Browse MCP servers

io.github.guardbee/security-suite

Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS

io.github.guardbee/reverse-shield

Audits shipped apps for how easily they can be reverse engineered

io.github.guardbee/security-proxy

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

io.github.guardbee/security-engineer

Fix GuardBee AI Security Engineer findings in your repo with your coding agent, then verify

io.github.guardbee/dependency-auditor

CVE scanning for npm/pip/cargo dependencies via OSV

io.github.guardbee/owasp-scan

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

io.github.guardbee/prompt-injection-scanner

Scans RAG content/scraped pages for indirect prompt injection

io.github.guardbee/mcp-config-auditor

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

io.github.guardbee/tool-poisoning-scanner

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

io.github.guardbee/rug-pull-detector

Baselines an MCP server's tools and detects tool-definition changes after approval

io.github.guardbee/model-scanner

Scans ML model files (PyTorch, joblib, NumPy, GGUF, TensorFlow…) and HF repos for supply-chain risks

io.github.guardbee/threat-rules

GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection

io.github.guardbee/slopsquat-scanner

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

io.github.guardbee/prompt-leak-scanner

Catches leaked credentials and PII in outbound LLM prompts

io.github.guardbee/context-oversharing-auditor

OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks

io.github.guardbee/toxic-flow-auditor

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

io.github.guardbee/vector-store-scanner

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

io.github.guardbee/unbounded-consumption-auditor

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

io.github.guardbee/oauth-auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

io.github.guardbee/ssl-inspector

TLS certificate/cipher/protocol inspection

io.github.guardbee/vulnerability-scanner

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

io.github.guardbee/db-gateway

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

io.github.guardbee/document-scanner

Finds PII and credentials in PDFs, screenshots and scanned documents

io.github.guardbee/memory-poisoning-scanner

Scans agent code for untrusted input poisoning persistent cross-session memory

io.github.guardbee/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

io.github.guardbee/secret-scanner

Scans files for leaked secrets and API keys

io.github.guardbee/audit-gap-auditor

OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit

io.github.guardbee/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

io.github.guardbee/dns-intelligence

DNS record enumeration, misconfiguration and dangling-subdomain detection

io.github.guardbee/llm-redteam

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

io.github.guardbee/elicitation-auditor

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

io.github.guardbee/ai-code-scanner

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

io.github.guardbee/compliance-checker

KVKK/GDPR/CCPA compliance checks for codebases

io.github.guardbee/agent-graph-auditor

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs