Security MCP server

Securely execute LLM-generated code in isolated containers or local Linux and Windows sandboxes across multiple programming languages.

Enforces policy-as-code governance for AI agents through deterministic scheduling and verifiable audit receipts.

Reverse engineer binaries, applications, and runtime behavior through an AI agent or terminal interface.

Provides LLM agents with controlled, audited SSH access to remote Linux and Windows hosts using policy-based authorization and human-in-the-loop approvals.

Provides encrypted, fully offline, and durable agentic memory for AI agents to store and recall facts, preferences, and decisions locally.

Scans and investigates AI supply chains by mapping agents, MCP servers, packages, and their potential reach to identify vulnerabilities.

Provides an AI-powered OSINT toolkit that lets agents perform passive reconnaissance using tools for DNS, WHOIS, IP, and breach lookups.

Provides an AI-powered OSINT toolkit that lets agents perform passive reconnaissance using tools for DNS, WHOIS, IP, and breach lookups.

Lets an AI client query package versions, plan upgrades, fix vulnerable dependencies, and review NuGet supply-chain security.

Lets AI clients run private web searches, read URLs, and get query suggestions through a SearXNG instance.

Enables AI agents to perform security research, vulnerability analysis, and automated code fixing through a specialized security harness.

Enables AI assistants to perform professional network analysis, security audits, and threat detection using tshark and packet capture files.

Provides a chain of custody for AI agents by issuing signed receipts for tool calls and enforcing access policies via an MCP gateway.

Validates architectural decision records against your actual code, detects drift, masks sensitive content, and tracks decisions.

Enables AI clients to securely access metadata management capabilities including search, lineage, data quality, and governance through OAuth 2.0.

Lets AI clients decompile binaries, rename and type functions, run P-code emulation, and debug through Ghidra's reverse engineering engine.

Hardens binaries, Electron apps, JS bundles, Python, and WebAssembly artifacts against AI reverse-engineering agents.

Analyze customer feedback by stripping PII before processing to find stable themes and provide cited evidence for AI agents.

Puts authorization in front of AI agent HTTP actions, forwarding only requests approved by the Decionis authority and holding or blocking the rest.

Allows AI clients to search a community library of threat hunting hypotheses by keyword, threat actor, or available log sources.