Security & Testing MCP ServersSecurity & Testing

MCP Server Security Standard

MCP Server Security Standard (MSSS): an open, testable security control standard for certifying MCP servers, with levels, evidence requirements, and reporting schemas.

Pic Standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

MCP Zap Server

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

Agent Identity Management

The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities.

Wazuh Autopilot

Agentic SOC for Wazuh built on Strands Agents: a 13-agent swarm with 37 Wazuh-verified skills triages, investigates and plans response through the Wazuh MCP Server. Policy-gated autonomy, approvals, RBAC, audit, tracing and evals in one Docker stack. Bedrock, Anthropic, NVIDIA NIM, vLLM, LiteLLM or air-gapped Ollama.

Peta Core

The Control Plane for MCP — secure vault, managed runtime, audit trail, and policy-based approvals.

MCP Security Testing Guide

OWASP MCP Security Testing Guide

Trustabl Rulebook

Agent reliability rulebook: the threat model and rationale behind each Agent Reliability Analyzer rule

Agent Skills Wordpress

Agent skills for WordPress — works in Claude Code, Codex, Antigravity, Cursor, and any agent supporting Skills + MCP. Audit, optimize, fix, and migrate WordPress sites.

MCP Server Fuzzer

Black-box security assessment for live MCP servers.

Signet

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

MCPSecBench

MCPSecBench: A Systematic Security Benchmark and Playground for Testing Model Context Protocols

Atlas

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本地 AI 安全评估智能体桌面应用

AgentLeak

AgentLeak (IEEE Access 2026): benchmark for internal-channel privacy leakage in multi-agent LLM systems. Inter-agent messages leak 68.8% vs 27.2% in final outputs; output-only audits miss 41.7%. 1,000 scenarios, 7 channels, 5 LLMs. Tool & MCP server: github.com/yagobski/agentleak

Grantex

grantex is the identity, authorization, and audit infrastructure for AI agents — the "OAuth moment" for the agentic internet. We provide a universal SDK and cloud service that lets any AI agent act on behalf of a human with scoped, revocable permissions, cryptographic identity, and an immutable audit trail. Developers integrate in minutes.

MCP Cve Project

The Project shares all information on MCP related CVE's published

Toolhive Registry Server

Discover, govern and control access to MCP servers and agent skills across your organization

Openqa

Agentic Testing Harness

Hoot

MCP Testing Tool — Like Postman, but for the Model Context Protocol.

Agent Discover Scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

Claude Security Skills

25 production-tested defensive security skills for Claude Code - WordPress, VPS, Cloudflare, Next.js hardening, AI agent guardrails, MCP security, prompt injection defense, OWASP LLM Top 10, LLM coding failure modes (slopsquatting, hallucinated APIs, sycophancy), incident response, GDPR/DACH compliance. MIT, battle-tested.

Agentshield

🛡️ The security firewall for AI agent tools & MCP servers (Claude 5, GPT-5.6, Gemini 3.8, Antigravity, Cursor, Codex, Hermes). Catch command injection, secret theft & toxic flows in <50ms. 100% offline Rust SAST + 1-click auto-fix + SARIF.

Prompt Shield

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

Mcpflo

A visual testing tool for MCP (Model Context Protocol) servers — connect, browse capabilities, and inspect tools, resources, and prompts. Think Bruno, but for MCP.