9 个#devsecops MCP 服务器和客户端

Agentic Radar

splx-ai

A security scanner for your LLM agentic workflows

JFrog MCP Server (🧪 Experimental)

jfrog

Model Context Protocol (MCP) Server for the JFrog Platform API, enabling repository management, build tracking, release lifecycle management, and more.

ZeroPath MCP Server

ZeroPathAI

Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

Aribot

aristiun

Threat modeling, code, cloud and pipeline scanning, shadow-AI discovery, compliance checks and fixes, from your assistant.

Mcp Semgrep Scanner

archimedes-market

Curated by Archimedes Market. Static security analysis exposed as MCP tools. OWASP top 10, secrets detection, custom rule packs. Baseline scanning focuses on newly-introduced findings. Built for production-grade security review. → archimedes.market/assets/21c4a8ab-80dc-4a69-8444-

Coding agents accelerate software delivery by autonomously suggesting or adding code and dependencies. However, without the right safeguards, they can introduce significant supply chain risks by pulling in third-party packages that:

Middlebrick

middleBrick

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

Zfuzz

Zfuzz-dev

Real security scanners for AI coding agents: SAST (441 rules), secret detection (419+ patterns), dependency CVEs, MCP/skill vetting, MITRE ATT&CK. Real scanners,

🔐 get-mcp-keys

StuMason

A lightweight utility that securely loads API keys for Cursor MCP servers from your home directory, preventing accidental exposure of secrets in repositories. Keep your credentials safe while maintaining seamless integration with AI coding assistants.