Security & Testing MCP ServersSecurity & Testing

MCP Box

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.

Securevector AI Threat Monitor

Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw, LangChain, and all major LLM APIs.

Platform

The approval and accountability layer for agentic AI. Identity → Policy → Approval → Trace. Try: npx sidclaw-demo

Mpak

Open-source package registry for MCP (Model Context Protocol) servers with built-in security scanning, trust scoring (L1-L4), and CLI. Every bundle verified across 25 supply-chain controls.

Ziran

ZIRAN finds the vulnerabilities in AI agents that come from tools combining, not from any single prompt. Graph-based tool chain discovery, execution-level side-effect detection, multi-phase campaigns.

Lynx

Policy-gated, durable, audited execution for AI agent tool calls. Every action gets a five-verdict policy check, a crash-safe checkpoint, and a tamper-evident audit event — a library, not a server.

Agentleak

Open-source privacy testing for AI agents. Python SDK, CLI and MCP tools to detect data leaks across tool calls, memory, inter-agent messages and logs, with redacted reports and CI gates.

Drako

AI agent security and governance platform for the full lifecycle. Scan before you ship. Govern and block at runtime. No Azure required.

YeepForge

Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP server, with professional CVSS-scored reports.

Golf Scanner

Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more

Dotforge

Configuration governance for Claude Code. Bootstrap, audit, sync, and evolve .claude/ across projects.

MCP Scribe

Point it at an OpenAPI schema. Get an MCP server.

ToolMesh

Self-hosted MCP gateway with authorization, credential injection, audit logging, and output policies. Includes DADL — describe REST APIs as MCP tools in YAML.