io.github.4hmetuyar/secret-scanner
io.github.4hmetuyar/secret-scanner
Scans files for leaked secrets and API keys
Discover Model Context Protocol servers from the official registry. Publisher metadata with transparent provenance — not a security certification.
Press / to focus search
17 708 records · Registry listing ≠ independent verification by NexIP
io.github.4hmetuyar/secret-scanner
Scans files for leaked secrets and API keys
io.github.4hmetuyar/rug-pull-detector
Baselines an MCP server's tools and detects tool-definition changes after approval
io.github.4hmetuyar/prompt-leak-scanner
Catches leaked credentials and PII in outbound LLM prompts
io.github.4hmetuyar/prompt-injection-scanner
Scans RAG content/scraped pages for indirect prompt injection
io.github.4hmetuyar/oauth-auditor
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
io.github.4hmetuyar/model-scanner
Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
io.github.4hmetuyar/memory-poisoning-scanner
Scans agent code for untrusted input poisoning persistent cross-session memory
io.github.4hmetuyar/mcp-server-auditor
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
io.github.4hmetuyar/mcp-config-auditor
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
io.github.4hmetuyar/llm-redteam
Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
io.github.4hmetuyar/elicitation-auditor
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
io.github.4hmetuyar/dns-intelligence
DNS record enumeration, misconfiguration and dangling-subdomain detection
io.github.4hmetuyar/dependency-auditor
CVE scanning for npm/pip/cargo dependencies via OSV
io.github.4hmetuyar/db-gateway
KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log
io.github.4hmetuyar/compliance-checker
KVKK/GDPR/CCPA compliance checks for codebases
io.github.4hmetuyar/ai-code-scanner
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
io.github.4hmetuyar/agent-graph-auditor
Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs
io.github.4hmetuyar/a2a-auditor
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
io.github.4R9UN/mcp-kql-server
Execute KQL in AI prompts via NL2KQL with schema discovery and Azure Data Explorer integration
io.github.4DA-Systems/victauri
In-process MCP server for Tauri apps: DOM, IPC with bodies, Rust state, SQLite. Debug builds only.