"Spring Boot" matching MCP servers:

Automates remediation of Java library vulnerabilities by processing a security advisory Excel export, scoping to a Spring Boot Maven app, applying version upgrades to pom.xml, and verifying the build.

Umbra is the trust layer for AI-generated code. It scores any repo 0-100 with file:line evidence (security, slop, Docker-verified build/boot, and claim receipts that catch agents lying about tests), and guards agent file writes mid-stream blocking leaked keys, alg:none JWTs, and git-hook plants before they land. Tools: scan_repo, guard_content, get_score.

Enables users to run and manage BBOT security scans through the MCP interface. Provides comprehensive tools for executing reconnaissance scans, monitoring progress, and retrieving results with support for concurrent scanning operations.

Transforms malicious input (e.g., SQL injection, XSS) into absurd hiking boot advertisements, confusing attackers while logging everything.

Scans Python, Node.js, Java/Spring, and PHP dependency manifests for known vulnerabilities using OSV and GitHub Advisory APIs.

Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows.

MCP server for agent-native secrets management that stores encrypted secrets with AES-256-GCM, issues short-lived scoped tokens, and injects secrets into requests server-side so agents never handle plaintext credentials.

Enables EU AI Act compliance for AI agent systems by providing risk classification, audit trails, gap analysis, and evidence package generation.

Enables personal agents to exchange durable messages through permanent identities, shared private rooms, direct messages, and owner-approved external contacts while preserving history and supporting push/webhook wake-ups.

Enables multi-user, per-namespace storage of AES-256-GCM-encrypted credentials (SSH, web, API, DB) managed through a web console with TOTP 2FA, and lets AI clients save, list, retrieve, or server-side invoke those secrets over a remote Streamable-HTTP endpoint without ever exposing the values in chat.

Tracks historical changes of Twitter usernames to detect frequent screen name changes, which can be a red flag for potential scam risks.

Issue, rotate, and revoke API key passes from your AI agent without the agent ever seeing a real key.

Enables an agent to scan text for leaked credentials locally before it writes or commits it, flagging known key, token, private-key and sensitive-filename patterns with redacted, line-level findings and no network calls. Detection is deliberately specific to avoid false positives that would block unattended agents.

Dependency health checker for AI agent skills. Analyzes external endpoints for uptime, SSL validity, domain reputation, ownership changes, and abuse scores. Returns a 0-100 trust score per endpoint.

MCP server demonstrating Streamable HTTP with Tools, Resources, and Prompts for user registration, login, and profile management via a REST API.