"Travis CI" matching MCP servers:

Security auditor for CI ecosystems that detects supply-chain and injection flaws in CI/CD configuration files across seven CI platforms, providing taint analysis, remediation, and compliance scoring.

Local MCP decision gate for AI agents and CI/CD: check candidate actions against owner-controlled policy and proposal-bound evidence. Three read-only tools report admissible options, missing evidence, and SHA-256 receipts. No selection, execution, or DeltaX API key.

Supply-chain gate for AI agent skills and MCP servers: poison-scan tool definitions, hash-pin the vetted set into a lock file and verify drift in CI. truecopy-mcp is a drop-in stdio proxy that filters a live server's tools/list down to its pinned, unmodified, unpoisoned tools.

Enables AI coding agents and CI to vet npm dependencies before they reach the lockfile, flagging hallucinated, slopsquatted, or otherwise risky packages with evidence-backed verdicts.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.

Enables AI assistants to monitor GitHub repository health by calculating health scores, fetching repository metadata, analyzing Dependabot alerts, checking CI/CD status, and retrieving code scanning alerts.

A read-only MCP server for the Qualys PCI Merchant API that lets LLM assistants answer questions about PCI compliance posture, such as which hosts are failing PCI or listing high findings.

Zero-knowledge proof generation MCP server. AI agents can prove identity claims (Coinbase KYC, Country, Google OIDC, Google Workspace, Microsoft 365) without revealing personal data. Runs in AWS Nitro Enclave TEE with x402 USDC payments.

Provides read-only access to CWI's trust infrastructure, enabling Gear Ledger provenance queries, agent trust scoring via the Verdict Engine, and NEEDLE DROP ledger hash-chain verification over stdio.

Scans prompts for PII and masks or redacts sensitive data locally before sending to an LLM, supporting multiple anonymization modes.

Enables MCP-capable assistants to run read-only AI governance inventory checks, assemble Decision Packs, and validate signed Agent Trust Passports against pinned upstream tooling, returning every result as non-authorizing with authority_effect NONE.

EU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs

MCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.

PII detection agent

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Verify-before-act safety tools for AI coding agents, providing MCP tools to check packages, lockfiles, manifests, and CI workflows for supply chain risks.

Connects Claude to SAP Cloud Platform Integration (CPI) to diagnose failed messages, review iFlows, deploy artifacts, and check credentials directly from your conversation.

Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.

Lets AI agents and developers inspect and query local MySQL, Redis, and MongoDB instances over STDIO or authenticated loopback HTTP, with read-only defaults and allowlisted non-production writes that require explicit opt-in. Production connections always reject writes, and database-enforced read-only accounts are recommended.

Enables AI assistants to read identification verdicts, search history, summarize entities, explain risk scores, and verify webhook signatures through read-only tools over stdio or streamable HTTP.

Enables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD integration.

Deterministic secret, PII and PHI checks for your CLI, git hooks, CI and MCP, with editable scaffolds for NIST SSDF, ISO 27001 and India's DPDP Act.

A Model Context Protocol (MCP) server that provides integration with the Have I Been Pwned API to check if your accounts or passwords have been compromised in data breaches.

Enables LLM clients to access DevSecOps tooling such as CI/CD pipeline status, vulnerability triage, log search, and dependency scanning through MCP, turning AI copilots into security-aware engineering partners.

MCP server for AutoRABIT ARM APIs, covering CI Jobs v1 endpoints, Deployment Reporting v1 endpoints, and SIEM Audit Logs.

Static security review of Electron apps and binaries: compares two builds and reports changed IPC channels, preload bridge members, window settings, fuses and network hosts with file and line, plus a CI policy gate, without executing the target.

MCP Blast-Radius Auditor — statically extract what an MCP server can touch and detect declaration divergences against manifest.json. Stdio MCP (mcp-blast-radius) plus CI gate (mcp-blast-radius-gate). pip install mcp-blast-radius==0.2.0

Enables structured robustness and security testing by scanning text for policy/safety issues and generating test suite outlines.

A comprehensive MCP server for infrastructure operations with 92 tools across 13 categories, covering system monitoring, networking, containers, multi-cloud management, databases, CI/CD, IaC, security, and remote SSH fleet management.

Connects AI assistants to the Vectra AI security platform to enable intelligent analysis of threat detection data and automated incident response workflows. It allows users to investigate threats, take response actions, and generate security reports using natural language.

Enables detection of AI-generated content from ChatGPT, GPT-4, and Gemini models through the BACH AI Content Detector API.

Enables discovery of public API operations, scoped read-only diagnostics for domains, DNS, and mail, and a controlled write lifecycle that requires independent human approval before any mutation.

Enables orchestrating secure software development pipelines with domain-specific compliance (HIPAA, PCI-DSS, etc.), generating pseudocode, threat models, and CI/CD from user stories via natural language.

Perimeter security for your AI Infrastructure.

Security scanner and MCP server that catches dangerous patterns in MCP servers and AI agent projects, such as leaked secrets, shell execution, and prompt-injection text. Runs as both a CLI and MCP server with CI-friendly severity gates.

ISO 27001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

Enables MCP clients to run local scans for known AI coding-assistant backdoor indicators and risky Claude Code/MCP configuration patterns, returning findings directly in chat.

Connects AI assistants to the Vectra AI On-Premise security platform for natural language threat detection, investigation, and automated incident response workflows.

Enables MCP clients to enforce local no-harm tool policies, require single-use operator approval for sensitive actions, and produce verifiable audit records.

Provides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.