AI agent tools for MCP security
Short answer: Our top pick for MCP security: nono, with the highest AgentPick Score (78/100) among tools tagged "mcp-security". Runners-up: toolhive (76) and hol-guard (71). Compare what each does, its license and how recently it was updated below.
| # | Tool | What it does | Score | Stars | License | Updated |
|---|---|---|---|---|---|---|
| #1 | nono | agent runtime security - zero trust, zero setup, zero latency agent sandbox | 78/100 | ★ 4.5k | Apache-2.0 | 14 Oct 2026 |
| #2 | toolhive | ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers. | 76/100 | ★ 2.3k | Apache-2.0 | 14 Oct 2026 |
| #3 | hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runti… | 71/100 | ★ 896 | Apache-2.0 | 14 Oct 2026 |
| #4 | vestige | Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorde… | 61/100 | ★ 650 | AGPL-3.0 | 11 Oct 2026 |
| #5 | Reversecore_MCP | A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and… | 56/100 | ★ 210 | MIT | 13 Oct 2026 |
| #6 | lunar | lunar.dev: Agent native MCP Gateway for governance and security | 43/100 | ★ 504 | MIT | 14 Oct 2026 |
| #7 | zerobox | Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls. | 39/100 | ★ 721 | Apache-2.0 | 17 May 2026 |
| #8 | mcp-audit-tool | 🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command inje… | 29/100 | ★ 295 | MIT | 26 Sept 2026 |
| #9 | agentseal | Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resist… | 27/100 | ★ 377 | See repo | 11 Jun 2026 |
| #10 | mcp-gateway | A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents. | 24/100 | ★ 396 | MIT | 22 Jan 2026 |
| #11 | MCP-Defender | Desktop app that automatically scans and blocks malicious MCP traffic in AI apps like Cursor, Claude, VS Code and Windsurf. | 21/100 | ★ 255 | AGPL-3.0 | 5 Jun 2026 |
Source: each project's public GitHub repository (description, stars, license, last push). Listed tools aren't tested or ranked by AgentPick.
How to choose
- Grant the narrowest permissions the server allows.
- Check whether it runs locally or calls a remote service.
- Prefer servers listed in the official MCP registry.
Get the best new agent tools every week. Free, with a verdict on each. Get the weekly digest
Related
AI agent tools for local-first setups →
MCP servers
AI agent tools for knowledge graphs and bases →
MCP servers
AI agent tools for RAG (retrieval-augmented generation) →
MCP servers
AI agent tools for MCP client →
MCP servers
AI agent tools for cybersecurity →
MCP servers
AI agent tools for DevOps →
MCP servers
AgentPick Weekly
The week's new agent tools with a verdict on each, every week. Free. We'll email you a link to confirm, and you can unsubscribe any time. See our Privacy Policy.