A curated list of security tools, frameworks, scanners, gateways, and resources for the Model Context Protocol (MCP).
MCP is an open protocol that standardizes how AI agents connect to external tools and data sources. As adoption grows, so does the attack surface. This list tracks the ecosystem of projects working to make MCP safer.
- Scanners and Auditors
- Gateways and Proxies
- Firewalls and Guardrails
- Observability and Tracing
- Redaction and Data Protection
- Access Control and Authorization
- Authentication
- Offensive Security and Testing
- Guides and Best Practices
- Research and Standards
Tools that inspect MCP servers for vulnerabilities, misconfigurations, and malicious behavior.
- invariantlabs-ai/mcp-scan - Detects prompt injection, tool poisoning, and other security issues in MCP servers. By Invariant Labs.
- snyk/agent-scan - Security scanner for AI agents, MCP servers, and agent skills. By Snyk.
- cisco-ai-defense/mcp-scanner - Scans MCP servers for potential threats and security findings. By Cisco AI Defense.
- tayler-id/mcphound - Comprehensive MCP security scanner covering attack paths, tool poisoning, typosquats, CVEs, trust scores, and rug-pull detection.
- tamish560/mcprobe - Security scanner for MCP servers. Detects prompt injection in tool descriptions, tool shadowing, and drift (rug-pull). Single binary, zero dependencies, Go stdlib only. Outputs text, JSON, and SARIF.
- ModelContextProtocol-Security/mcpserver-audit - Audits MCP servers for security problems before use. Part of the Cloud Security Alliance MCP Security initiative.
- slowmist/MCP-Security-Checklist - Comprehensive security checklist for MCP-based AI tools. By SlowMist.
- MCPGuard - Security scanner for MCP servers. Commercial with free tier.
Infrastructure that sits between MCP clients and servers to enforce policy, log traffic, and control access.
- valtors/observer - Transparent MCP proxy for agent observability. SQLite trace storage, metadata-only by default, redaction patterns, session isolation. By Valtors.
- reaatech/mcp-gateway - Production MCP gateway with OAuth/OIDC, API key auth, per-tenant rate limiting, schema enforcement, tool allowlists, audit trail.
- lasso-security/mcp-gateway - Plugin-based gateway that orchestrates MCPs with enterprise-grade security. By Lasso Security.
- enkryptai/secure-mcp-gateway - Admin-level gateway with guardrails at each MCP server to prevent security issues.
- qm-labs/agent-mcp-gateway - Per-subagent MCP access controls. Loads only 3 tools instead of all definitions. Prevents context window bloat.
- sparfenyuk/mcp-proxy - Bridge between Streamable HTTP and stdio MCP transports.
- smart-mcp-proxy/mcpproxy-go - Go-based MCP proxy with security features.
Runtime enforcement tools that block malicious requests, detect threats, and apply policies.
- ressl/mcp-firewall - Open-source security gateway for AI agents. Policy enforcement, threat detection, compliance-ready audit logging.
- General-Analysis/mcp-guard - Secures MCP clients from prompt injection attacks and other threats.
- GenTelLab/MCP-Guard - Multi-stage defense-in-depth framework for securing MCP in agentic AI. Research-backed.
- promptfoo - Red-team testing framework with MCP proxy for enterprise security testing.
Tools that log, trace, and monitor MCP interactions for debugging, auditing, and incident response.
- traceloop/opentelemetry-mcp-server - Unified MCP server for querying OpenTelemetry traces across Jaeger, Tempo, Traceloop.
- xprilion/mcp-telemetry - Adds tracing to all MCP client conversations for debugging and reporting.
- theharithsa/opentelemetry-instrumentation-mcp - Automatic OpenTelemetry instrumentation for the MCP TypeScript SDK.
- ContexaAI/mcp-trace-js - Tracing middleware for MCP servers in TypeScript. Logs to file, DB, or cloud with OTLP, Supabase, PostgreSQL adapters.
- Datadog LLM Observability - End-to-end visibility into MCP clients with Datadog.
Tools that prevent sensitive data from reaching LLMs through MCP tool calls.
- r3352/redact-mcp - MCP server that auto-obfuscates sensitive data. Regex and AI-powered NER detection.
- Strac MCP DLP - Data loss prevention for MCP deployments. Prevents sensitive data exfiltration through MCP tools.
Tools for restricting which tools agents can call and managing permissions.
- Microsoft Agent Governance Toolkit - Specification for MCP security gateways and agent governance in enterprise environments.
- clerk/mcp-tools - Tools for building secure MCP integrations across client and server side. By Clerk.
- Sandbox0 MCP Access Control - Restrict which tools AI agents can call through protocol-level controls.
Tools and libraries for authenticating MCP clients and servers.
- mcpauth/mcpauth - Authentication for MCP servers. OAuth 2.1 implementation.
- MCP Auth specification - Official MCP authorization documentation.
Tools for penetration testing MCP deployments and security research.
- cyproxio/mcp-for-security - MCP servers for security tools: SQLMap, FFUF, NMAP, Masscan. Integrate pentesting into AI workflows.
- FuzzingLabs/mcp-security-hub - Offensive security MCP servers: Nmap, Ghidra, Nuclei, SQLMap, Hashcat.
- securityfortech/secops-mcp - All-in-one security testing toolbox through a single MCP interface. Pentesting, bug bounty, threat hunting.
- Puliczek/awesome-mcp-security - List of MCP security exploits, POCs, writeups, and bug bounty resources.
- MCP Security Best Practices (Official) - Official security best practices from the MCP specification team.
- OWASP MCP Security Cheat Sheet - OWASP cheat sheet for securing MCP implementations.
- OWASP MCP Top 10 - OWASP's top 10 security risks for Model Context Protocol.
- OWASP Secure MCP Server Development Guide - Practical guide for developers building MCP servers securely.
- Microsoft MCP for Beginners - Security - Microsoft's security module for MCP beginners.
- Red Hat: MCP Security Risks and Controls - Enterprise perspective on MCP security risks.
- Microsoft: Protecting Against Indirect Prompt Injection in MCP - How to defend against indirect prompt injection attacks via MCP.
- NSA MCP Security Guide (PDF) - NSA Cybersecurity Information sheet on MCP security.
- Cloud Security Alliance: Agentic MCP Security Best Practices - CSA best practices for agentic MCP security.
- MCP-Guard: Defense-in-Depth Framework (Paper) - Academic paper on multi-stage defense framework for MCP.
- MindGuard: Tool Poisoning Detection (Paper) - Research on tracking, detecting, and attributing MCP tool poisoning attacks.
- SecAppDev 2026: MCP Security - Conference session on MCP security fundamentals.
Contributions are welcome. Please read the contributing guidelines before submitting a pull request.