Skip to main content
Glama
sudo-ai-git

mcp-security-suite

mcp-security-suite

One enterprise MCP security brand over the previously separate sudo-ai-git deterministic no-LLM servers. For the "Agent Identity / Enterprise-Ready Security" gap in MCP platforms (e.g. kubernetes-sigs/mcp-lifecycle-operator).

What it unifies (12 tools, 4 domains)

Domain

Prefix

Server

Tools

What it does

verify-claim

vc_

mcp-verify-claim

tier_claim, check_claim, report_templates, tier_definitions

Evidence-gated tiered claim reporting (FACT/INFERENCE/SPECULATION) — never fabricates

skill-sec

sec_

mcp-skill-sec

audit_text, audit_skill_file, audit_directory, rule_list

Audits agent skills/prompts vs 8 supply-chain attack patterns

token-saver

tok_

mcp-token-saver

profile_tokens, duplicate_payload_report

Deterministic token profiler (per-role spend, dedupe, savings)

auth-audit

auth_

mcp-auth-audit

audit_server_auth, audit_token_mode

MCP server auth-mode audit

mcp-schema-lint (registry-manifest + tools/list validator) ships as companion CLI.

Related MCP server: mcp-security-toolkit

Run

python -m mcp_security_suite        # stdio MCP server, all 12 tools

Validation (P2 gate)

validate_suite.py imports each component server and asserts the consolidated server.json lists exactly the real, loadable 12 tools — no missing, no phantoms. RESULT: PASS. End-to-end tool execution proven (e.g. sec_audit_text returns verdict: FLAG on a curl-pipe-sh payload).

Honest scope

This is a brand/registry unification — the tool implementations live (and are tested) in their component repos; this package re-exports them under one entrypoint + registry manifest. It does NOT fork implementation code. All backends are deterministic, no-LLM, no-network.

A
license - permissive license
Not graded
quality - not tested
C
maintenance

Maintenance

0Releases (12mo)
Commit activity

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    A
    maintenance
    This MCP server enables security auditing for MCP configurations and AI agents, including prompt injection testing, data flow tracing, and security policy generation.
    474
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Audits MCP server configurations for security risks including capability inventory, SSRF, prompt injection, and drift detection. Works in read-only mode and can also be used as an MCP server to let AI agents audit their own attack surface.
    4
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.
    2
    Apache 2.0

View all related MCP servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/sudo-ai-git/mcp-security-suite'

If you have feedback or need assistance with the MCP directory API, please join our Discord server