mcp-security-testing

MCTS (Model Context Threat Scanner) is a local-first security scanner for MCP servers -- static and live tool discovery, multiple analyzers, auditable risk scores, and JSON, SARIF, and HTML output. For authors and platform teams; CI-ready, no cloud API.

a Testing framework for MCP servers

MCP-Bastion: The Zero-Infrastructure Runtime Middleware ,Enterprise-Grade Security Middleware for the Model Context Protocol (MCP)

Hybrid AI Security Gateway — rule-based + LLM-assisted (Nemotron + Llama) prompt injection detection + MCP security (rules+policy+AI Assisted)

A web-based tool for inspecting MCP servers. Connect to any MCP server, browse its Tools, Resources, and Prompts, measure fetch latency, estimate token usage, score the quality of tool definitions, and compare two servers side by side, and scan for tool poisoning and rug pulls.

Security testing tool for MCP honeypot/decoy servers - fingerprinting, alert injection, evasion