MCP Servers 165

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

Vibes-Coded Agent Security and Commerce Tools

io.github.doteyeso-ops/mcp-server-vibes-coded

A✓Verified

Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.

Husk

io.github.husk-security/husk

A✓Verified

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

Retirement planning for Canada & US.

CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway.

MCPAmpel - MCP Security Scanner

io.github.diemoeve/mcpampel

B✓Verified

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

AIShield Security Scanner

io.github.lm203688/aishield

A✓Verified

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.

Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.

Cited EU & global law, regulations & security frameworks via Ansvar Gateway.

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records.

Mocap, rehab biomechanics, threat intel, fleet vision.

Shrike

io.github.Shrike-Security/shrike-mcp

A✓Verified

Governs what AI agents do: tool calls, SQL, commands, files checked against policy before they run.

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.

PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder

io.github.nouchix/pqc-khepra-mcp

B✓Verified

Post-quantum CMMC compliance scanner & AI agent attestation.

MCP runtime security.

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

V.A.P.E. — On-Chain Security Detective

io.github.jUXTAPOSITION1/vape

A✓Verified

Autonomous on-chain security detective for Base, exposed over the Model Context Protocol (MCP).

Pentest Server

io.github.cyanheads/pentest-mcp-server

A✓Verified

Offline methodology engine for authorized penetration testing, CTF, and security research.

Security Recipes

io.github.stevologic/security-recipes

A✓Verified

Read-only CVE intelligence, remediation playbooks, and agent setup guides.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages.

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

Security + bug + perf + refactor audit for Python.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents.