🔒 安全 AI 工具

An exploration of common MCP server vulnerabilities, along with a deep dive into MCP server prompt injection (+demonstrations for each!).

Chuangyu Cloud Defense Platform Log Analysis MCP Server

remote-mcp-scanner is a tool for enhancing security. Visit the link for usage details.

A MCP (Model Context Protocol) server based on the [Sensitive-lexicon](https://github.com/konsheng/Sensitive-lexicon) sensitive word library, providing sensitive word detection and filtering capabilities for LLM.

McpOidcOAuth implements a secure MCP server using OAuth DPoP and Duende.

Production-ready MCP server for Metasploit, offering 48 penetration testing tools.

BOAZ-MCP is an AI-powered evasion framework for authorized red team operations.

Advanced threat analysis and automated response system for Microsoft Sentinel.

Scanorama is a CLI tool for scanning MCP servers for security vulnerabilities.

在AI执行高风险Shell命令前自动拦截，通过推送通知要求人工实时审批，构建AI操作安全闭环，防止自动化误操作或恶意指令执行。

angrMCP is a server for rapid vulnerability exploration using binary analysis.

Web Application Security Scanner MCP Server

智能代码安全扫描器,集成本地静态分析与云威胁情报,通过包指纹识别和行为分析实现混合检测,支持依赖链风险评估。

MCP NVD Server retrieves CVE information from the national vulnerability database.

在LLM调用前扫描提示词,检测注入攻击、越狱、数据泄露、编码绕过和多语言攻击,保护AI应用安全。

AWS MCP Server integrates AWS tools for security groups, S3, and VPC analysis.

Web3 Security MCP Server for AI Clients

JEBMCP integrates JEB and MCP for streamlined reverse engineering tasks.

AI-powered bug bounty platform with essential tools and fast builds.

NIST NVD MCP Server provides access to vulnerability data via advanced search and analysis.

MCP Cyber Suite offers 50+ cybersecurity servers with orchestration tools and AI integration.

MCP Server for using Garak LLM vulnerability scanner

SuperAuth simplifies authentication for enterprise apps like Google and Notion.

PentestMCP is a Docker-based MCP server for running security scans using natural language.

MCP Server provides AI-driven security insights for Kubernetes and cloud.

Automates URL threat analysis using AI and n8n workflows.

TCP tunnel proxy over Minecraft handshake with ChaCha20 encryption for DPI bypass

A Node.js tool for comprehensive front-end security audits of local and remote projects.

SuperAuth simplifies authentication for enterprise apps like Google and Notion.

Secure-Hulk is a security scanner for Model Context Protocol (MCP) servers and tools. It helps identify potential security vulnerabilities in MCP configurations, such as prompt injection, tool poisoning, cross-origin escalation, data exfiltration, and toxic agent flows.

HashiCorp Vault MCP Server integrates MCP for secure management of Vault secrets and policies.

Am I Hacked? — AI 時代的本機安全掃描。Claude Code Skill，10 層深度掃描，不裝軟體，專抓 MCP/Skills/Hooks/Chrome 擴充/npm 的新型威脅。

Secure credential management for AI agents

A comprehensive MCP server for managing Netskope Private Access with AI automation.

HashiCorp Vault MCP Server integrates MCP with Vault for secure secret management.

MCP_Recon is a Python-based server for web security reconnaissance and analysis.

A comprehensive MCP server for managing Netskope Private Access infrastructure with AI automation.

An experimental MCP server integrating AI with SafeBreach's simulation platform.

mcp-censys is a demo MCP server for real-time domain and IP reconnaissance using Censys API.

MCP Server for pentesting tools with automated reports and LLM client support.

An experimental sandbox for exploring and attacking MCP servers and clients.

NetForensicMCP is an advanced MCP server for offline network traffic analysis and threat intelligence.

MCP Lab for controlled pentesting using VSCode and GitHub Copilot.

AI-powered reverse engineering tool for x64dbg, analyzing binaries and memory dumps.

MCP server for accessing Exploit-DB using searchsploit tool.

自动审计ClawHub第三方Skill的安全性与实用性,识别代码风险、权限滥用、依赖漏洞,提供AI驱动的风险评分与修复建议,保护用户系统安全。

Upgrade your MCP server to OAuth 2.0 for enhanced security and token-based access.

Kali-MCP allows asynchronous execution of Kali Linux commands.

AI-driven tool for scanning codebases and identifying security issues.

Pangea MCP proxy secures client-server communications, blocking threats and protecting sensitive data.