Browse 41,347 Model Context Protocol servers

lociOfficial

Scoped memory for coding agents: picks the right project, answers in scope, or abstains.

io.github.47-ronn/remote-agentsOfficial

Control fleets of remote machines via AI agents: exec, files, git, fleet ops, map/reduce.

io.github.4hmetuyar/a2a-auditorOfficial

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

io.github.4hmetuyar/agent-graph-auditorOfficial

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

io.github.4hmetuyar/ai-code-scannerOfficial

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

io.github.4hmetuyar/compliance-checkerOfficial

KVKK/GDPR/CCPA compliance checks for codebases

io.github.4hmetuyar/db-gatewayOfficial

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

io.github.4hmetuyar/dependency-auditorOfficial

CVE scanning for npm/pip/cargo dependencies via OSV

io.github.4hmetuyar/dns-intelligenceOfficial

DNS record enumeration, misconfiguration and dangling-subdomain detection

io.github.4hmetuyar/elicitation-auditorOfficial

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

io.github.4hmetuyar/llm-redteamOfficial

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

io.github.4hmetuyar/mcp-config-auditorOfficial

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

io.github.4hmetuyar/mcp-server-auditorOfficial

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

io.github.4hmetuyar/memory-poisoning-scannerOfficial

Scans agent code for untrusted input poisoning persistent cross-session memory

io.github.4hmetuyar/model-scannerOfficial

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

io.github.4hmetuyar/oauth-auditorOfficial

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

io.github.4hmetuyar/prompt-injection-scannerOfficial

Scans RAG content/scraped pages for indirect prompt injection

io.github.4hmetuyar/prompt-leak-scannerOfficial

Catches leaked credentials and PII in outbound LLM prompts

io.github.4hmetuyar/rug-pull-detectorOfficial

Baselines an MCP server's tools and detects tool-definition changes after approval

io.github.4hmetuyar/secret-scannerOfficial

Scans files for leaked secrets and API keys

io.github.4hmetuyar/security-proxyOfficial

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

io.github.4hmetuyar/security-suiteOfficial

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

io.github.4hmetuyar/slopsquat-scannerOfficial

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

io.github.4hmetuyar/ssl-inspectorOfficial

TLS certificate/cipher/protocol inspection