MCP Risk Ledger

This is a hosted Streamable HTTP MCP server. It requires an Authorization bearer token issued after checkout and token claim.

MCP Risk Ledger MCP exposes a fixed, read-only tool surface for MCP risk review. It is designed for agent workflows that need a hosted MCP endpoint with explicit auth, public discovery metadata, and clear data boundaries.

The token is issued by the product checkout and MCP token claim flow. Do not put tokens in issues, pull requests, logs, or screenshots.

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

EU AI Act compliance scanner for Python AI agents — 10 tools for scanning, analysis, and remediation

Compliance-as-Code framework that automatically enforces GDPR, OWASP, NIST, and CIS engineering standards.

Wrap your local MCP servers to check every tool call against policy and live state before it runs - allow, block, or request a refresh, with a reason the agent can act on.

Paid remote MCP for OAuth scope risk inspection, approval routing, consent receipts, server policy validation, and scope audit exports.

Performs a Trivy scan to produce a Software Bill of Materials (SBOM) in CycloneDX format.

Security scanner for MCP servers — detects tool poisoning, prompt injection, and 90+ vulnerability patterns

MCP security gateway with DLP scanning (PII, secrets, API keys), prompt injection protection, Memory Vault, Bug Vault (295k+ patterns), and unified audit logging. Two endpoints: free bug search at /mcp and authenticated hub at /hub_mcp.