Developer Tools MCP Servers
Code, Git, APIs, SDKs, CI/CD, developer workflows, and local developer tooling.
Tool Poisoning Scanner
Published by GitHub account 4hmetuyar
Scans MCP server source code for tool poisoning in tool descriptions and for confused-deputy tools whose handlers exceed their read-only names.
Slopsquat Scanner
Published by GitHub account 4hmetuyar
Local MCP server that checks a project's declared npm and PyPI dependencies against the live registries to flag slopsquatted or hallucinated package names.
Security Suite
Published by GitHub account 4hmetuyar
A local MCP server bundling secret scanning, dependency CVE auditing, TLS inspection, and DNS/SPF/DMARC checks for code and domains.
Security Proxy
Published by GitHub account 4hmetuyar
A local proxy that sits in front of other MCP servers to block prompt injection, mask PII, enforce policy rules and write a hash-chained audit log.
Secret Scanner
Published by GitHub account 4hmetuyar
Local MCP server that scans files, directories, git history and agent transcripts for leaked API keys, tokens and passwords, with redacted results.
Rug Pull Detector
Published by GitHub account 4hmetuyar
Local MCP client that baselines another MCP server's tool definitions and flags later changes, catching rug pulls after approval.
Prompt Leak Scanner
Published by GitHub account 4hmetuyar
A local MCP server that scans outbound LLM prompts for leaked credentials and PII, with optional redaction or blocking through a reverse proxy.
Oauth Auditor
Published by GitHub account 4hmetuyar
Scans MCP server authorization code for OAuth 2.1 anti-patterns such as token passthrough, missing audience validation and missing PKCE.
Memory Poisoning Scanner
Published by GitHub account 4hmetuyar
Local MCP server that scans agent source code for memory-poisoning patterns where untrusted input reaches persistent memory or is recalled into trusted prompts.
Mcp Server Auditor
Published by GitHub account 4hmetuyar
Local MCP server that statically scans other MCP servers' tool definitions for insecure patterns and reports findings with recommendations.
Mcp Config Auditor
Published by GitHub account 4hmetuyar
Audits local MCP client configs (Cursor, Claude, Windsurf, VS Code) for unpinned packages, secrets, typosquats and risky auto-approve settings.
Llm Redteam
Published by GitHub account 4hmetuyar
Runs canary-based jailbreak, prompt-extraction, and obfuscation probes against a live LLM endpoint you control and reports which guardrails were bypassed.
Dependency Auditor
Published by GitHub account 4hmetuyar
Audits npm, pip and other project dependencies against the OSV vulnerability database, reporting CVEs, malicious releases and fix plans.
Ai Code Scanner
Published by GitHub account 4hmetuyar
Scans code snippets, files, or directories for insecure LLM/AI integration patterns such as exposed keys, unsafe output handling, and prompt injection.
Agent Graph Auditor
Published by GitHub account 4hmetuyar
A local MCP server that scans Python multi-agent orchestration code (LangGraph, CrewAI, AutoGen) to find agents that can reach dangerous tools indirectly.
A2a Auditor
Published by GitHub account 4hmetuyar
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing authentication, and credential exposure anti-patterns.
PageWeave
dev.pageweaveOfficial publisher
Agent-native website builder that lets an assistant create, edit and host websites through a remote MCP endpoint.
Relvato
com.relvatoOfficial publisher
Hosted website monitoring: an assistant can add sites, set up and tune monitors, run scans, read results and propose fixes.
AI 模型下架與替代日程
com.penguindriverOfficial publisher
A remote MCP server that tells an assistant which OpenAI, Claude and Gemini models are deprecated or retiring, their shutdown dates, and official replacements.
FactStamp
au.com.alpineai
FactStamp is a paid remote verification service that lets an assistant check companies, figures, citations, packages and sanctions against primary registers…
Hlix
ai.hlixOfficial publisher
Hlix connects an assistant to a Hlix cloud team so it can start work, check progress, preview, review and ship software.
mcptask.online
online.mcptaskOfficial publisher
Remote MCP endpoint that lets an assistant assign development tasks and receive pull requests on your own infrastructure.
agent-custody
Published by GitHub account svayatta
MCP gateway that checks each agent tool call against a signed grant and policy, and signs a receipt
agent-mailbox — Mailbox and Wake System for AI Agent Teams
Published by GitHub account polaris-smart
A local mailbox and wake system that lets multiple AI agent sessions share a project through MCP: assign tasks, accept them, read pinned documents and submit,