MCP servers

SecureMCP

makalin

SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks.

mcp-cloud-compliance

uprightsleepy

Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.

lanalyzer

bayuncao

Native white-box auditing tool for LLM with native MCP support

AuditLuma

Vistaminc

AuditLuma AuditLuma is an AI + agent code auditing system that utilizes multiple AI agents and advanced technologies, including Multi-Agent Cooperation Protocol (MCP) and Self-RAG (Retrieval-Augmented Generation), to provide comprehensive security analysis for codebases.

Documentation Markdown Converter

teddylee777

Provides AI assistants with access to documentation through a configurable server that converts HTML to Markdown and enables auditing of tool calls and returned context.

Thinking Tool

dwojtaszek

Captures and logs AI reasoning processes during interactions for debugging, auditing decision paths, and improving transparency in AI systems.

mcpSafetyScanner

johnhalloran321

MCPSafetyScanner - Automated MCP safety auditing and remediation using Agents. More info: https://www.arxiv.org/abs/2504.03767

mcp-governance-sdk

ithena-one

Enterprise Governance Layer of the Model Context Protocol SDK (Identity, Role-Based Access Control, Credentials, Auditing, Logging, Tracing)

Command Security Layer

Andrew-Beniash

Implements a robust security layer for command processing, utilizing multi-step verification and auditing to enable high-security use cases like critical infrastructure management.

Accessibility Scanner

JustasMonkev

Integrates Axe Core with Playwright to perform automated web accessibility testing, enabling continuous integration, compliance auditing, and identification of accessibility barriers.

End-of-Life API

ducthinh993

Integrates with the endoflife.date API to provide software end-of-life status checks for dependency management, security auditing, and upgrade planning.