Skip to content
Agentmart
Submit a tool

Best MCP servers for MCP and agent security

We found 99 MCP servers for MCP and agent security in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. HOL Guard, Shellward and MCP Observatory lead it. Safeprompt is published by the company that makes it. HOL Guard has the most GitHub stars here (975). 13 of the 15 had activity in the last 30 days. Remote servers need no local install; local ones run on your machine and can reach local files. Each entry lists why it made the list and links to its install page.

Updated Oct 26, 2026 · Built from catalog data; how we rank and grade

Top 15 of 99

  1. 1
    HOL Guard

    hashgraph-online

    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

    • Most GitHub stars here (975)
    • Most weekly downloads here (8.4K)
    • Active in the last 30 days

    ★ 975↓ 8.4K/wkLast active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  2. 2
    Shellward

    jnMetaCode

    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 139Last active Sep 28, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  3. 3
    MCP Observatory

    KryptosAI

    MCP security scanner.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 135↓ 515/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  4. 4
    Agent Security Scanner MCP

    sinewaveai

    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

    • Open source (MIT)

    ★ 124Last active Sep 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  5. 5
    Tool Poisoning Scanner

    GuardBee

    Scans MCP tool definitions for hidden instructions and confused-deputy sinks

    • Active in the last 30 days
    • Open source (MIT)

    ★ 1↓ 1.1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  6. 6
    Prompt Injection Scanner

    GuardBee

    Scans RAG content/scraped pages for indirect prompt injection

    • Active in the last 30 days
    • Open source (MIT)

    ★ 1↓ 1K/wkLast active Oct 22, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  7. 7
    CodeInspectus

    Synvoya

    Local-first MCP security scanner and CLI for AI-generated applications.

    • Active in the last 30 days
    • Open source (Apache-2.0)

    ★ 49Last active Oct 4, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  8. 8
    mcpm

    getmcpm

    MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 3↓ 448/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  9. 9
    Mastyf AI

    mastyf-ai

    Runtime proxy for MCP security, cost governance & audit

    • Active in the last 30 days
    • Open source (AGPL-3.0)

    ★ 21↓ 35/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  10. 10
    AIShield Security Scanner

    lm203688

    Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 2Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  11. 11
    Safeprompt

    safeprompt.devOfficial

    Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.

    • Published by the vendor
    • Active in the last 30 days
    • Open source (MIT)

    ★ 2Last active Oct 6, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  12. 12
    SEO Webmaster MCP

    JvnnDev

    Audit any public URL for SEO.

    • Active in the last 30 days
    • Open source (MIT)

    ★ 2Last active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  13. 13
    Koma Gate MCP

    swnotmetal

    Classifies prompt injection, jailbreaks, and out-of-scope user input before agents act on it.

    • Open source (MIT)

    ★ 13Last active Aug 18, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  14. 14
    MCP Safeguard

    cognivators.com

    MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

    • Active in the last 30 days

    ↓ 183/wkLast active Jun 4, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2

  15. 15
    MCP security checks — WARDEN and HISTOR

    modelmarket.dev

    Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens.

    • Remote server, no local install
    • Active in the last 30 days
    • Open source (MIT)

    Last active Oct 23, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf

Related