AI agent tools for Open Security Controls Assessment Language (OSCAL)
Loading MCP servers…
AI agent tools for Open Security Controls Assessment Language (OSCAL)
Showing 1–48 of 1,709
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
Protect your AI agents and IDEs from malicious open-source packages.
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
Manage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.
Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
AI agent identity, signed credentials, delegated authority and governance evidence.
Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
Search security detections across Sigma, Splunk, Elastic, KQL, Sublime, CQL and Jamf with ATT&CK.
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
Oya, the HIPAA-compliant agentic browser, over MCP: browse, run playbooks, hand a tab to a person.
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
Solve hCaptcha and hCaptcha Enterprise challenges and get back a token, via the NoneCap API.
Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
Lightweight DMARC parser: auto-fetch email reports, visualize compliance in a single all-in-one app
Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
MCP server for querying VirusTotal API with comprehensive security analysis tools.
MCP server for querying VirusTotal API with comprehensive security analysis tools.
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Encrypted secrets for Next.js. AES-256-GCM with no vault needed.
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
Read-only evidence for the tools agents run: MCP server records, coverage and policy.
Security-hardened NotebookLM MCP with post-quantum encryption
MCP server for MikroTik RouterOS and SwOS: typed tools, dry-run, RBAC, audit logs, and rollback.
Safe, self-hosted ZAP operator for guided AI security scans and reports.
Query WHOIS/RDAP information for domains, IP addresses, CIDR prefixes and ASNs. Self-hostable.
Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.
MCP server for the Frida reverse engineering toolkit.
Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.
Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.
MCP server for dnstwist: detect typosquatting, phishing and brand impersonation domains.
Local, evidence-based application security assessment with an evidence ledger and retests.
Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.
MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.
ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.
OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.
Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.
Deterministic doc-drift detection and exact doc navigation as read-only MCP tools.