Go
stacklok/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Apache-2.02026年9月14日 · 指标 2.10.0
全部标签
目录标签
#mcp-security
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
26 条记录
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.02026年10月22日 · 指标 2.10.0
Go
stacklok/toolhive-registry-server
Discover, govern and control access to MCP servers and agent skills across your organization
Apache-2.02026年9月10日 · 指标 2.10.0
crates.io
nolabs-ai/nono
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Apache-2.02026年9月11日 · 指标 2.10.0
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MIT2026年10月13日 · 指标 2.10.0
PyPI · npm
sattyamjjain/agent-audit-kit
Static scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Apache-2.02026年9月15日 · 指标 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MIT2026年9月21日 · 指标 2.10.0
npm
node9-ai/node9-proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
Apache-2.02026年9月13日 · 指标 2.10.0
npm · PyPI
Agent-Threat-Rule/agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
MIT2026年9月9日 · 指标 2.10.0
Go · npm
NeuralTrust/TrustGate
Open-source AI gateway for LLM and agent traffic — multi-provider routing, guardrails, semantic caching and MCP support. Written in Go.
Apache-2.02026年9月14日 · 指标 2.10.0
npm
emiliaprotocol/emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
Apache-2.02026年10月22日 · 指标 2.10.0
PyPI
sjkim1127/Reversecore_MCP
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
MIT2026年9月12日 · 指标 2.10.0
npm
getmcpm/cli
MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.
MIT2026年9月8日 · 指标 2.10.0
npm · PyPI
sinewaveai/agent-security-scanner-mcp
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
MIT2026年10月9日 · 指标 2.10.0
PyPI
msaleme/red-team-blue-team-agent-fabric
AI agent security harness, adversarial testing: 623 executable tests in the v4.21.3 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17, AIUC-1 19/20 (2026-Q1/Q2 set), NIST AI 800-2.
Apache-2.02026年9月11日 · 指标 2.10.0
Go · npm
stephnangue/warden
The secure gateway connecting AI agents to enterprise systems.
MPL-2.02026年9月18日 · 指标 2.10.0
npm
adamsjack711-ux/pkgxray
Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.
MIT2026年9月10日 · 指标 2.10.0
PyPI
sunglasses-dev/sunglasses
Open source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,583 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists before tools run.
MIT2026年10月19日 · 指标 2.10.0
PyPI
HeadyZhang/agent-audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
MIT2026年9月18日 · 指标 2.10.0
PyPI
vaquarkhan/mcp-test-harness
a Testing framework for MCP servers
MIT2026年9月15日 · 指标 2.10.0
PyPI
vishnu-77/secchecker
Static security scanner for AI agents, MCP tools, and LLM applications. Detects OWASP LLM Top 10 risks, unsafe tool use, prompt injection paths, secrets, and AI infrastructure misconfigurations. Zero runtime dependencies.
MIT2026年9月12日 · 指标 2.10.0
npm
subodhkc/ai-appsec
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.
MIT2026年9月20日 · 指标 2.10.0
PyPI
tavric-labs/mcp-server-fuzzer
A generic mcp server fuzzer
MIT2026年10月19日 · 指标 2.10.0
npm
putervision/spc
High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, and LLM model security auditing.
MIT2026年9月18日 · 指标 2.10.0
PyPI · npm
nseney1/Soma-Governance
Soma makes AI agents trustworthy by providing observably traceable governance, evidence-based rule selection W/ JIT, AST analysis tools, TTC Verifiers, and adaptive rule lifecycle management.
Apache-2.02026年10月6日 · 指标 2.10.0
npm
nkratk/llm-trust-guard
该仓库未发布描述。
MIT2026年9月11日 · 指标 2.10.0