ZBS Index What actually exists in applied AI, with the source next to it

Security

Everything here was classified as security by keyword match against the maintainer's own description, so treat the grouping as a starting point rather than a verdict.

The list is ordered by the most recent commit, not by stars. A popular project that stopped in 2024 is not a better answer than a smaller one shipped last week.

Exists, but quiet (7)

No commit in the last 90 days. Often fine for something small and finished, risky for anything you need fixed.

  • io.github.debu-sinha/excalidraw — last commit 2026-02-08, v1.0.2
    Security-hardened Excalidraw MCP server with auth, rate limiting, and 14 tools
  • io.github.alisaitteke/npm-mcp — last commit 2026-01-29, v0.0.3
    MCP server for npm package management, security analysis, and compatibility checking
  • io.github.digidenone/synapse-audit — last commit 2026-01-23, v3.0.0
    AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.
  • com.sonatype/dependency-management-mcp-server — last commit 2026-01-14, v1.0.2
    Sonatype component intelligence: versions, security analysis, and Trust Score recommendations
  • Microsoft Sentinel Data Exploration — last commit 2026-01-14, v1.0.1
    Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de
  • MCPower Security Proxy — last commit 2025-12-22, v0.0.87
    Security proxy that wraps MCP servers with real-time monitoring and policy enforcement
  • Defenter Proxy — last commit 2025-12-22, v0.0.96
    Real-time semantic security for AI coding agents and MCP tools

Listed, not yet verified by us (46)

Published to the registry, but we have not yet checked its repository. Treat the entry as the maintainer’s claim only.

  • Pre-Trip compliance scanner — v1.0.1
    Screen regulated-health marketing copy against source-cited rulesets, all 50 states.
  • AI Security Gateway — MCP Gateway — v1.0.0
    Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.
  • Arketo — v1.0.0
    Draw your app's architecture on a live canvas and flag the bottlenecks and security gaps.
  • BlueNexus Universal MCP — v1.14.1
    Connect your AI to all your data - 200+ sources, intelligently filtered, compliance-ready.
  • ai.dynamicfeed/dynamic-feed — v0.8.7
    94 keyless tools of live, verifiable data for AI: weather, hazards, space, CVEs. Ed25519-signed.
  • RFP.ai — v1.0.1
    Draft cited RFP and security questionnaire answers from your knowledge base, with human review
  • ai.webmatik/audit — v1.0.0
    AI website growth audits: SEO, performance, AI readiness (GEO), conversion, a11y, security.
  • ClearPolicy — v1.0.1
    Authenticated MCP server for ClearPolicy policy and compliance workflows.
  • app.deviceshelf/deviceshelf-server — v1.9.0
    Query your local network in plain language: devices, open ports, security findings and alerts.
  • EuroComply — EU Regulatory Compliance — v0.3.0
    EU regulatory compliance data: 17 regulations, deadlines, enforcement actions. EU-hosted.
  • ThornGuard — v0.1.0
    Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging.
  • AppGenie Compliance MCP — v1.0.0
    Cited, standards-aware compliance overlay for AI assistants (ISO, NIST, FedRAMP, IRAP), over MCP.
  • Mengi Cloud — v1.0.0
    Manage Kubernetes clusters, deployments, databases, secrets and observability on Mengi Cloud.
  • ZEN SecDB — v1.0.0
    ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
  • com.ayurak/aribot-mcp — v1.0.1
    Threat modeling, code, API & cloud security, shadow-AI & compliance governance.
  • com.bidda/bidda-compliance — v1.6.0
    10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE).
  • Compliance Batch Alignment — v1.0.0
    Check whether a NAICS code aligns with a vertical: a routing-for-review signal, not a determination.
  • OFAC SDN Screening — v1.0.0
    Screen a name against the U.S. Treasury OFAC SDN list. Information, not a compliance determination.
  • Bright Security — v1.0.0
    Enables AI agents to access Bright Security tools for app discovery and security testing.
  • com.cognivators/mcp-safeguard — v0.3.2
    MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
  • ComplianceAutomator Public MCP — v0.1.0
    Public read-only MCP for products, frameworks, guides, methodology, and blog metadata.
  • ContinueOps Public MCP — v0.2.0
    BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.
  • Cotribute MCP — v0.1.0
    Connect AI agents to financial institution origination, analytics, and compliance workflows.
  • CSIDIA — operational notes and capabilities — v1.2.0
    AI regulation, data protection and compliance notes from CSIDIA, plus its capability catalogue.
  • com.cve-security/cve-intelligence — v1.3.0
    CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.
  • DataNexus MCP — v2.4.14
    Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
  • com.dropwatchhq/compliance-evidence — v1.0.0
    Dated, signed compliance-evidence packs: gov-fact-grounded claims + exclusion screens + trap-facts.
  • com.dropwatchhq/health-intel — v1.0.0
    Healthcare provider & compliance intel: NPPES lookup, OIG/SAM exclusion screening, FDA enforcement.
  • MCP Compliance Preflight — v1.0.0
    Scan an MCP server for EU AI Act Art. 50, tool quality, OAuth hygiene & security before shipping.
  • XRay-Vision — v2.1.0
    AI-powered codebase analysis — call graphs, security, dead code, complexity. 150+ tools.
  • eurc402 — EU compliance (VAT + company data) — v0.1.3
    Free EU VAT (VIES) + pan-EU company data (10 registers), payable in EURC/USDC via x402.
  • Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database — v0.3.9
    Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
  • Kuro AI Agent MCP Server — v1.1.0
    AI agent tools: translation (95+ langs), crypto research, compliance, summarization.
  • Framekeep Public Discovery — v1.2.0
    Read-only discovery of Framekeep capabilities, security boundaries, and public resources.
  • com.graneth/mcp-server — v0.6.0
    Pre-flight check for AI coding agents: hallucinated packages + hardcoded secrets. Free, no account.
  • com.grcmigrate/directory — v1.0.0
    Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.
  • com.hirosecure/agents — v1.0.0
    Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.
  • com.hirosecure/architect — v1.0.0
    Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
  • com.httpstatus/mcp-server — v0.1.0
    AI-callable tools for API mocking, testing, monitoring, security, and automation.
  • Imperio — Italian Tax & Compliance Tools — v1.1.0
    Italian tax + NIS2 scope: Codice Fiscale, P.IVA, IBAN, ATECO, IMU, F24, FatturaPA. Free, no LLM.
  • InfoSec Job Board — v1.0.0
    Search 10k+ live cybersecurity jobs from 246 security companies, plus salary benchmarks and stats.
  • com.leadsapp/leadsapp — v1.0.0
    Search 136M+ US/CA B2B contacts free, verify emails free, get compliance verdicts. Pay per reveal.
  • LION — Verified Company & Compliance Data — v1.13.0
    Keyless x402 compliance on Base: $0.001 OFAC wallet screen, $0.05 pack, $0.95 company file.
  • CDC Social Vulnerability Index — v1.1.0
    SVI scores and theme breakdowns by county and tract
  • EPA EJScreen — v1.1.0
    Environmental justice screening indicators, pollution burden, and demographic vulnerability
  • USDA Food Access — v1.1.0
    SNAP participation, food insecurity indicators, and agricultural statistics

Repository gone or archived (7)

The registry still lists these, but the linked repository returns 404 or the owner archived it. Shown so you do not spend time discovering that yourself.

  • Clarid Compliance — repository gone, v1.0.0
    Check bank marketing for FDIC, NCUA, TILA, Reg DD, Reg Z, UDAAP, and Equal Housing compliance.
  • ai.getvet/vet — repository gone, v0.4.2
    Discover and vet MCP servers: search 200K+ AI tools with security verification and schemas.
  • LaunchTrust — repository gone, v0.1.0
    Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
  • com.correctover/mcp-server — repository gone, v1.2.3
    MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.
  • Constat MCP — FDA Device Evidence Lifecycle — repository gone, v0.5.3
    FDA and CMS evidence for AI medical devices: 510(k), postmarket, reimbursement, and compliance.
  • Jeikin — repository gone, v0.3.1
    Accessibility compliance for AI coding tools. WCAG 2.2 reviews with shared evidence.
  • com.keyboardcrumbs/mcp — repository gone, v1.0.1
    Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.

Page 5 of 13

How this page is ordered

Entries are grouped by whether anyone is still working on them, using the date of the most recent push to the repository. They are not ordered by stars, because a star is a bookmark somebody left once and never took back.

Where we have not checked an entry yet, it says so rather than being mixed in with the verified ones.