#scanner

Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.

MCP server + CLI that scans any project to discover its full AI ecosystem: MCP servers, context files, skills, agents, memories, and configurations for 19+ AI tools (Claude, Cursor, Windsurf, Copilot, Gemini, Codex, and more). Generates interactive HTML dashboards and supports ecosystem export/import across tools.

Connect AI agents to real-time crypto market scanning on Binance Futures. Create scans with CEL rules (e.g., rsi_14 < 30 && volume_quote > 100000), run them across all pairs, read alert events, and get explanations for why alerts fired or didn't. 9 tools, MIT license, works via npx @tickory/mcp.

Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.

AI-native security tools via MCP. Prompt injection detection (208 patterns, 8 languages, <100ms), skill supply chain scanning (204 patterns, 8 risk categories), plus URL/domain/IP/email/password checks. Pay-per-request with USDC via x402 — no API keys needed. 9 tools, demo mode included.

MCP server that scans Next.js projects and returns a compact summary of routes, API endpoints, database schema, and security issues.

The only MCP server that gates skill installation behind a full security scan. 60+ threat patterns, 13 MCP tools, and support for 7 clients including Claude Code, Cursor, Windsurf, and GitHub Copilot. Features AI-powered search, cloud sync, and startup verification with SHA-256 content hashing.

Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs. Gives A-F security grades with fix-it guides. One command: npx project-shield scan .

Security scanner MCP server that protects AI coding agents from generating vulnerable code. Uses tree-sitter AST analysis to detect OWASP Top 10 vulnerabilities, hardcoded secrets, and prompt injection attacks. Includes package hallucination detection across 4.3M packages (npm, PyPI, RubyGems, crates.io, pub.dev, CPAN, Raku). Works with Claude Desktop, Claude Code, Cursor, Cline, and any MCP-compatible client. Full feature list (for detailed descriptions): • 275+ security rules covering Python, JavaScript, TypeScript, Java, Go, Ruby, PHP, C/C++, Rust, C#, Terraform, Kubernetes • AST-based detection with tree-sitter (falls back to regex when unavailable) • Taint analysis for tracking user input to dangerous sinks • Package hallucination detection: verifies 4.3M+ packages across 7 ecosystems • Prompt injection detection: blocks exfiltration, jailbreaks, and malicious instructions • Automatic fix suggestions for common vulnerabilities • Zero config: works instantly with npx • CWE/OWASP metadata for compliance reporting

A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.

detect exposed mcp servers over the internet and enumerate their tools

This MCP scans files using ClamAV to detect viruses, malware, and other threats

Mcp services by marshal

MCP Server for using Garak LLM vulnerability scanner

MCP server for scanning local code and localhost URLs

Asterisk Model Context Protocol (MCP) server.

A Model Context Protocol (MCP) server that provides Trivy security scanning capabilities through a standardized interface.