|
mcp-audit — know what your AI agents are exposed to
Open-source, offline-first security scanner for MCP servers. Verdicts, findings, and fixes — your config never leaves your machine.
|
87 % |
|
CheckMCP — audit & secure your MCP servers
Audit, monitor and gate any MCP server: an explainable MCP Score /100, drift alerts, and a gateway that blocks tool-poisoning before it reaches your agent.
|
86 % |
|
MCP Signoff | MCP security review readiness
MCP Signoff helps teams turn MCP server scans into production-readiness evidence: risky permissions, weak auth signals, prompt-injection exposure, sensitive...
|
83 % |
|
MCP Zero-Trust Proxy — Open-Source Security for MCP Servers
Open-source reverse proxy that adds authentication, access control, and audit logging to any MCP server. One Docker command, zero code changes. MIT licensed.
|
82 % |
|
MCPsight · Inspect an MCP server before you trust it
MCPsight is an open-source scanner for MCP servers. It catches prompt injection, watches local servers in a sandbox, and fails your build when a server chang...
|
82 % |
|
ShiftLeft — MCP Gateway for Secure AI Tool Access
MCP Gateway enforces policy on every AI tool call. SBOM scanning, secrets detection, tool audit, and offline-capable signed policies — local stdio and HTTP....
|
80 % |
|
MCPLookup — MCP Server Trust Ratings & Evidence
Check MCP servers before you connect. Review sourced trust ratings, vulnerabilities, provenance, maintenance, live behavior, and observed changes.
|
80 % |
|
MCP Security Audits | SpyderNet Security
MCP security audits for Model Context Protocol servers — expert manual review plus authorized runtime testing, mapped to the OWASP MCP Top 10. Find and fix M...
|
80 % |
|
MCP Scanner — Scan your MCP servers before attackers do. · by codelake
Free security scanner for Model Context Protocol (MCP) servers. Finds auth bypass, injection, SSRF, hardcoded secrets and 30+ vulnerabilities in seconds — we...
|
80 % |
|
SkillAudit — The trust layer for Claude skills and MCP servers
We audited 101 real MCP servers — 50% had SSRF, 38% leaked credentials, only 19% earned an A. Paste a GitHub URL and get the same graded report in 60 seconds...
|
80 % |
|
Dominion Observatory — Behavioral trust for MCP servers (runtime, not static scans)
Most MCP trust tools statically scan the code. Dominion Observatory is the neutral, third-party layer that measures what an MCP server actually does at runti...
|
80 % |
|
AuditKit Local website audit CLI for agencies
Local website audits from your terminal. HTML checks, security headers, Lighthouse, and client reports all on your machine.
|
80 % |
|
MCP Audit: security audits for the MCP ecosystem
Automated security grades for public MCP servers, A to F, with a reproducible citation for every finding. Scan your MCP server before you ship it.
|
80 % |
|
TrackMCP: See how your MCP server is being used
TrackMCP shows who is using your MCP server, what they are trying to do, and where to improve. Analytics for MCP servers, one line to install.
|
79 % |
|
MCP Debugger
Test any MCP server for spec compliance. Get a grade and actionable results.
|
79 % |
|
RingZero — MCP & dependency security
Scan MCP configurations and software dependencies. Trace risks across large Gradle builds to the modules and teams that introduce them.
|
79 % |
|
createmcps.com — MCP compliance validator
A free tool that checks whether your MCP server conforms to the 2026-07-28 spec and tells you exactly what to fix. 79 rules, 75 of them traced to the exact s...
|
79 % |
|
PayGated — Monetize any MCP server with one command
Add API key auth, credit billing, rate limiting, analytics, and 199+ production endpoints to any Model Context Protocol server. Zero config. No code changes.
|
79 % |
|
utir — MCP Server Trust Registry
Find safe MCP servers. Every repo scanned for security issues, auth implementation, and dependency vulnerabilities.
|
79 % |
|
MCPForDevs — Turn your APIs into MCP servers
Multi-tenant platform to expose your existing APIs as Model Context Protocol servers — no infrastructure changes required.
|
79 % |
Detected social media networks