26 results for “MCP servers”

Companion repository for Omar Santos's Pearson and O'Reilly trainings and books. It has eight parts of runnable Python labs: chat models, embeddings, prompt templates, LCEL prompt chaining, Chroma-based RAG, ReAct/LangGraph/CrewAI/DeepAgents agents, and FastMCP servers (nmap, CISA KEV, Shodan). It also includes guides to six agentic frameworks (OpenClaw, Hermes, Agent Zero, OpenHands, Paperclip, Buzz), a tokenomics module on agent cost (context compounding, prompt caching, model routing, token budget guards, batch API, cost per accepted outcome), and a vendor-neutral design spec for a human-gated multi-agent assessment harness. It is a current, practical curriculum for building and operating agents. Some examples act on real systems and should only be run in an authorized lab.

github.comrepoAdded 13 Oct 2026🧠 AI

iran-mcp is an open-source catalog of 39 MCP servers (488 tools) that let AI agents query Iranian websites such as Digikala, Torob, Divar, Snappfood, Jabama, Paziresh24, TSETMC and qavanin.ir, with prices normalised to Toman. Most servers are unofficial, read-only Python packages run with uvx; three are official hosted servers. It ships Claude Code plugins, Agent Skills, bundles, proxy lists and a machine-readable servers.json.

github.comrepoAdded 24 Oct 2026, published 11 Oct 2026🧠 AI

The Vulnerable MCP Project is a curated, continuously growing database of security vulnerabilities and attack techniques specific to the Model Context Protocol ecosystem. Entries cover concrete CVEs (e.g. CVE-2025-68143/68144/68145 in Anthropic's mcp-server-git), transport-layer SDK flaws (cross-client response leakage, missing DNS rebinding protection in the official TypeScript/Python SDKs), unauthenticated/0.0.0.0-bound servers enabling RCE (MCPJam inspector, MCP Inspector, Grafana MCP), command/path injection in dozens of third-party servers (gemini-mcp-tool, mcp-server-kubernetes, Framelink Figma MCP, Zen MCP, filesystem-mcp), SSRF chains reaching cloud metadata (MarkItDown MCP, mcp-fetch-server), and a large set of AI-specific attacks: tool poisoning, trigger-phrase data exfiltration, prompt injection via GitHub issues, Jira and Google Docs, rug-pull tool mutation, and cross-server tool-name collisions. It functions as the de facto vulnerability registry for the MCP ecosystem, useful for tracking disclosed issues before patching or adopting third-party MCP servers.

vulnerablemcp.inforepoAdded 6 Oct 2026🛡️ Security

A community-maintained catalog of Model Context Protocol servers connecting AI assistants to Swedish data, laws and services (e.g. Fortnox, Bokio, BolagsAPI, ICA), forked/adapted from the France and Italia MCP Servers projects. Each entry is checked against canonical documentation, tracks license/credential requirements, and includes a runtime smoke-test report (protocol/tool call attempts, credential blockers, failures) plus a six-criterion documentation-readiness rubric, published as a static JSON/HTML site.

github.comrepoAdded 26 Sep 2026, published 14 Sep 2026🧠 AI

Awesome Remote MCP Servers is a curated GitHub list of hosted Model Context Protocol servers that you connect to by URL, with no local install. Entries are listed only after the endpoint answers an MCP initialize handshake. It explains local versus remote servers, shows connection examples for Claude Code and mcp.json, marks auth as none, API key or OAuth, and groups servers into about 40 categories.

github.comrepoAdded 2 Nov 2026, published 8 Sep 2026🧠 AI

Plamen is an open-source Python orchestrator that drives 18-100 Claude Code or OpenAI Codex CLI agents across 40+ phases to autonomously audit smart contracts (EVM/Solidity, Solana/Anchor, Aptos Move, Sui Move, Soroban, DAML/Canton) and L1 node-client infrastructure (Go/Rust consensus, p2p, mempool code), producing a severity-tiered AUDIT_REPORT.md with verified proof-of-concept exploits for each finding. It integrates MCP servers for Slither, ChromaDB and Solodit, ingests vulnerability corpora from Solodit, DeFiHackLabs and Immunefi to ground findings, and runs a PTY-supervised worker-pool architecture with checkpoint/resume, artifact-based completion gating, and a dedicated L1 mode with consensus-invariant and network-surface depth agents.

github.comrepoPublished and added 7 Sep 2026🛡️ Security

A curated GitHub awesome-list cataloging the emerging agentic-AI security ecosystem: dozens of Model Context Protocol servers that give LLM agents access to security tools (Nuclei, Shodan, VirusTotal, Burp Suite, Ghidra, BloodHound, x64dbg), autonomous penetration-testing and CTF-solving agent frameworks (CAI, pentagi, BreachSeek, Dark-Moon, D-CIPHER), scanners/guardrails that audit agent skills, MCP servers, and multi-agent chains for prompt injection and other risks (Aguara, Inkog, MCP Doctor, AI-Infra-Guard, ATR), agentic SOC/detection platforms (Vigil), threat-modeling frameworks for agentic systems (MAESTRO, ATFAA/SHIELD), research papers, benchmark datasets, and community/learning resources. It functions as a living index for anyone building or defending AI-agent-driven security tooling.

github.comrepoAdded 3 Sep 2026, published 31 Aug 2026🛡️ Security

ADR (Agentic AI Detection and Response) is Uber's open-source enterprise security system for AI agents, covering discovery of unsanctioned AI tools on endpoints, telemetry capture of agent intent/tool-use/execution traces, a benchmark (ADR-Bench: 300+ tasks, 134 MCP servers, 17 agent attack techniques), and a dual-agent detector for risky agent behavior. It is deployed in production at Uber to secure employee-facing coding agents (Cursor, Claude Code, Codex, GitHub Copilot CLI, DeepSeek) and customer-facing support agents; the accompanying paper was accepted to MLSys 2026. The prevention component and offline red-teaming engine (ADR Explorer) are not included in the open-source release.

github.comrepoPublished and added 21 Aug 2026🛡️ Security

WhipCode (context-labs/whip) is an open-source coding agent written in Go, with a Desktop app, terminal UI and web client on a shared daemon. A recursive language model loop runs short Starlark or JavaScript programs to inspect context, call tools and delegate to subagents. It supports MCP servers, skills and provider-routed models, and solved 20 of 30 tasks in a retained evaluation.

github.comrepoAdded 2 Nov 2026, published 20 Aug 2026🧠 AI

AuditSentry is a GitHub project that pairs Claude Code with 13 specialized MCP servers and 23 parallel AI agents to audit Solidity and Vyper smart contracts, generating vulnerability findings, working exploit PoCs, mainnet-fork simulations, and CVSS-scored audit reports. It targets DeFi-specific bug classes (reentrancy, oracle manipulation, flash loan attacks, ERC-4626 inflation, cross-chain messaging replay, L2 sequencer issues, ERC-4337 account abstraction) and claims results benchmarked against 150+ historical Code4rena/Sherlock contest findings.

github.comrepoAdded 3 Sep 2026, published 10 Aug 2026🛡️ Security

HarnessRouter is a self-hostable (Docker) infrastructure layer that wraps existing agent harnesses such as Codex and Claude Code behind one OpenAI Responses-compatible API, letting a product run tasks, stream progress, manage files/artifacts, and switch harnesses without writing harness-specific integration code. It implements the Unified Harness Protocol (UHP), a versioned, OpenAI Responses-compatible contract with a reference implementation, schemas, and conformance suite, plus features like per-session workspaces, custom harness configuration with tools/skills/MCP servers, and secret redaction via vault references or header-scoped env vars so long-lived tokens never leak through agent output.

github.comrepoAdded 2 Oct 2026, published 9 Aug 2026🧠 AI

Google's official repository of Agent Skills covering Google products and technologies, including Google Cloud. Skills are installed selectively via `npx skills add google/skills`, and the repo also bundles Google product plugins combining Skills with MCP servers for use in agent harnesses.

github.comrepoAdded 22 Sep 2026, published 3 Aug 2026🧠 AI

A comprehensively curated landscape document tracking the offensive AI agent space: ranked open-source pentesting/red-team agent projects (e.g. strix, shannon, VulnBot), uncensored offensive LLMs (Qwythos, WhiteRabbitNeo/DeepHat, BaronLLM) versus security-specialized but aligned models (Foundation-Sec, CyberSecQwen), Claude Code Agent Skills and MCP servers wrapping tools like Metasploit and BloodHound, 116 cross-referenced academic papers on pentest/vuln-discovery agents, capability benchmarks (Cybench, NYU CTF Bench, CyberGym), and a fact-checked Top-20 list of commercial AI pentesting vendors. It also covers competitions like the DARPA AI Cyber Challenge and Tencent's Intelligent Penetration Hackathon, positioning itself as a cross-merge of several other awesome-lists in this niche.

github.comrepoPublished and added 1 Aug 2026🛡️ Security

AgentHound is an open-source offensive security framework that, from a single compromised host, collects local credentials and agent configuration, discovers and fingerprints reachable AI services (MCP servers, A2A agents, model gateways, inference servers like Ollama, vector stores, MLOps platforms, notebooks), reuses harvested credentials to verify concrete access, and writes everything to a checkpointed JSON artifact. An optional analysis server (Neo4j/PostgreSQL-backed) turns the artifact into a queryable attack graph with credential-chain, cross-protocol pivot, exfiltration/execution paths, and prompt-injection-related findings (POISONED_INSTRUCTIONS, POISONED_DESCRIPTION, SHADOWS). It supports an active mode (credential reuse, differential reads, reversible mutation with auto-rollback) and a read-only --stealth mode for OPSEC-constrained engagements.

github.comrepoPublished and added 1 Aug 2026🛡️ Security

Ripwire is an offline, single-binary CLI (with optional MCP server) that indexes a repository to give coding agents a ranked, deterministic call graph, task-oriented context bundles (--for, --pack-task), and edit-time checks (--edit-check, --quality-delta, --test-gate) that flag blast radius, contract breakage, and code-quality regressions. It installs skills for Claude Code, Codex, Cursor, Windsurf, Gemini, opencode and aider, and ships extensive self-published benchmarks (docs/EVALS.md, LocBench-style head-to-head comparisons against graph-database MCP servers like codebase-memory-mcp, repowise, graphify and aider) claiming large token and latency savings plus higher file@10 retrieval accuracy. The README includes a detailed field report on using it across a ~20-agent, ~1,500-file C++/Metal orchestration engagement.

github.comrepoAdded 2 Oct 2026, published 29 Jul 2026🧠 AI

ClawSecCheck audits OpenClaw agent installs for prompt injection, malicious MCP servers, and supply-chain risk in skills and dependencies.

github.comrepoPublished and added 22 Jul 2026🛡️ Security

Skills Janitor is a Claude Code/OpenAI Codex plugin that inventories installed skills, subagents, and MCP servers, then lets users swipe-delete unused or duplicate ones to reclaim context window space. Its janitor-security and janitor-discover commands scan skill contents for known prompt-injection shapes: instruction-override phrases, 'don't tell the user' directives, payloads hidden in HTML comments or zero-width unicode, smuggled base64, and scripts that pipe network output into a shell or read credential stores, citing research that found injection in roughly a third of tested community skills. It also cross-references MCP server configs against real session-transcript usage to flag connected-but-never-called servers whose tool schemas silently consume context on every request.

github.comrepoPublished and added 15 Jul 2026🛡️ Security

Grok Build is xAI's terminal-based AI coding agent, shipped as a Rust CLI/TUI (binary name `grok`) that understands a codebase, edits files, runs shell commands, searches the web and manages long-running tasks. It supports interactive use, headless scripting/CI mode, and embedding in editors via the Agent Client Protocol (ACP), and its docs cover MCP servers, skills, plugins, hooks and sandboxing; the repo is synced periodically from xAI's internal monorepo and vendors tool implementations ported from openai/codex and sst/opencode.

github.comrepoAdded 30 Sep 2026, published 14 Jul 2026🧠 AI

ai-surface is a local/offline static analysis CLI (apisec-inc) that scans a codebase for AI attack surface — LLM SDK calls, agent frameworks (LangChain, AWS Strands), MCP servers, RAG/vector stores, model gateways, and provider keys — and flags risk indicators such as financial-action tools with no human approval or unverified MCP servers. It generates an AI-BOM (CycloneDX), SARIF for GitHub code scanning, and maps findings to OWASP LLM Top 10, EU AI Act, NIST AI RMF, and ISO/IEC 42001, with a baseline+fail-on-severity workflow for gating new risk in PRs without blocking on pre-existing debt.

github.comrepoPublished and added 11 Jul 2026🛡️ Security

AI-Infra-Guard (A.I.G) is Tencent Zhuque Lab's open-source AI red-teaming platform that fingerprints running AI services (e.g. vLLM, LangFlow, MLflow, llama.cpp) against a library of 2000+ CVE rules, scans MCP servers and Agent Skills for vulnerabilities using the SkillTrustBench T01–T09 taxonomy, and runs multi-turn jailbreak evaluations (Many-Shot, PAIR, GOAT, ActorAttack). It also ships an LLM API poisoning/model-substitution detector, a plugin framework for community-contributed fingerprint/vuln/MCP rules, and accompanying research (FORGE-Bench, RogueHandoff-20, SkillJack) on agent loss-of-control and skill backdoors.

github.comrepoAdded 2 Jul 2026🛡️ Security

pentest-agents is an autonomous bug-bounty framework that wires Claude Code (and Codex, Gemini, Cursor, Windsurf, VS Code Copilot, OpenClaw) with 50 specialized agents, 26 slash commands, 19 CLI tools, 11 methodology skills, and two MCP servers — one for live bug-bounty platform integration (HackerOne, Bugcrowd, Intigriti, Immunefi, YesWeHack) and one for semantic writeup/payload search over a self-built FAISS index. It codifies a hunt workflow (recon → surface → hunt → validate via a 7-Question Gate → exploit-chain building → report → submit) with per-vuln-class hunter agents (XSS, SQLi, SSRF, SSTI, IDOR, XXE, RCE, CORS, subdomain takeover, etc.), a persistent "brain" for endpoint tracking, CVSS-version policy enforcement, and a scope-check hook that blocks out-of-scope Bash commands before execution.

github.comrepoPublished and added 18 May 2026🛡️ Security

MEDUSA is an AGPL-3.0 CLI security scanner (pip install medusa-security) built specifically for the AI/agentic era, shipping 40,000+ detection patterns across 79 scanner types for AI/ML apps, MCP servers, RAG pipelines, and traditional code, with zero external tool installation required. It detects AI supply-chain attacks like repo poisoning through weaponized editor configs (Cursor, Cline, Windsurf, Claude Code, Copilot, Kiro), MCP tool/schema poisoning, and prompt injection, and includes a `medusa secrets scan/purge` command that finds and redacts leaked API keys (21 issuer types) inside Claude Code, Cursor, Copilot, Gemini and shell REPL history files. It also carries a CVE database (200 entries) covering things like Log4Shell, XZ Utils, LangChain RCE, and the CVSS 10.0 React2Shell (CVE-2025-55182) RCE in React Server Components/Next.js.

github.comrepoPublished and added 10 May 2026🛡️ Security

CodeBurn is a free, open-source CLI/desktop tool that reads the local session files written by 41 AI coding tools and agents (Claude Code, Cursor, Codex, Gemini, Grok, etc.) to break down token usage and dollar cost by model, project, and task. It adds an 'optimize' scanner that detects waste patterns (re-reads, low read:edit ratios, unused MCP servers, bloated CLAUDE.md files) with auto-applicable fixes, a 'guard' feature for per-session cost caps via Claude Code hooks, and a 'yield' command that correlates spend with actual shipped commits.

github.comrepoAdded 22 Sep 2026, published 7 May 2026🧠 AI

MCP Audit is a VS Code extension that transparently intercepts and logs all MCP tool calls made by GitHub Copilot, by creating mirrored ("tapped") copies of configured MCP servers. It forwards structured JSON logs (tool name, params, results, agent/host/IP, correlation ID) to Splunk HEC, Syslog (CEF), or local files, giving security and compliance teams a centralized audit trail of what an AI coding agent actually did.

github.comrepoPublished and added 6 May 2026🛡️ Security

mcpwn is a CLI security scanner for Model Context Protocol (MCP) servers, described as "nikto or nuclei, but for MCP servers." It runs checks (MCP-001 through MCP-013+) that statically analyze tool descriptions/schemas for hidden-instruction tool poisoning and, in an --aggressive mode, actively probe for prompt injection via tool output, SSRF against internal IPs/cloud metadata endpoints, command injection via shell metacharacters, cross-tool data exfiltration via canary tokens, and hardcoded secrets in resources. It supports stdio/SSE/HTTP transports, JSON/SARIF output for CI gating, and pairs with a companion runtime tool called mcp-firewall.

github.comrepoPublished and added 6 May 2026🛡️ Security

AIMap is a Bishop Fox tool that discovers publicly exposed AI/ML endpoints (MCP servers, Ollama, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes) via 32+ curated Shodan queries, fingerprints them with Nuclei templates and live HTTP probes, and computes a 0-10 risk score based on auth, tool exposure, CORS, TLS, and system-prompt leakage. It also launches protocol-specific attack suites — MCP tool abuse, Ollama model extraction, prompt injection — with real-time streaming results and a Shodan-style query search interface plus a 3D globe visualization of findings.

github.comrepoPublished and added 6 May 2026🛡️ Security