Security

Local MCP tools for secret status and guarded deployment. Values never reach the agent.

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Extended Google Docs for Claude via gogcli — auth + full Docs and comments support

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

MCP server for auditing Magento projects: update compatibility, module quality, dependency security

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer

Local read-only OpenAPI and Swagger inspection with secret-safe schema summaries. Tools include...

Search CVE vulnerability records from the NIST NVD database. No key required.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

md-log MCP: save/update/fetch markdown by path (stdio + remote HTTP, PAT auth).

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Architecture intelligence, security analysis, and living docs. 15 tools, Mermaid output.

Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.

Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

Offline full-text search over the HackTricks security wiki, synced every 3 days.

Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).

Count secret-like patterns in bounded local files without returning values, keys, paths,...

Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.

Final release; the checks moved to 9lives (9l mcp). Local QA MCP: scan, inspect, repro, run tests.

Scan local or remote hosts for open TCP ports. Runs locally.

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

Client editing for sites you built: register, scan, publish, go live, invite the client.