Security

Everything here was classified as security by keyword match against the maintainer's own description, so treat the grouping as a starting point rather than a verdict.

The list is ordered by the most recent commit, not by stars. A popular project that stopped in 2024 is not a better answer than a smaller one shipped last week.

Listed, not yet verified by us (49)

Published to the registry, but we have not yet checked its repository. Treat the entry as the maintainer’s claim only.

• io.github.CSOAI-ORG/security-scanner-ai-mcp — v1.0.8
  Security Scanner Ai automation via MCP. Includes scan dependencies, check headers, scan secrets. By
• io.github.disclose/lookup-disclose-io — v2.0.1
  Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
• Bio-Safe-Audit — v1.0.0
  Biometric data privacy auditor ensuring Zero-Knowledge compliance.
• CodeVulnerability — v1.0.0
  OWASP threat scanner auditing codebases for safety leaks.
• ContractOracle-Sentinel — v1.0.0
  DeFi smart contract forensic auditor and vulnerability scanner.
• Legal Validator — v1.0.0
  Regulatory compliance scanner validating SEC, FTC, and anti-spam rules.
• LogSentinel — v1.0.0
  Anthropic logs audit filter and cybersecurity threat analyzer.
• UX-Auditor-Pro — v1.0.0
  Visual UI/UX scanner auditing websites for heuristic compliance.
• Aegis-Privacy-MCP — v1.0.0
  PII and secrets sanitization gateway with advanced OCR merging logic.
• Chairman Sovereign's 14-Floor Data Hotel — v3.0.0
  113 MCP tools: oracle, escrow, compliance, remittance, AI. 12 free tools, PAYG $0.001/call.
• io.github.ghostsecurity/ghost-mcp-server — v1.0.1
  Minimal MCP server for Ghost Security API - compatible with all MCP clients
• io.github.hellosg/coderegistry — v1.0.0
  Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
• Utility Matrix — v1.0.0
  Free browser-based calculators and analyzers for cloud cost, DevOps, security, and data governance.
• Eleion Scanner — v0.1.1
  Register/verify your domains, queue security scans, and read findings (CVE, severity).
• io.github.hiroshic9-png/edition-api — v0.3.1
  Japan business regulations, compliance, travel, protocols, memory — 10 knowledge domains, 23 tools.
• io.github.holistis/3ilm-mcp — v1.0.1
  Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
• Bug Bounty Intelligence — v1.0.3
  AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
• Sandbox Env MCP — v0.3.1
  Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.
• io.github.huwhitememes/tollbooth — v0.10.0
  37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.
• io.github.idanbier999/saperly — v0.1.2
  Phone carrier for AI agents. Provision numbers, make calls, send SMS, TCPA compliance built-in.
• DataBR — API de Dados Públicos Brasileiros — v1.0.0
  Brazilian public data API for AI agents. BCB, IBGE, CVM, B3, compliance. x402 payments on Base.
• io.github.imran-siddique/agentos — v1.0.1
  Build and manage policy-compliant AI agents with safety enforcement and compliance checking
• VulnFeed — v0.3.3
  Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
• io.github.Infinihash/infinihash-kyt-mcp — v0.1.1
  Blockchain compliance: screen wallets vs OFAC SDN + threat intel, open cases, generate SAR drafts
• io.github.infoinlet-marketplace/mcp-codeaudit — v0.1.1
  Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
• SENTINEL Compliance Intelligence — v1.0.0
  AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.
• io.github.inkog-io/inkog — v1.0.20
  Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
• IPGeolocation.io MCP Server — v2.0.0
  Official MCP server for IP geolocation, security, ASN, abuse, timezone, astronomy, and user-agent.
• io.github.ironclawdevs27/argus — v10.0.0
  Automated web QA via Chrome DevTools MCP — a11y, security, visual, env diff, CI; Aegis redaction.
• io.github.irrenwill/secret-safe-env — v0.1.2
  Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)
• Agent Venue Radar — v0.2.0
  Screen AI-work venues for inventory, funding, payouts, withdrawal, economics, and security risk.
• io.github.jasonwilbur/cloud-regions — v1.0.4
  Cloud region data for AWS, Azure, GCP, OCI & more. Query by location, compliance, GPU.
• DopamineDesk x402 Marketplace — v2.8.3
  Live chain reads from $0.001, web fetch, market and security data. No API key, free previews.
• io.github.jdhart81/agent-market-network — v0.3.0
  Signed agent discovery, security attestations, paid work, and verified settlement reputation.
• io.github.jdhart81/regulatory-radar — v0.1.2
  California, US, and global climate compliance scans with source-linked deadlines.
• io.github.jdhart81/security-preflight — v1.1.0
  Static MCP manifest and tool-policy security preflight with signed input-redacted receipts
• EU Audit Trail — v0.1.1
  Tamper-evident audit trail MCP server for EU AI Act & GDPR compliance.
• Python Code Validator — v1.0.0
  Validates AI-generated Python: syntax, lint, security scan and deterministic repair.
• io.github.jnMetaCode/shellward — v0.5.11
  AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
• io.github.joepangallo/mcp-audit-server — v2.1.0
  Thin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backend
• io.github.joepangallo/mcp-server-security-audit — v1.0.3
  Scan websites for security vulnerabilities, headers, TLS, and email security.
• io.github.joepangallo/web-recon-agent — v0.8.1
  Owned-target web security assessment MCP server for authenticated, high-friction apps.
• io.github.jonnybottles/patch-tuesday — v0.9.1
  Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
• io.github.josephibra/shadowgate-mcp — v1.0.0
  Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
• io.github.juanisidoro/securecode — v0.15.2
  Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.
• io.github.jyswee/authshore — v1.0.3
  Auth infrastructure for coding agents. User pools, secrets vault, token management. As easy as git.
• io.github.jyswee/secretcarousel — v2.11.0
  Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
• io.github.kaditang/402sentinel-mcp — v0.7.1
  x402 payment safety for AI agents: counterparty risk gate, payment firewall, compliance, RWA gate.
• io.github.kakunin-ai/kakunin — v0.2.4
  X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.

Repository gone or archived (11)

The registry still lists these, but the linked repository returns 404 or the owner archived it. Shown so you do not spend time discovering that yourself.

• io.github.CSOAI-ORG/meok-enterprise-compliance-checker — repository gone, v1.0.5
  MEOK Enterprise Compliance Checker — EU AI Act, DORA, GDPR automated gap analysis. £5K-15K audits
• io.github.CSOAI-ORG/meok-enterprise-compliance-suite — repository gone, v1.0.3
  MEOK Enterprise Compliance Suite — End-to-end EU AI Act, GDPR, NIS2, DORA, ISO, SOC2, HIPAA, PCI
• Fray — WAF Security Testing MCP Server — repository gone, v3.0.1
  WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI
• Nexus Finance — repository gone, v0.1.1
  Nexus Finance API — compliance audit, VaR/RWA risk, market quotes and case management.
• Friday Seller Tools — repository gone, v0.3.0
  Marketplace-seller tools: listing audits, PPC kits, pricing, compliance. Paid via x402 or card.
• io.github.edgarfloresguerra2011-a11y/marketnow — repository gone, v1.5.0
  MCP marketplace with 8,845 security-audited skills. 9-layer Sentinel audit + ATC trust cards.
• io.github.eidetic-works/nucleus — repository gone, v1.15.2
  Sovereign Agent OS — Persistent Memory, Governance & Compliance for AI Agents.
• io.github.fentz26/envcp — repository gone, v1.0.82
  Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.
• ClawPipe — repository gone, v3.2.0
  Cost-optimized LLM pipeline + 6 AI security skills (reasoning, triage, remediation, compliance).
• Compliance Auditor MCP — repository gone, v0.1.0
  City hiring-compliance MCP server with regulation search and full audit risk scoring.
• io.github.geraservicesuk/mcp-geracompliance — repository gone, v0.1.1
  EU AI Act and GDPR compliance: checks, audits, generate policies.

Page 7 of 13

• ← Previous
• Page 1
• Page 5
• Page 6
• Page 7 (you are here)
• Page 8
• Page 9
• Page 13
• Next →

How this page is ordered

Entries are grouped by whether anyone is still working on them, using the date of the most recent push to the repository. They are not ordered by stars, because a star is a bookmark somebody left once and never took back.

Where we have not checked an entry yet, it says so rather than being mixed in with the verified ones.