Skip to main content
Glama
sudo-ai-git

mcp-security-suite

by sudo-ai-git
OverviewSchemaRelated ServersScoreDiscussions
Python
Local

mcp-security-suite

One enterprise MCP security brand over the previously separate sudo-ai-git deterministic no-LLM servers. For the "Agent Identity / Enterprise-Ready Security" gap in MCP platforms (e.g. kubernetes-sigs/mcp-lifecycle-operator).

What it unifies (12 tools, 4 domains)

Domain

Prefix

Server

Tools

What it does

verify-claim

vc_

mcp-verify-claim

tier_claim, check_claim, report_templates, tier_definitions

Evidence-gated tiered claim reporting (FACT/INFERENCE/SPECULATION) — never fabricates

skill-sec

sec_

mcp-skill-sec

audit_text, audit_skill_file, audit_directory, rule_list

Audits agent skills/prompts vs 8 supply-chain attack patterns

token-saver

tok_

mcp-token-saver

profile_tokens, duplicate_payload_report

Deterministic token profiler (per-role spend, dedupe, savings)

auth-audit

auth_

mcp-auth-audit

audit_server_auth, audit_token_mode

MCP server auth-mode audit

mcp-schema-lint (registry-manifest + tools/list validator) ships as companion CLI.

Related MCP server: mcp-security-toolkit

Run

python -m mcp_security_suite        # stdio MCP server, all 12 tools

Validation (P2 gate)

validate_suite.py imports each component server and asserts the consolidated server.json lists exactly the real, loadable 12 tools — no missing, no phantoms. RESULT: PASS. End-to-end tool execution proven (e.g. sec_audit_text returns verdict: FLAG on a curl-pipe-sh payload).

Honest scope

This is a brand/registry unification — the tool implementations live (and are tested) in their component repos; this package re-exports them under one entrypoint + registry manifest. It does NOT fork implementation code. All backends are deterministic, no-LLM, no-network.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

No tool schema history has been recorded yet.

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Related MCP Connectors

Related MCP Servers

  • mcp-audit-server

    joepangallo
    A
    license
    Not graded
    quality
    A
    maintenance
    This MCP server enables security auditing for MCP configurations and AI agents, including prompt injection testing, data flow tracing, and security policy generation.
    485
    MIT

  • mcp-audit

    saagpatel
    A
    license
    Not graded
    quality
    A
    maintenance
    Audits MCP server configurations for security risks including capability inventory, SSRF, prompt injection, and drift detection. Works in read-only mode and can also be used as an MCP server to let AI agents audit their own attack surface.
    4
    MIT

  • tar-engine

    qingxuantang
    A
    license
    Not graded
    quality
    A
    maintenance
    Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.
    2
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/sudo-ai-git/mcp-security-suite'

If you have feedback or need assistance with the MCP directory API, please join our Discord server