Security MCP Servers

Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.

Rust MCP server and CLI for Apprise notification fan-out across dozens of delivery backends.

Rust MCP server and CLI for Arcane Docker and container management.

Rust MCP server and CLI for Gotify push notifications and message management.

Local-first MCP gateway and homelab control plane with CLI, HTTP API, and web UI.

Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

Rust MCP server and CLI for UniFi Network controller operations.

Rust MCP server and CLI for Unraid GraphQL, NAS, Docker, VM, and storage workflows.

Presentations.AI MCP server — create designed slide decks from a topic, text, or document.

Email OS for agents - real-inbox search, triage, commitments, and a verifiable BEC hard-stop.

Free IPv4 lookups against a distributed attacker-observation corpus.

MCP server for the SCF Controls Platform — 83 tools for controls, evidence, risk, and TPRM.

OAuth-enabled MyMLH MCP server for accessing MyMLH data.

An MCP server for Arcjet - the runtime security platform that ships with your AI code.

Connect to Atlassian Jira, Confluence, and Compass to search, create, and manage your work.

OAuth scope approvals and consent receipts for remote MCP servers.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Free catalog and 2,048-character secret-scan preview for Fabler's x402 agent tools on Base.

Local-first MCP that scores your codebase's build readiness. Your code never leaves your machine.

Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.

Plan, book, and manage business travel.

Your AI meets theirs before you do — private matching for needs, offers, and opportunities over MCP.

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.

Generate AI UGC video ads from any product URL — avatars, voiceover, OAuth Connect.

A secret store for AI agents: the agent never sees the plaintext.

Person-owned, portable AI memory as a remote MCP server, readable and writable by any MCP client.

SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

Detects leaked secrets (API keys, tokens, private keys) in source code.

Encrypted-first embedded database with vector search and agent memory, exposed as MCP tools

MCP server connecting AI agents to 100+ apps (Gmail, Slack, Notion, GitHub) via one-click OAuth.

Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.

Package intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.

Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

The static analyzer your AI agent reads — fix-ready, machine-readable scan reports over MCP.

Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

Security proxy that wraps MCP servers with real-time monitoring and policy enforcement

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation

Google Search Console MCP for analytics, indexing, sitemaps, and SEO diagnostics.

ARGUS-3 stdio MCP (argus_ask, argus_status). WARDEN firewall blocks poisoned MCP servers.

Granular permission gateway for MCP agents. Per-agent scopes for Google Drive, Gmail, Calendar.

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

AI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.

A secured scoped SSH MCP server for executing safe read-only diagnostic DevOps / SysOps commands

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

Governed MCP workflows with policy validation, findings tracking, and review gates.

Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.

Audits any website for AI agent readiness and safety, scoring prompt injection risk and llms.txt.

Agent-native collaboration network: orchestrate a team of long-running agents from any MCP client.

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.

Offline deterministic engineering-trust certificates for repositories, with no telemetry.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Local multi-account MCP broker — one endpoint, every account. Switch identity without reconnecting.

Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.

Read-only breach intelligence from public feeds: reports THAT a domain leaked, never the data.

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

Zero-knowledge encrypted storage for humans and AI agents. Client-side AES-256-GCM, EU-hosted.

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.

MCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.

MCP server for credential isolation — bots use passwords and API keys without seeing them

An MCP server that provides LinkedIn & Reddit data

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

The WAF for agents. Pattern-based + heuristic firewall scans prompts, RAG documents, tool argume...

Cybersecurity Ai MCP Server by MEOK AI Labs

MITRE ATLAS — Adversarial Threat Landscape for AI Systems. Tactics + techniques for attacking AI...

owasp-agentic-mcp MCP server by MEOK AI Labs

Software Bill of Materials generation + validation in CycloneDX 1.6 and SPDX 2.3 formats. Requir...

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Offline methodology engine for authorized penetration testing, CTF, and security research.

Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

Unofficial Google Ads MCP for campaigns, keywords, budgets, and gated mutations.

Privacy-first unofficial Google Health API v4 MCP server for health, sleep, activity, HR agents

Local-first TikTok Content Posting API for AI agents: OAuth checks, dry-run and live uploads.

Agent-first YouTube Shorts uploader: dry-run validation, OAuth checks, synthetic-media metadata.

Real-time semantic security for AI coding agents and MCP tools

Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI.

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

Official DSers MCP for dropshipping: import, edit, price, and publish products to Shopify and Wix.

Self-hosted MCP gateway. Turn any REST API into MCP tools via YAML (DADL). Authz, audit, policies.

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

MCP server for Reolink cameras: snapshots, device state, AI detection, PTZ, and deterrence controls

PostgreSQL MCP wrapper with .env credential mapping, tool selection, and safe read-only defaults.

Structural similarity-based code filter. Stops malicious code pattern reaching execution tools.

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

MCP server: static security scanner for MCP servers, agent skills & plugins. 68 attack patterns.

Guardian layer for AI agents: identity, secrets, audit via MCP.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

Real-time Python package and vulnerability data for AI coding agents.

Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents

Execution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.

MCP server for AI job search — find jobs, track applications, get alerts. Claude, ChatGPT, Cursor.

A verified dependency-audit verdict any AI agent can call over MCP, not a raw scan.

MCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1.

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Draft, translate and update Help Center articles and manage Zendesk tickets from your AI assistant.

Full-featured ADB MCP server — 204 tools across 45 modules, from UI to baseband.

Local-first AI memory engine — 4-tier memory, people graph, Bayesian beliefs. Encrypted, 62µs.

Security scanner for AI agent skills and MCP servers

Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM.

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes

Credential isolation for AI agents. Inject secrets at the network boundary.

MCP package manager with trust scoring. Search, install, and audit MCP servers.

Deterministic security layer your AI can't be. 456 rules, 39 tools, CLI + doctor + host audit.

Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

EU-hosted website monitoring + 17-framework compliance MCP. One anonymous tool, four authenticated.

Audit any MCP server's security & quality — OWASP MCP Top 10 + explainable 0-100 MCP Score

95.10% LongMemEval (highest published). Encrypted persistent memory for Ai coding assistants.

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +17. Local. Deterministic.

Open Identity Standard for AI Agents — DID, Agent Cards, delegation, reputation, payment & escrow

Quantum-inspired keyring for AI coding agents with superposition, entanglement, and tunneling.

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

Govern your backend control plane from your AI agent - signed, human-approval-gated.

Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.

The agent eval standard for MCP. Score every agent output for quality, safety, and cost.

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

19 tools + 5 resources for ServiceNow: CMDB, update sets, tables. OAuth 2.1, Tokyo+.

A2A TrustGate: 4-gate firewall that screens every AI-agent action before it runs. 49 tools.

Pre-tool policy enforcement + JSONL audit for AI agents. Apache 2.0.

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.

An open-source API for collecting and managing contacts and signups.

Test, secure, and monitor MCP servers. Auto-discovery, drift detection, SARIF, record/replay/verify.

Kubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.

Context-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.

Verify-before-act safety checks for AI agents: packages, lockfiles, manifests, CI workflows.

Microsoft Outlook MCP server — 20 tools for email, calendar, contacts, and settings via Graph API.

MCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.

End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).

SSH & Kubernetes access broker for AI agents; the model never touches a credential.

MCP server for the ESET ecosystem - Connect cloud + PROTECT On-Prem, multi-tenant, RO/RW

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Real-time Firestore schema context for AI coding agents. Stop hallucinating field names.

Runtime proxy for MCP security, cost governance & audit

Load OpenAPI 2.x/3.x specs and expose generic tools to discover and call multiple APIs.

Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Security scanning and threat detection for AI agents

Branchable LLM history DAG + encrypted context capsules agents can save, restore, and crypto-shred.

Zendesk MCP server for Claude Code and other MCP clients

SQL over real-world data — FDA, SEC, blockchain, genomics, CVEs, and more. No config.

Use Strava's official MCP from Codex and other local stdio clients without a developer app.

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Full Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.

Solana token safety for AI agents — rug-pull, honeypot & Token-2022 trap detection before you buy.

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

SQLite MCP server with OAuth 2.1, HTTP/SSE, 122 tools, and smart tool filtering

Serve a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.

Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale.

MCP server for GreyNoise API - Check if IPs are internet background noise or targeted attacks

MCP tools from three.ws: free + paid text-to-3D, rigging, agent reputation, market intel.

3D AI Agent Avatar — render any GLB, give it a Solana wallet, a voice, and pump.fun powers.

Trending agents and coins, the $THREE holder leaderboard, and the site-wide activity ticker.

Browse the AgenC on-chain task marketplace, query the agent registry, and link identities.

Self-custodial pump.fun sniper: arm strategies, snipe, manage positions. Simulate by default.

Governed x402 payment sessions: pay any endpoint with budget, allowlist & per-tx caps, no key.

Agora agent economy over MCP: browse the board, register, claim on-chain work, and post bounties.

Create, update, and delete pump.fun alert rules and read fired-alert history across channels.

Alibaba Cloud DashScope MCP: Qwen chat, embeddings, and model discovery on your own account.

Text-to-speech, speech-to-text, audio-to-face lipsync, and motion-capture clips for 3D agents.

Set autopilot scopes and a daily SOL spend cap, then propose, execute, and undo agent actions.

An agent's account economics — plan quotas, metered usage, invoices, receipts, and earnings.

List LLM providers and run chat completions through the three.ws multi-provider router.

Play three.ws Coin Clash — read the faction battle board and leaderboard, enlist, and rally.

Manage copy-trade follows — follow leaders, tune sizing and guard rules, and track fees owed.

Generate Ethereum wallets with BIP39 mnemonics, HD paths, vanity addresses, private key backup

IBM watsonx.ai MCP by three.ws: chat, text generation, embeddings, and tokenization.

x402 pay-per-use IBM Granite AI: chat, code, embeddings, analysis, forecasting. Pay USDC per call.

Pay-per-use IBM Granite AI via x402: chat, code, embeddings, forecasting. USDC on Base or Solana.

Coin smart-money scores, wallet reputation, signal feeds, and KOL leaderboards.

Encrypt/decrypt Ethereum keystore JSON V3 with scrypt/PBKDF2 for secure cold storage

Per-wallet KOL deep dive — a tracked trader's portfolio P&L and its trades on a given mint.

Browse the community 3D-creation gallery, fetch a creation with its viewer URL, and submit it.

Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.

On-chain identity for AI agents: resolve .sol names, reverse-lookup wallets, check handles.

Read the inbox, mark items read, manage delivery preferences, and register Web Push devices.

An agent's trading state — portfolio value, PnL, live balances, trade feed, and signed transfers.

Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.

Free, read-only pump.fun + Solana MCP: token discovery, on-chain analysis, SNS, 3D snapshots.

Compose a placed 3D diorama from one sentence, then browse the saved scene gallery.

Discover signal feeds ranked by proven edge, rank publishers, and subscribe + track results.

Sign Ethereum messages - EIP-191, EIP-712 typed data, Permit2, signature verification and recovery

Price, hold, and burn $THREE on Solana — the first MCP server whose actions burn a token.

3D avatars, embeds, glTF tools, agent memory, and on-chain agent identity from three.ws.

Turn text or an image into an animation-ready 3D model (GLB): generate, rig, animate, retexture.

Give your AI agent an x402 wallet: discover and pay for services in USDC, or earn from your own.

three.ws 3D avatars in your agent: render a live, interactive 3D avatar inline, or get an embed.

Free, read-only pump.fun and Solana token discovery and on-chain analysis tools, by three.ws.

Discover and price paid agent services across the live x402 network, by three.ws.

Build and sign Ethereum transactions - EIP-1559, gas estimation, RLP, ERC-20 transfers

Read a Pay-As-You-Learn tutoring session's itemized tab and close it for an attested invoice.

Validate Ethereum addresses, keys, checksums, keccak256 hashes, function selectors, ENS

Read the three.ws vanity-address market: quote difficulty + USDC price, browse the board.

Image understanding for AI agents — analyze and describe any image via the three.ws pipeline.

Pay any x402 endpoint on the open web: auto-paying bridge with Bazaar discovery and spend caps.

Self-custodial x402 wallet for AI agents: discover, inspect, and pay any x402 service in USDC.

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

Aggregate multiple MCP backends behind a single stdio endpoint with namespaced routing.

Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.

Zero-trust MCP security proxy with policy enforcement, PII scrubbing, approvals, and audit trails.

Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

Zero-auth research MCP: web, academic, finance, news, weather, macro, social, SEC. No keys.

AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

12-layer security configs for AI coding agents. Autonomous purchase via x402 (USDC on Base).

Security-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools

MCP server for the Fitbit Web API with OAuth PKCE, local SQLite cache, and trend analysis.

Read-only MCP server for the Monzo banking API: OAuth, local transaction cache, spending analysis.

MCP server for the Withings Health API with OAuth, local SQLite cache, and trend analysis.

Typed on-prem knowledge graph for AI agents — read-only for humans, write-only for agents via MCP.

Local-first MCP memory server: SQLite, FTS5 and vector search, AES-256-GCM. 55 tools, no cloud.

Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Zero-knowledge persistent memory for Claude — encrypted, semantic search, EU hosted.

MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.

MCP server for creating and managing SOPS-encrypted secrets

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

Ephemeral encrypted file sharing for AI. AES-256 encryption, 24h auto-vaporization.

Caller-observed x402 quote checks and signed payment preflights for autonomous agents.

MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows

Community extension of CrowdStrike falcon-mcp with near-complete Falcon API coverage

Full Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & more

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

HTTP client, JWT decode, header analysis for AI agents

License check, outdated deps, security for AI agents

MCP server for encrypted SQLite databases (SQLCipher 4) - Works with MoneyMoney, KeePass and more

MCP server for SQLCipher 4 encrypted SQLite databases with full CRUD operations and query support

Scan code for Korean compliance risks — PIPA/개인정보보호법, Network Act, Credit Info. Not legal advice.

Hosted CVE-intelligence MCP: exploitation-first ranking and a fact-checker for hallucinated CVEs

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

Security, cost, and health governance proxy for MCP infrastructure

Scan, enumerate, and risk-score every MCP server configured on your machine.

Check the danger grade of any public MCP server before you connect.

Protect your AI agents and IDEs from malicious open-source packages.

Local-first memory for AI agents that reaches backward to find a failure's root cause.

Open-source MCP proxy for AI agent access control with CEL policies, RBAC, and audit.

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

Security scanning for websites, public repositories, and Open CLAW skills.

Stdio-to-HTTP gateway — connects MCP clients to remote HTTP MCP servers

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.

ZKshare stdio MCP: store/prove/share, semantic search, sandbox proxy to HTTPS /api/v1/context.

Deterministic gate for AI-edited diffs — catches deleted guardrails before any review bot.

Pre-execution safety for AI agents on Base. Guard a token, tx or address: block/review/clear.

Local-first MCP security scanner for AI-generated web apps.

Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.

Vet third-party AI agent extensions + agent-config files (AGENTS.md, .cursor/rules, CLAUDE.md).

The dependency bloodhound for AI coding agents. Zero API keys, zero config.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

Charter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.

Query trust scores for MCP servers and agent skills. Check if a tool is safe.

Governance proxy for MCP servers — policy evaluation, human approval, audit trails.

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

MCP server for Front: conversations, contacts, messages, tags, and inbox workflows.

Query WhisperGraph: the internet's infrastructure & threat-intel graph (DNS, BGP, GeoIP, WHOIS).

A firewall and password manager for AI coding agents: scoped, expiring access to their tools.

Zero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the model

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

Cybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.

Read-only MCP server for the OrchestKit docs: full-text search + Markdown fetch. No auth.

VMware NSX security: DFW policies, security groups, tags, Traceflow, IDPS — 21 MCP tools.

Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.

Security sidecar for MCP servers: prompt-injection scan, Ed25519 verify, tools/list drift. 10 tools.

MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.

Ed25519-signed MCP tool manifests + spawn attestation. Layer-2 supply-chain hardening.

Store, retrieve, and pin encrypted files on IPFS via MCP tools for AI agents and workflows

AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

Give AI agents secure access to ZERNO project briefs, tasks, and context over remote MCP.

Issue, rotate and revoke scoped API-key passes for 25+ providers — the agent never sees a real key