Prompt injection detection, secret scanning, permission auditing
Prompt injection detection, secret scanning, permission auditing
Security scanning, prompt injection detection, secret leak detection, and agent permission auditing for AI agent workflows. Built on the Model Context Protocol (MCP).
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| scan_mcp_config | Scan MCP server configurations for security issues (dangerous commands, exposed secrets, network exposure, container misconfigs) |
| detect_prompt_injection | Analyze text for prompt injection attempts across 7 attack categories with context-aware risk scoring |
| validate_scope_contract | Check if agent actions comply with scope contracts (tool allowlists, file access, boundary constraints) |
| scan_secrets | Detect leaked API keys, tokens, private keys, database URIs, and credentials in text or code |
| audit_agent_permissions | Audit agent configurations against role-based expectations and flag principle of least privilege violations |
| generate_security_report | Generate comprehensive security assessment reports with prioritized remediation plans |
| detect_tool_poisoning | Analyze MCP tool definitions for hidden instructions that could manipulate agent behavior (OWASP Agentic Top 10) |
{
"mcpServers": {
"agent-security": {
"command": "node",
"args": ["/path/to/agent-security-mcp/src/index.js"]
}
}
}Configuration as documented by the project. Restart the client after saving.
Inspect PostgreSQL schemas and run read-only queries with the archived MCP reference server. Review its maintenance status before choosing it.
Connect the Notion MCP server to search workspace content and work with pages and databases through Notion’s hosted OAuth service.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.