MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers, platform teams, and technical leaders a clear, actionable baseline for securing MCP deployments , whether you're shipping an internal tool or a customer-facing AI agent.
☆22Mar 9, 2026Updated 6 months ago
Alternatives and similar repositories for mcp-security-checklist
Users that are interested in mcp-security-checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Jailbreak detection bypasses based on Frida.☆22Oct 6, 2025Updated 11 months ago
- A PowerShell script designed to detect misconfigured Azure Storage Accounts that could potentially be exploited for privilege escalation …☆13Apr 25, 2024Updated 2 years ago
- ☆18Jan 3, 2020Updated 6 years ago
- ☆22Updated this week
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆83Sep 15, 2026Updated 2 weeks ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- CVE-2023-34362: MOVEit Transfer Unauthenticated RCE☆65Mar 24, 2024Updated 2 years ago
- ☆10Aug 9, 2024Updated 2 years ago
- Apple Silicon device emulator. Basic Android support☆24Jul 1, 2026Updated 3 months ago
- Reverse engineering the TI AM3358 boot ROM☆67Aug 25, 2024Updated 2 years ago
- Browser based Privacy Aware SBoM Exploration☆37Sep 7, 2026Updated 3 weeks ago
- ☆19Dec 25, 2025Updated 9 months ago
- CTF Writeups☆29Aug 15, 2024Updated 2 years ago
- Attempts to glitch the code from a 68HC705C8☆17Jul 19, 2022Updated 4 years ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆62Sep 11, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆38Updated this week
- Tricard - Malware Sandbox Fingerprinting☆24Dec 11, 2023Updated 2 years ago
- Reverse engineer Unity games with radare2☆36Sep 7, 2026Updated 3 weeks ago
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- LdapWordlistHarvester but then with neo4j☆17Jun 3, 2025Updated last year
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- A Static and Extensible Black-box Application Security Testing tool for iOS and Android applications☆39Updated this week
- Automation for NPM reverse proxy manager☆13Feb 17, 2025Updated last year
- PoC☆12Apr 7, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool to hack Graphql☆16Oct 17, 2023Updated 2 years ago
- ☆12Jun 4, 2025Updated last year
- Recon scripts for Red Team and Web blackbox auditing☆25Mar 3, 2026Updated 6 months ago
- Pwdlyser is an all encompassing security auditing tool. This repo serves as the open-source base for the new version of Pwdlyser (previou…☆27Sep 3, 2024Updated 2 years ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago
- Experimental AcoustID backend in Go☆14Aug 3, 2026Updated 2 months ago
- Use Claude API to prompt remote agents on a cron interval but use local MCPs to handle tool calls for context☆17Jul 2, 2025Updated last year
- ☆11Jul 28, 2020Updated 6 years ago
- Convert kirbi ticket from mimikatz into hashcat format to crack it☆13Mar 5, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Script to read input from stdin and encode it☆18Aug 23, 2023Updated 3 years ago
- A Rust compiler plugin to encrypt string literal at compile time.☆23Jun 10, 2025Updated last year
- BOF to terminate a process via PID as argument☆27Sep 7, 2025Updated last year
- ☆101Feb 1, 2024Updated 2 years ago
- PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is …☆231Dec 1, 2023Updated 2 years ago
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆175Jun 19, 2026Updated 3 months ago
- Google Maps API checker☆84Feb 26, 2026Updated 7 months ago