A useful safety stepSecurity tools
Gitleaks
Scan for potential secrets in code and repositories. Treat findings as a starting point for investigation and credential rotation.
Docs reviewed
YOUR MISSION
Review a tool’s permissions
A permission decision record
Editorial starting points
Check current publisher documentation, plans and permissions before connecting. A suggested stack is not a tested integration.
For your next buildMCP servers
GitHub MCP
Connect repository context, issues and pull requests to your AI workflow. Keep changes behind your normal review process.
Docs reviewed
Explore the community collection
19 source-reported listings in Security. Independently unverified.
SecurityMCP servers
agent-trust-stack-mcp
Cryptographic provenance, bilateral blind reputation scoring, and tamper-evident logging for AI agent interactions. 7 interlocking trust protocols (CoC, ARP, ASA, AJP, ALP, AMP, CWEP) available in Python (pip) and TypeScript (npm). 663 tests. Bitcoin-anchored provenance chains, anti-Goodhart reputation scoring, machine-readable contracts, dispute resolution, lifecycle management, trust-weighted matchmaking, and context-window cost allocation. Also on Smithery and PyPI.
Community listing
SecurityMCP servers
unphurl-mcp
URL intelligence for AI agents. 13 tools for security signals and data quality: redirect behaviour, brand impersonation detection, domain age, SSL validation, parked detection, URL structural analysis, DNS enrichment.
Community listing
SecurityMCP servers
GhidraMCP
MCP server for integrating Ghidra with AI assistants. This plugin enables binary analysis, providing tools for function inspection, decompilation, memory exploration, and import/export analysis via the Model Context Protocol.
Community listing
SecurityMCP servers
MCP-Dandan
Real-time security framework for MCP servers that detects and blocks malicious AI agent behavior by analyzing tool call patterns and intent across multiple threat detection engines.
Community listing
SecurityMCP servers
authbox
Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access (scope, rate limits, time windows, step-up approval), 70+ API key providers, and hash-chain audit trail. Go + Next.js + TypeScript.
Community listing
SecurityMCP servers
aegis
Policy-based governance for AI agent tool calls. YAML policies, approval gates, risk assessment, and audit logging. Cross-platform: LangChain, OpenAI, Anthropic, MCP.
Community listing
SecurityMCP servers
solvitor-mcp
Solvitor MCP server provides tools to access reverse engineering tools that help developers extract IDL files from closed-source Solana smart contracts and decompile them.
Community listing
SecurityMCP servers
agentforge-trust-mcp
Query the AgentForge Trust Score (0-100 across five dimensions: security, code health, behavioral audit, community trust, EU compliance) for any MCP server before connecting. Exposes check_trust, evaluate_policy, list_trusted, and recommend tools. 3,600+ servers audited, free public API.
Community listing