A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
Security testing that runs inside the coding agent you already use. Source-available, not open source.
Testing and evaluation platform to chat, inspect, and debug MCP servers, MCP apps, and ChatGPT apps.
Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf.
Ghost Security's collection of AppSec skills for AI coding agents
MCPify is an AI enablement compiler that transforms existing applications into AI-native, agent-operable systems.
Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.
Apple's official Agent Skills exported from Xcode 27 — SwiftUI, UIKit modernization, Swift Testing, C bounds-safety, and security hardening for AI coding agents.
OpenGhost is an Agent Skill for authorized web app penetration testing: Enter lab url paste credential your agent and wait everything does with help of openghost
Remote approvals, policy checks, and execution evidence for unattended AI agents.
A powerful GUI app and Toolkit for Claude Code - Create custom agents, manage interactive Claude Code sessions, run secure background agents, and more.
ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agents
Collection of agent skills to find vulnerabilities inside your web/mobile apps.
Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.
A Claude Code skill that plays bouncer at the door of production: audits AI-built apps (Lovable, Bolt, v0, Cursor) across 5 domains and hands you a scored punch list with copy-paste fixes. MIT.
Safe local execution layer for AI agent tools. Build, validate, and publish MCP tools with a no-pass-no-run workflow — cross-platform desktop app powered by Spring AI.
MCP servers for the UniFi suite of applications, Network, Protect, Access, and Drive
ClawGod is a runtime patch applied to the official Claude Code. It continues to be supported with each version update.
🌍 Terraform Model Context Protocol (MCP) Tool - An experimental CLI tool that enables AI assistants to manage and operate Terraform environments. Supports reading Terraform configurations, analyzing plans, applying configurations, and managing state with Claude Desktop integration. ⚡️
List MCP Server configurations in your system used by AI applications like Cursor, Claude Desktop, VS Code and others
A SKILL.md for ipsw
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)