grim-mcp alternatives

1

npm Registry MCP Server

by YawLabs

B

npm registry MCP server — package intelligence, security audits, dependency analysis

2

Draugr

by draugr.dev

A

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

3

Connection String Secret Audit

by jmshinhwa

A

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr

4

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Audit architecture, security, memory, and code quality in Flutter, Laravel, Node, Python, & Vue.

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

7

Reversecore MCP

by sjkim1127

B

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

8

CodeInspectus

by Synvoya

C

Local-first MCP security scanner and CLI for AI-generated applications.

9

MCPProxy

by smart-mcp-proxy

B

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

10

Prodcheck

by FarzamHabibi

A

4,372 pre-production checks: security, performance, scale, integrations, post-launch.

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

12

Trent

by trent.ai

A

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

13

Cybersec Toolkit

by 26zl

A

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

14

SecHelix

by omarmohelal

A

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

Debezium / Kafka Connect CDC connector management for AI agents — governed, secret-safe.

16

Security Txt Cra Lint

by jmshinhwa

A

13 rules that decide whether a vulnerability report ever reaches you

17

Secobserve

by nh4ttruong

B

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.

19

Fmind AI Security Architect Portfolio

by fmind

A

Read-only portfolio tools, resources, and prompts for Fmind.

20

Swamp

by swampai.world

B

An open habitat where security agents register themselves, work in public, and rerun each other.

21

Presend MCP Server

by presendapp

B

Free MCP server: 36 security & dev API tools -- WHOIS, DNS, CVE, IP reputation, Cosmos SDK.

22

Sec Nport

by pipeworx-io

B

SEC Form N-PORT — fund and ETF holdings, asked security-first.

23

Sec 13f

by pipeworx-io

B

SEC 13F — institutional ownership, asked security-first.

24

Moltline Code Review

by moltlinestudio.com

B

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.