"OSF" matching MCP servers:

Enables scanning Java (Maven) projects for known vulnerabilities via natural language, returning severity-sorted reports with CVSS scores and fix versions.

Supply chain risk scoring for npm, PyPI, and GitHub repos

The server can be utilized for secure development by listing all packages' CVEs, their affected versions and their fix versions.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification.

A ready-to-deploy MCP server with in-process agent verification via KYA-OS Checkpoint, enabling secure tool access for verified agents.

Enables comprehensive NIST Cybersecurity Framework 2.0 assessments with 40+ MCP tools for maturity scoring, gap analysis, implementation planning, risk assessment, and executive reporting across 740 security questions.

Enables AI agents and LLM clients to autonomously run deep username and email OSINT scans across thousands of platforms, recursively pivoting on exposed handles, profile links, and secondary addresses while enriching results with rich profile metadata. It also exposes a dynamic catalog so agents can discover available modules and categories before scoping targeted scans.

MCP server for querying Google's Open Source Vulnerabilities (OSV) database. Enables vulnerability lookups by package, version, commit, or ID using natural language via Pipeworx gateway.

Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP.

Enables AI agents to look up known open-source vulnerabilities in the OSV.dev database, covering individual packages and versions, specific git commits, single vulnerability IDs, and batch SBOM-style dependency scans. Queries are keyless and return compact summaries or full vulnerability details with affected ranges and references.

Security-focused MCP adapter that combines read-only DataHub metadata with a reviewed OKF-derived policy IR to execute closed, typed SQL queries against synthetic PostgreSQL data.

Visual CVE audit dashboard for npm, Python, Go, and Rust projects. Scans your project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against OSV.dev live data, opens a browser dashboard for human review, then applies fixes only after explicit confirmation. Supports multi-service monorepos in one command.

Walkie-talkies for AI coding agents: Claude Code, Codex, Cursor and any MCP client message other developers' agents directly, peer to peer over HyperDHT and end-to-end encrypted. No server, no account. Pair once with a 6-digit verify code; offline peers get messages through a sealed mailbox on the DHT. Tools: send_message, read_inbox, list_messages, list_peers, get_status.

Enables AI agents to list metrics and dimensions, inspect definitions, and run governed metric queries against Apache Iceberg tables through a semantic layer, without writing SQL or accessing raw rows or columns outside their role.

Provides AI ingress governance by masking prompts, classifying risk, and enforcing tool policies before agent calls reach model providers or sandboxes.

Provides read-only access to VeriLock document metadata and cryptographic evidence, enabling clients to list, retrieve, verify, and audit documents through the Model Context Protocol.

MCP server for verifying high-impact decisions with Trust OS.

MEOK CRA Annex Iv Classifier - MCP server providing AI-powered tools and automation by MEOK AI Labs

Enables pre-execution security checks and sandboxed execution for AI agent workflows, including prompt-injection detection, MCP rugpull and sampling abuse protection, untrusted tool-output sanitization, loop circuit breaking, SQL AST validation, PII redaction, and ephemeral Python execution.

Automated security red-team for any MCP server that scans manifests against OWASP LLM Top 10 and MCP-specific risks, returning a 0-100 hardening score and HMAC-signed report.

Connects AI assistants to VulnCheck vulnerability intelligence for querying CVEs, exploits, advisories, and vulnerable packages via natural language.

A personal agent control harness that governs AI agents by checking every consequential action against user-defined rules, logging all actions to a tamper-evident audit chain, and providing a global kill switch. It runs as an MCP server sidecar to coding agents or standalone, keeping users in charge of what their agents can do.

Validates AGENTS.md files against the cross-vendor coding-agent spec, detecting security smells and consistency issues.

Open-source MCP servers that give AI agents structured access to networking standards, device databases, and security data.

MEOK Watermark Attest - MCP server providing AI-powered tools and automation by MEOK AI Labs

Enables assessing and comparing domains for email spoofing risk by evaluating SPF, DMARC, MX, and DKIM records from public DNS, providing A-F grades and concrete remediation steps.

Enables AI agents to conduct authorized penetration tests by providing scope-enforced access to Metasploit Framework's RPC, with tools for reconnaissance, exploitation, session management, and post-exploitation.

Publishes AAIF Agent Cards and bridges A2A and OASF to AAIF, with built-in EU AI Act compliance.

Enables interaction with the Huntress SAT API to manage security awareness training, including learners, phishing campaigns, and training assignments. It supports OAuth2 authentication and optional role-based access control for secure organizational management.