Zfuzz

Created By

Zfuzz-deva day ago

Real security scanners for AI coding agents: SAST (441 rules), secret detection (419+ patterns), dependency CVEs, MCP/skill vetting, MITRE ATT&CK. Real scanners, not the model guessing. Rust, Apache-2.0, free.

# security

# sast

Overview Content Tools Comments

Overview

Zfuzz — the security engineer your AI agent never had

AI coding agents write code fast but know about security rather than scanning for it — so they ship hardcoded keys, vulnerable deps and injectable code. Zfuzz is an MCP server that plugs 10 real security tools into any agent.

Tools: scan_code (SAST, 441 rules, taint analysis, 7 languages) · scan_secrets (419+ patterns + entropy) · scan_dependencies (CVEs via OSV.dev) · scan_mcp_config & scan_skill (vet MCP configs/skills for prompt injection, booby-trapped scripts) · check_mitre · threat_model · search_security_procedures · explain_finding · reconcile_permissions.

Install: claude mcp add zfuzz -- npx -y @zfuzz/mcp — or add { "mcpServers": { "zfuzz": { "command": "npx", "args": ["-y", "@zfuzz/mcp"] } } } to any MCP client.

Real scanners, not the model guessing. Rust · Apache-2.0 · 100% local, no account, no telemetry. Repo: https://github.com/Zfuzz-dev/zfuzz-mcp · Site: https://zfuzz.com

Try in Playground

Server Config

{
  "mcpServers": {
    "zfuzz": {
      "command": "npx",
      "args": [
        "-y",
        "@zfuzz/mcp"
      ]
    }
  }
}

Project Info

Created At

a day ago

Updated At

a day ago

Author Name

Zfuzz-dev

Star

Language

License

Recommend Servers

View All

Serper MCP Server

@garymengcom

A Serper MCP Server

Python

a year ago

Delegum

@meskeIA

Servidor MCP con 42 herramientas de fiscalidad, derecho laboral y finanzas de España: IRPF, autónomos, nóminas, despidos, herencias, pensiones e hipotecas. Cálculos con normativa española. Sin registro, sin API key.

2 days ago

Fetch

@test

Web content fetching and conversion for efficient LLM usage

9 months ago

Mcp Cloudflare Dns

@apexradius

a day ago

Tinkrr Intelligence Api

a day ago

Healthpoint Rs

@edithatogo

Read-only MCP server for licensed Healthpoint HL7 FHIR API access. Users bring their own Healthpoint API key; no Healthpoint data or secrets are bundled.

a day ago

Endoflife.ai — Software Lifecycle Intelligence

@endoflife.ai

End-of-life dates and the 0–100 EOL Risk Score for 459+ software products. Agents can check if a version is end-of-life, score its risk, or audit a whole stack.

a day ago

QuantumScan PQC Scanner

@gaiabio12-design

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools: scan_repository, check_pqc_risk, scan_contract. Used by autonomous AI agents for automated security audits.

20 hours ago

Infotrack (us)

@Jared Axelrod

Connect your AI agent directly to U.S. court e-filing and service of process — initiate filings, serve process, and track order status, fees, and documents, all from your documents. NOTE: auth is OAuth 2.0.

a day ago

Mailtrap Email Sending MCP

@Mailtrap

An MCP server that provides a tool for sending transactional emails via Mailtrap

a year ago

MCP Server for Milvus

@zilliztech

The Milvus MCP server enables AI applications to interact with Milvus vector databases using natural language commands. It allows AI models to perform vector searches, manage collections, and retrieve data without writing custom database queries. This integration facilitates seamless access to vector data, enhancing the capabilities of AI tools like Claude Desktop and Cursor.

a year ago

Tinkrr Intelligence API

@Tinkrr

Real-time Bitcoin network intelligence and YouTube video intelligence for autonomous AI agents. 10 tools covering BTC fees, mempool, address risk, transaction decoding, and YouTube video analysis, transcripts, scripts, trends, and competitive research. Pay-per-call via x402 protocol (USDC on Base mainnet) — no API key, no account, no subscription required.

a day ago

Google Maps

@modelcontextprotocol

Location services, directions, and place details

a year ago

Blender

@ahujasid

BlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.

a year ago

Hostinger

@Hostinger

Official MCP server for the Hostinger API — manage domains, DNS, hosting, VPS, billing, e-commerce, and email marketing directly from your AI agent.

7 hours ago

Brave Search

@modelcontextprotocol

Web and local search using Brave's Search API

a year ago

Gold Price API

MCP server for goldprice.dev, a live source for gold, silver and copper spot + futures prices across 13 currencies.

a day ago

Vynix MCP Server : AI-Powered Website Feedback & Bug Reporting

@UseVynix

AI-powered website feedback, visual bug reporting, and website annotation MCP server. Connect AI coding assistants to Vynix to capture website feedback, create GitHub issues, access project data, and automate developer workflows.

2 days ago

Factori Mcp

6 hours ago

Actionproof

@Burakfenerci5

Gives AI agents verifiable, tamper-evident receipts for their actions — attest_action signs a cryptographic receipt for what the agent did (email sent, payment made, form filed), verify_receipt checks it offline, get_identity returns the agent's did:key. Sign locally, verify anywhere, zero backend.

7 hours ago

Github

@modelcontextprotocol

Repository management, file operations, and GitHub API integration

a year ago

Hokyo 豊胸

7 hours ago

Tela

@zcag

Self-hostable, markdown-native team wiki with a built-in MCP server: agents search, read, and write your wiki pages (ranked Postgres full-text + semantic search, backlink traversal). Plus Atlas, which auto-generates a cited, coverage-checked wiki from your git repos and Jira. Open-source (AGPL-3.0). Connect via `npx tela-mcp` (TELA_BASE_URL + a Personal Access Token) or the remote endpoint https://telawiki.com/api/mcp.

a day ago

Manekami

@manekami

A digital shrine for algorithm anxiety. Tools let an AI draw an omen, light a lamp, release a lantern, or leave a transparent AI note on the wall — on a user's behalf. Ritual and entertainment, not a promise of traffic, followers, or growth.

a day ago

GitLab

@modelcontextprotocol

GitLab API, enabling project management

a year ago

EdgeOne Pages MCP

@TencentEdgeOne

An MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

TypeScript

a year ago

CryptoGate — Crypto Payments for AI Assistants

@CryptoGate

Connect your CryptoGate account to Claude, ChatGPT or any MCP-compatible assistant and manage non-custodial crypto payments by chat — check balances, volume and stats, look up customer payments and invoices, and create crypto payment links on the spot. Read-heavy and safe by design: an AI connection can never move funds, change your receiving wallet, or touch security settings.

2 days ago

Eleion Scanner Mcp

@hernaninverso

Eleion security scanner for AI agents: register/verify your domains, queue security scans (headers, TLS, DNS, ports, CVEs + AI-specific checks) and read the findings.

9 hours ago

Godot Mcp

@IvanMurzak

Open-source MCP server connecting AI agents (Claude, Cursor, GitHub Copilot, Gemini, and more) to the Godot Editor and runtime (Godot 4.x, C#).

8 hours ago

Sequential Thinking

@modelcontextprotocol

An MCP server implementation that provides a tool for dynamic and reflective problem-solving through a structured thinking process.

a year ago