"pre-commit" matching MCP servers:

A pre-payment safety gate for x402 that screens payment metadata for PII, enforces spending policies, and detects replay attacks before signing.

MCP server for Speakeasy — Windows API emulation for binary analysis. It runs a .exe in a Wine-like sandbox and returns a structured API trace.

Pre-install risk gate for npm packages. Stops AI coding agents from running malicious or lifecycle scripts run.

Pre-flight oracle for x402 endpoints — gives any MCP-aware agent (Claude Code, Cursor, Windsurf, Continue) tools to detect decoys, zombies, and price traps before paying. Wraps preflight, forensics, decoy-blacklist, and watch-subscription endpoints from x402station.io.

Enables pre-approving deliveries and visitors at your gate via the NoBrokerHood resident app, so you or an LLM can automate gate access.

A trust-first repository copilot to audit signed commit provenance, preview editor configuration safety, and manage Git hook rollouts.

MCP security server for AI coding agents. 12 tools: pre-install guardian, vulnerability audit, supply-chain attack detection via static code analysis, and CycloneDX 1.6 SBOM generation. Zero runtime dependencies.

MCP server for detecting publisher telemetry pipeline leaks in binary artifacts by scanning for sensitive strings like Sentry DSNs, Slack tokens, and AWS keys.

Provides real-time threat intelligence including IP risk scores, CVE lookups, and malware hash analysis without requiring an API key. It enables users to monitor active threats, predict CISA KEV additions, and detect pre-attack infrastructure staging through natural language.

Pre-install trust scoring & safety scanning for MCP servers, AI skills & npm packages — 15 signals incl. OSV/KEV/EPSS vuln intel and an auto-gate go/no-go.

Enables AI agents to scan crypto tokens for rug pulls, scams, and risk using a six-agent consensus system. It provides real-time security audits and risk scoring for tokens on Solana, Ethereum, Base, and BSC.

MCP server for AI-agent governance using trust scoring, behavioral signals, and pre-flight action checks.

A pre-action risk gate for AI agents. Your agent calls the forecast tool before any irreversible action — send email, run SQL, make a payment, delete a file — and gets a risk score (0–100) and a GO / CONFIRM / STOP verdict in a few seconds.

Universal MCP server that emits Context Passport records for AI agent decisions and actions. Drop into any MCP-compatible client to give your agent a commit/verify/replay/export toolset for verifiable, tamper-evident records.

MCP server for angr — symbolic execution + CFG + reaching-definitions.

Analyzes GitHub Pull Request diffs for security vulnerabilities and data leaks, using a deterministic filter to skip trivial changes and an AI-powered analysis for logic changes.

Security scanning for AI coding tools (Claude Code, Cursor, Windsurf) including secrets detection, MCP config vulnerabilities, agent instruction checks, threat modeling, prompt injection testing, pre-commit security checks, and dependency vulnerability scanning.

Enables agents to check grant status, discharge pre-approved grants, and read ledger entries over MCP.

Forces every AI Agent code change (Claude Code, Cursor, Trae) to leave a structured problem/reason/approach audit record before commit. 11 MCP tools with full annotations, pre-commit hook blocks unaudited changes. Local stdio, no API key, MIT. M8ven Trust 100/A.

Enables security remediation as one auditable transaction: freezing pre-change exposure, computing blast radius, gating on policy and approval, binding execution receipts, verifying post-state, and rolling back on failure, all sealed in a SHA-256 evidence chain.