adversarial security testing for MCP servers and agentic tool surfaces.​ built in rust.

Rust

Awesome Agentic MCP Security List

awesome awesome-list awesome-lists awesome-resources

MCP-BOM: a reproducible attack-surface benchmark for Model Context Protocol servers — NeurIPS 2026 ED submission

Python Makefile

Paste your AGENTS.md, Cursor rules, Codex settings, MCP config, or other AI coding-agent configuration and get a plain-English security report in seconds. AgentGuard checks for 134 risky misconfiguration patterns, including the lethal trifecta, hardcoded secrets, unsafe shell and network access, webhook exfiltration, prompt leaks, cloud metadata SS

TypeScript CSS JavaScript

purplegate — Red/blue-team CI gate for agentic-AI apps. Prompt-injection, secrets, SAST, deps, IaC/RLS, workflow injection, MCP checks. One signed GitHub Action, mapped to OWASP LLM Top 10 v2025 + MITRE ATLAS.

agentic-ai ai-security ci-cd devsecops github-action llm-security mitre-atlas owasp owasp-llm-top-10 prompt-injection prompt-injection-detection sa sarif security supply-chain-security

Dockerfile Python

Security gateway for MCP traffic. 5 built-in rules block prompt injection, credential leakage, path traversal, cross-repo exfiltration, and destructive commands. One pip install, zero config.

mcp security python proxy claude ai-agents prompt-injection self-hosted model-context-protocol llm-security ai-security cursor security-tools path-traversal credential-leakage

Python

Audit Claude Code plugins and MCP servers for security risks before installing. Detects exfiltration, secret reading, hidden execution, obfuscation, and supply chain attacks.

JavaScript Shell

None

Dockerfile Python

MCP Audit Pro - Professional MCP Server Security Audits

Shell Python HTML JavaScript

Cursor + Claude plugin for AAAA-Nexus MCP: 7 skills for UEP governance, RatchetGate / MCP trust boundary, Vanguard on-chain, Aegis proxy, evidence chains. BSL 1.1.

Python

The most comprehensive LLM + MCP security guide i.e. OWASP aligned, real CVEs, actionable checklists

ai-security claude cybersecurity generative-ai infosec jailbreak langchain llm-security mcp-security openai owasp prompt-injection red-teaming

Hybrid classical + post-quantum (NIST FIPS 204 ML-DSA-65) digital receipts for AI agent decisions. First production MCP server with offline-verifiable post-quantum signing.

ai-agents ai-safety cnsa-2 cryptographic-receipts cryptography crystals-dilithium ed25519 eu-ai-act fips-204 mcp ml-dsa-65 model-context-protocol owasp-asi post-quantum-cryptography prompt-injection-defense python responsible-ai agentic-diffusion cve-2026-25253 trustatom

Python

Autonomous Sovereign System: Atomadic Development Environment.

Python JavaScript Jupyter Notebook Kotlin Rust Swift TypeScript HTML Procfile Shell

A practitioner-focused reference for AI/ML security — attacks, tools, research, and defenses. Covers offensive AI, securing AI systems, AI-assisted security operations, and governance.

Enterprise integration patterns: idempotent event processing, saga orchestration, transactional outbox, and webhook validation for reliable system-of-record sync

crm enterprise-architecture enterprise-integration event-driven integration-patterns salesforce workflow-automation agentic-ai cloud-integration data-integration fastapi idempotency kafka mcp-security microservices oracle python saga-pattern state-machine transactional-outbox

Python