Awesome MCPSecurity & Reverse Engineering

splx-ai/agentic-radar

⭐ 1052 Python added to this list on 2025-05-06 repository created 2025-02-12

Agentic Radar is a specialized security scanner tool designed to analyze, visualize, and assess vulnerabilities in agentic workflows that utilize large language models. It is aimed at developers, researchers, and security professionals who want to understand the operational and security aspects of agentic systems. The tool provides a comprehensive security report that includes workflow visualization, tool identification, MCP (Model Context Protocol) server detection, and vulnerability mapping. The workflow visualization feature generates a graph representing the agentic system's workflow, helping users to see the structure and flow of the system. Tool identification lists all external and custom tools used by the system, while MCP server detection identifies all MCP servers employed by the agents within the system. Vulnerability mapping connects the identified tools to known vulnerabilities, offering a detailed security overview. The results are compiled into an easy-to-review and share HTML report. Agentic Radar also maps detected vulnerabilities to well-known security frameworks such as the OWASP Top 10 for Large Language Model Applications and the OWASP Agentic AI Threats and Mitigations. The tool supports multiple agentic frameworks including LangGraph, CrewAI, n8n, OpenAI Agents, and Autogen. It offers advanced features like Agentic Prompt Hardening, which automatically improves system prompts in agentic workflows to follow best prompt engineering practices. This feature requires an OpenAI API key and is currently supported for several frameworks. The tool can be installed via Python's pip package manager and has optional extras for CrewAI and OpenAI Agents to enhance functionality. Agentic Radar is a valuable resource for securing agentic AI workflows by identifying vulnerabilities and improving prompt quality, making it a critical tool in the context of Model Context Protocol (MCP) security and analysis.

https://github.com/splx-ai/agentic-radar

agentic-aiagentic-frameworkagentic-radaragentic-systemsagentic-workflowagentic-workflowsaiai-red-teamingai-securityai-workflowsautogenclicrewaidevsecopsgenerative-ailanggraphlarge-language-modellarge-language-modelsllmllm-securitymcpmcp-servermcp-server-detectionmcp-serversn8nopenai-agentsowaspprompt-enhancementprompt-hardeningpythonred-teamingsecuritysecurity-assessmentsecurity-frameworkssecurity-reportsecurity-scannersecurity-toolstool-identificationvulnerabilitiesvulnerability-mappingworkflow-visualization

Also in Security & Reverse Engineering

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive open-source library featuring 754 structured cybersecurity skills for AI agents, mapped to five industry frameworks to provide expert-level guidance.

NVIDIA/SkillSpector

NVIDIA security scanner for AI agent skills and MCP tooling that detects prompt injection, data exfiltration, MCP tool poisoning and least-privilege problems, and can itself be run as an MCP server inside agent sessions.

mrexodia/ida-pro-mcp

ida-pro-mcp is an MCP server for IDA Pro that enables advanced reverse engineering capabilities through MCP-based interactions and automation.

LaurieWired/GhidraMCP

GhidraMCP is an MCP server that integrates Ghidra's reverse engineering capabilities with MCP clients, enabling automated binary analysis and decompilation through large language models.

invariantlabs-ai/mcp-scan

MCP-Scan is a security tool that statically and dynamically scans and monitors Model Context Protocol (MCP) connections to detect and prevent vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.

zinja-coder/jadx-ai-mcp

JADX-AI-MCP is a JADX plugin integrating Model Context Protocol to enable AI-powered live reverse engineering, vulnerability detection, and code analysis of Android APKs using large language models like Claude.

mariocandela/beelzebub

Beelzebub is a secure low-code honeypot framework leveraging large language models and the Model Context Protocol (MCP) to detect and analyze cyber attacks, including prompt injection attempts against LLM agents.

svnscha/mcp-windbg

mcp-windbg is a Model Context Protocol server that enables AI models to analyze Windows crash dumps using WinDBG through natural language interaction and command execution.