence. Bilingual EN/ZH compliance queries.
  • io.github.andrasfe/vulnicheck — last commit 2026-02-22, v0.1.0
    HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Repository gone or archived (1)

The registry still lists these, but the linked repository returns 404 or the owner archived it. Shown so you do not spend time discovering that yourself.

Page 4 of 13

How this page is ordered

Entries are grouped by whether anyone is still working on them, using the date of the most recent push to the repository. They are not ordered by stars, because a star is a bookmark somebody left once and never took back.

Where we have not checked an entry yet, it says so rather than being mixed in with the verified ones.