Data / Repositories / MCP security
MCP security repositories on GitHub: 8 ranked by stars
8 public repositories tagged MCP security are on GitHub, with 21,487 stars between them; 8 had a push in the last 30 days. Most are written in Python (3), Go (2), Jupyter Notebook (1). The most starred: microsoft/mcp-for-beginners (17,445), stacklok/toolhive (2,283), hashgraph-online/hol-guard (892).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| microsoft/mcp-for-beginners | This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and… | Jupyter Notebook | 17,445 | 5,648 | MIT | Oct 13 | Oct 14 |
| stacklok/toolhive | ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers. | Go | 2,283 | 319 | Apache-2.0 | Oct 14 | Oct 14 |
| hashgraph-online/hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | Python | 892 | 158 | Apache-2.0 | Oct 14 | Oct 14 |
| RiccardoBiosas/awesome-MLSecOps | A curated list of MLSecOps tools and resources for securing machine learning and AI systems - adversarial ML defense, LLM security, AI red teaming, model scanning, supply-chain… | Astro | 477 | 121 | MIT | Oct 12 | Oct 14 |
| graygnatconsole/mcp-audit-tool | Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure… | Python | 306 | 5 | MIT | Sep 26 | Oct 15 |
| AuthPlane/authserver | OAuth 2.1 Authorization Server for the Model Context Protocol (MCP) | Go | 81 | 6 | AGPL-3.0 | Oct 14 | Oct 14 |
| vasikmansuri/agentconfig-doctor | MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code… | TypeScript | 3 | 0 | MIT | Oct 14 | Oct 14 |
| tomelias10/mcp-drift-check | Static MCP package-reference mutability checker: Python CLI and GitHub Action. No discovered server execution. Broader config/baseline tools: Orynval Labs. | Python | 0 | 5 | MIT | Oct 11 | Oct 14 |
By language
- Python 3
Related topics
- MCP 7
- Model Context Protocol 6
- AI security 6
- Security 5
- MCP server 4
- Cursor 4
- Supply chain security 4
- Agent security 3
- AI agents 3
- Claude Code 3
- Devsecops 3
- Prompt injection 3
Read from GitHub by SpecStream between October 14, 2026 and October 15, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.