#SCA

TACIT (Tracked Agent Capabilities In Types) is a safety harness for AI agents. Instead of calling tools directly, agents write code in Scala 3 with capture checking: a type system that statically tracks capabilities and enforces that agent code cannot forge access rights, cannot perform effects beyond its budget, and cannot leak information from pure sub-computations. It provides an MCP interface, so that it can be easily used by all MCP-compatible agents.

Query transactions, balances, contract ABIs, token data, and gas prices on Ethereum.

Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.

MCP server + CLI that scans any project to discover its full AI ecosystem: MCP servers, context files, skills, agents, memories, and configurations for 19+ AI tools (Claude, Cursor, Windsurf, Copilot, Gemini, Codex, and more). Generates interactive HTML dashboards and supports ecosystem export/import across tools.

Connect AI agents to real-time crypto market scanning on Binance Futures. Create scans with CEL rules (e.g., rsi_14 < 30 && volume_quote > 100000), run them across all pairs, read alert events, and get explanations for why alerts fired or didn't. 9 tools, MIT license, works via npx @tickory/mcp.

Gives AI coding tools the same CSS visibility you have in browser DevTools. Inspect the real rendered DOM, full CSS cascade, before/after style diffs, and element screenshots — all from your AI session. Zero setup, works via npx.

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

AI-native security tools via MCP. Prompt injection detection (208 patterns, 8 languages, <100ms), skill supply chain scanning (204 patterns, 8 risk categories), plus URL/domain/IP/email/password checks. Pay-per-request with USDC via x402 — no API keys needed. 9 tools, demo mode included.

MCP server that scans Next.js projects and returns a compact summary of routes, API endpoints, database schema, and security issues.

AI image & video generation, background removal, and upscaling for coding agents. 10 models including Flux, SDXL, Seedream, Luma, and Seedance. Works in Claude Code, Cursor, and Windsurf.

The only MCP server that gates skill installation behind a full security scan. 60+ threat patterns, 13 MCP tools, and support for 7 clients including Claude Code, Cursor, Windsurf, and GitHub Copilot. Features AI-powered search, cloud sync, and startup verification with SHA-256 content hashing.

MCP server providing x402 micropayment-powered developer tools. Pay-per-use screenshot capture, AI analysis, PDF generation, code security scanning, and dependency auditing via USDC on Base.

TEOS MCP is an MCP server that performs real-time diff-level security scanning for AI agents and CI/CD pipelines. It analyzes code diffs before merge or deployment and returns a deterministic gate decision: ALLOW WARN BLOCK Built for: • AI agents • Autonomous systems • DevSecOps teams • CI/CD workflows Features: • Diff risk scoring • Deterministic merge gate • Real-time enforcement • Usage-based monetization (pay-per-scan) • Optional on-chain verification Unlike gateway filters, TEOS MCP performs code-level intelligence before execution.

Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs. Gives A-F security grades with fix-it guides. One command: npx project-shield scan .

AI-powered image processing MCP server. Remove backgrounds and upscale images (2x/4x) directly from Claude or any MCP-compatible client. Uses GPU-accelerated processing with OAuth 2.1 authentication. Supports URL-based image input with instant results returned inline. Free credits on signup.

Security scanner for AI agent skills. Detects credential theft, data exfiltration, prompt injection, reverse shells, dangerous capability combos, and hardcoded secrets. 14 rules, 80+ patterns, 22 secret detectors. Free API + CLI (npx skillaudit). Built by an AI agent.

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

High-performance MCP server for USPTO Patent File Wrapper API with secure document downloads, metadata access, and context reduction

High-performance MCP server for USPTO Patent Trial and Appeal Board (PTAB) with context reduction, progressive disclosure workflows, and seamless cross-MCP integration

Code Pathfinder's MCP Server provides AI coding assistants like Claude Code with deep semantic understanding of codebases through call graph analysis, symbol search, and dependency tracking. It enables developers to ask natural language questions like "who calls this function?" instead of manually using grep or searching code. The tool runs 100% locally (your code never leaves your machine), is free and open-source under AGPL-3.0, and installs in under 5 minutes. [codepathfinder](https://codepathfinder.dev/mcp)

This server contains 5 tools. It could be used to simulate cascading failure scenario for lifeline network recovery (LNR). It has been tested in a case of Shelby County.

Natural language-driven spatial transcriptomics analysis via MCP. Integrates 60+ analytical methods across 15 categories including preprocessing, visualization, spatial statistics, cell communication, deconvolution, and trajectory analysis.

The Tiger MCP server provides mcp tools for managing and querying Postgres database services on tiger cloud. Tiger cloud is the best PostgreSQL cloud provider for Developers, Devices, and Agents. It provides TimescaleDB, which optimizes Postgres for insert-heavy workloads like time-series, events, transactions, and append-mostly datasets.

A Model Context Protocol (MCP) server that provides link checking capabilities using linkinator. This allows AI assistants like Claude to scan webpages and local files for broken links.

MCP server for Terraform — automatically validates, secures, and estimates cloud costs for Terraform configurations. The Binadox solution integrates with any Model Context Protocol (MCP) client (e.g. Claude Desktop or other MCP-compatible AI assistants).

BrokerChooser’s MCP server provides a simple way for AI agents and applications to verify whether a financial entity, broker, or investment website is legitimate or potentially fraudulent. - Agents can check an entity by name or URL. - Results are powered by BrokerChooser’s aggregated scam database, which consolidates warnings and alerts from major financial regulators and official sources worldwide. - Developers can integrate this into applications to detect suspicious brokers, flag risks for end-users, and strengthen financial safety. In short: it’s a plug-and-play financial scam check API that helps prevent fraud.

BrokerChooser’s Scam Shield MCP server provides a simple way for AI agents and applications to verify whether a financial entity, broker, or investment website is legitimate or potentially fraudulent. - Agents can check an entity by name or URL. - Results are powered by BrokerChooser’s aggregated scam database, which consolidates warnings and alerts from major financial regulators and official sources worldwide. - Developers can integrate this into applications to detect suspicious brokers, flag risks for end-users, and strengthen financial safety. In short: it’s a plug-and-play financial scam check API that helps prevent fraud.

Coding agents accelerate software delivery by autonomously suggesting or adding code and dependencies. However, without the right safeguards, they can introduce significant supply chain risks by pulling in third-party packages that: - Contain known critical vulnerabilities - Are end-of-life and no longer supported - Contain malware - Mimic legitimate libraries through typosquatting BoostSecurity MCP acts as a safeguard. It analyzes every package an AI agent introduces, flags unsafe dependencies, and recommends secure, maintained alternatives to keep projects protected.

scan-mcp offers a robust and minimal MCP server designed for efficient document scanning on Linux systems. It simplifies image capture from scanners, supporting advanced features like Automatic Document Feeder (ADF), duplex scanning, and specific page sizing. The tool intelligently discovers and selects devices, handles scan jobs with JSON Schema-validated inputs, and assembles multipage documents, making it ideal for automating and standardizing document digitization workflows.

Scalekit Model Context Protocol (MCP) server provides comprehensive tools for managing environments, organizations, users, connections, and workspace operations. Built for developers who want to connect their AI tools to Scalekit context and capabilities based on simple natural language queries. This MCP server enables AI assistants to interact with Scalekit’s identity and access management platform through a standardized set of tools. It provides secure, OAuth-protected access to manage environments, organizations, users, authentication connections, and more. Features Environment management and configuration Organization and user management Workspace member administration OIDC connection setup and management MCP server registration and configuration Role and scope management Admin portal link generation Configuration The Scalekit MCP server can be configured to support OAuth for compatible clients. If your MCP Client doesn’t support OAuth based authorization for MCP Servers, you can still use the Scalekit MCP server with the mcp-remote acting as a local proxy to add OAuth support. ## using OAuth: { "servers": { "scalekit": { "type": "http", "url": "https://mcp.scalekit.com/" } } } ## using mcp-remote: { "mcpServers": { "scalekit": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.scalekit.com/"] } } }

This MCP server provides AI assistants with real-time access to RuneScape 3 game data through the RuneScape Wiki APIs. It enables AI systems to retrieve current Grand Exchange prices, detailed item information (including stats, examine text, and alchemy values), historical price trends with configurable time intervals, and player statistics from the official hiscores across different game modes (normal, ironman, hardcore ironman). The server acts as a bridge between AI applications and RuneScape's extensive database, allowing for dynamic queries about items, market analysis, player progression tracking, and game-related assistance without requiring direct API knowledge or authentication from the end user.

This is an enhanced MCP (Model Context Protocol) server that provides xray vulnerability scanning capabilities for ModelScope hosting.

Complete GitLab MCP integration with 72 specialized tools for comprehensive DevOps management

Buscador de CNPJs atualizados com dados reais da receita federal

A Model Context Protocol (MCP) server built for Nero AI, offering seamless access to a full suite of AI-powered image processing tools — including high-fidelity upscaling, photo restoration, noise reduction, background removal, colorization, and intelligent compression. Ideal for enhancing old or low-resolution images, streamlining creative workflows, and powering modern image editing pipelines with fast, reliable, and high-quality results.

A Model Context Protocol (MCP) server built for Nero AI, offering seamless access to a full suite of AI-powered image processing tools — including high-fidelity upscaling, photo restoration, noise reduction, background removal, colorization, and intelligent compression. Ideal for enhancing old or low-resolution images, streamlining creative workflows, and powering modern image editing pipelines with fast, reliable, and high-quality results.

A comprehensive Model Context Protocol (MCP) server that integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Software Composition Analysis (SCA) tools for AI-powered DevSecOps automation.

Freepik MCP allows LLMs to access everything available through the Freepik API — including searching and retrieving images, icons, illustrations, and using tools for image generation, video creation, and image enhancement — all in an LLM-friendly format.

Buildable generates a phased backlog, scaffolds a private repo with CI, then serves JSON tasks through the Model-Controller-Prompt protocol. Any MCP-compatible assistant can pull tasks, push code, and move Kanban cards to Done.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

MCP server for AI agents to query Base Network blockchain data.

MCP Server to interact with the Gridscale API

A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.

MCP server for scanpy

Research project by

Nody provides a powerful MCP Composer for creating and managing custom MCP servers. It enables you to personalize each tool's name and description to add context, helping agents use them with fewer tokens. It manages the configurations and secrets of MCP servers in one secure place, making it easier to deploy and scale your AI toolsets efficiently.

A lightweight, extensible cybersecurity toolkit that connects AI assistants to security tools through the Model Context Protocol (MCP), enabling AI-assisted security research, scanning, and analysis.

detect exposed mcp servers over the internet and enumerate their tools

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

This MCP scans files using ClamAV to detect viruses, malware, and other threats

An MCP server for querying Solana transactions using natural language with Solscan API

An LLVM-based obfuscation tool designed to confuse LLM clients interacting with custom MCP disassembler servers.

Mcp services by marshal

MCP Server for using Garak LLM vulnerability scanner

An MCP server for querying Solana transactions using natural language with Solscan API

MCP server for safe read-only operations on the Tailscale CLI

An example MCP server with a couple nmap scans as tools.

Cascade MCP Server repository

MCP server for scanning local code and localhost URLs

A unified API gateway for integrating multiple etherscan-like blockchain explorer APIs with Model Context Protocol (MCP) support for AI assistants.

Asterisk Model Context Protocol (MCP) server.

Mirror of

Static Code Analysis and Visualization. Convert Code to UML and Flow Diagram and explain by AI.

Mcp server scaffolding tool

An Experimental Tailscale MCP Server

MCP Server for Snyk Security Scanning

A comprehensive architecture for building robust Model Context Protocol (MCP) servers with integrated web capabilities

A Model Context Protocol (MCP) server that provides Trivy security scanning capabilities through a standardized interface.

Mirror of

A Model Context Protocol (MCP) server for web content scanning and analysis. This server provides tools for fetching, analyzing, and extracting information from web pages.

Mirror of

A Model Context Protocol (MCP) server that enables AI assistants to perform network scanning operations using NMAP

An MCP (Model Context Protocol) server that provides Ethereum blockchain data tools via Etherscan's API. Features include checking ETH balances, viewing transaction history, tracking ERC20 transfers, fetching contract ABIs, monitoring gas prices, and resolving ENS names.