A KeePass-compatible password and secrets manager for people who work with AI agents.

Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

Official Infisical MCP Server

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.

Linter for AI agent context files and MCP configs: CLAUDE.md, AGENTS.md, .cursorrules, .mcp.json - catches broken paths, wrong commands, leaked secrets

Deploy internal apps built with AI behind your company login, each with its own database, file storage and secrets. Tools to deploy, read live logs, set who can open an app, assign roles and save secrets.

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables Claude to operate a Hetzner estate end to end — Cloud servers, Cloudflare and Hetzner DNS, SSH hosts, and Coolify deployments, plus multi-step recipes — through 53 tools. Writes are dry-run until confirmed, protected servers refuse destructive calls, and every call is audited with secrets masked.

Enables agents to capture real browser interactions over CDP, compile them into deterministic replay scripts with parameterized inputs and stored secrets, and execute those workflows with real input events — no page re-reading or LLM in the replay loop. Also emits portable Agent Skills from recorded workflows.

Enables AI agents to manage the entire Contabo API, including VPS/VDS instances, snapshots, images, object storage, private networks, firewalls, DNS, domains, secrets, users, and tags, through one tool per API operation.

🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.

Enables AI agents and assistants to inspect live system telemetry, check TCP port connectivity, audit environment variables for leaked secrets, analyze and summarize log files, and list Docker containers — all with token-efficient, compressed output.

Exposes an assess_repo tool that scans a repository, local folder, or npm/PyPI package and returns supply-chain risk findings with file, line, and code evidence — install-time scripts, dangerous patterns, secrets, AI-agent manipulation, impersonation and published-artifact mismatches — while never executing the target's code. Findings carry severities from info to critical so results can gate installs and CI jobs.

Lets Claude or any MCP client inspect a TP-Link Deco mesh locally — nodes, backhaul, clients, WAN, firmware — and carefully change settings with graded, read-back-verified writes, secrets redacted by default and an optional read-only mode. No cloud or app involved.

Local MCP server that gives coding agents a verifiable project memory, trims what enters their context, and masks secrets — with honest accounting of what it saves and costs.

Search research and community sources. Queries logged for research; optional purpose. No secrets.

Find and redact leaked secrets, wallet keys and PII before an AI agent sends text.

Search, read, send and run API collections over MCP. Secrets masked; protected envs gated.