AI Tools & MCP Servers

Security guides for popular AI tools, MCP servers, and agent frameworks. Each guide covers setup, features, security considerations, and common attack vectors with remediation steps.

MCP Servers

Filesystem MCP Server

Read, write, and manage files through the Model Context Protocol. The most commonly used MCP server for AI coding assistants.

MCP filesystem serverfile access MCPAI file management

PostgreSQL MCP Server

Query and manage PostgreSQL databases through MCP. Enables AI agents to run SQL queries, inspect schemas, and manage database operations.

PostgreSQL MCP serverdatabase MCPSQL AI agent

Browser/Puppeteer MCP Server

Web browsing capabilities for AI agents through MCP. Navigate pages, click elements, fill forms, and extract content.

browser MCP serverPuppeteer MCPweb browsing AI agent

Slack MCP Server Guide

Connect AI agents to Slack workspaces through MCP. Send messages, read channels, manage threads, and automate workflows.

Slack MCP serverAI Slack integrationSlack bot MCP

Memory/Knowledge Graph MCP Server

Persistent memory for AI agents through MCP. Store and retrieve context across conversations using knowledge graphs.

MCP memory serverAI agent memorypersistent memory AI

@playwright/mcp

163,280,104 downloads

Playwright Tools for MCP

@playwright/mcp@playwright/mcp securityMCP Server security

chrome-devtools-mcp

87,712,716 downloads

MCP server for Chrome DevTools

chrome-devtools-mcpchrome-devtools-mcp securityMCP Server security

mysql

49,343,008 downloads

零负担、开箱即用的模型上下文协议（MCP）服务器，用于与 MySQL 交互和自动化操作。无需 Node.js 或 Python 环境。该服务器提供对 MySQL 数据库和表进行 CRUD 操作的工具，以及只读模式以防止意外的写入操作。您还可以通过添加 --with-explain-check 标志让 MCP 服务器在执行查询前使用 EXPLAIN 语句检查查询计划。

mysqlmysql securityMCP Server security

@tmcp/transport-http

44,145,660 downloads

Transport for TMCP using HTTP

@tmcp/transport-http@tmcp/transport-http securityMCP Server security

mongodb-mcp-server

21,155,888 downloads

MongoDB Model Context Protocol Server

mongodb-mcp-servermongodb-mcp-server securityMCP Server security

@expo/mcp-tunnel

17,353,700 downloads

Expo MCP tunnel client

@expo/mcp-tunnel@expo/mcp-tunnel securityMCP Server security

@langchain/mcp-adapters

15,119,260 downloads

LangChain.js adapters for Model Context Protocol (MCP)

@langchain/mcp-adapters@langchain/mcp-adapters securityMCP Server security

mcp-evals

7,966,036 downloads

GitHub Action for evaluating MCP server tool calls using LLM-based scoring

mcp-evalsmcp-evals securityMCP Server security

@hono/mcp

7,957,664 downloads

MCP Middleware for Hono

@hono/mcp@hono/mcp securityMCP Server security

@azure-devops/mcp

7,938,008 downloads

MCP server for interacting with Azure DevOps

@azure-devops/mcp@azure-devops/mcp securityMCP Server security

mcporter

7,559,864 downloads

TypeScript runtime and CLI for connecting to configured Model Context Protocol servers.

mcportermcporter securityMCP Server security

tavily-mcp

5,901,532 downloads

MCP server for advanced web search using Tavily

tavily-mcptavily-mcp securityMCP Server security

add-mcp

5,320,640 downloads

Add MCP servers to your favorite coding agents with a single command.

add-mcpadd-mcp securityMCP Server security

@rekog/mcp-nest

5,254,912 downloads

NestJS module for creating Model Context Protocol (MCP) servers

@rekog/mcp-nest@rekog/mcp-nest securityMCP Server security

firecrawl-mcp

4,461,548 downloads

MCP server for Firecrawl web scraping integration. Supports both cloud and self-hosted instances. Features include web scraping, search, batch processing, structured data extraction, and LLM-powered c

firecrawl-mcpfirecrawl-mcp securityMCP Server security

@zereight/mcp-gitlab

3,570,476 downloads

MCP server for using the GitLab API

@zereight/mcp-gitlab@zereight/mcp-gitlab securityMCP Server security

next-devtools-mcp

3,343,444 downloads

Next.js development tools MCP server with stdio transport

next-devtools-mcpnext-devtools-mcp securityMCP Server security

@vercel/mcp-adapter

3,193,268 downloads

Vercel MCP Adapter for Next.js and other frameworks

@vercel/mcp-adapter@vercel/mcp-adapter securityMCP Server security

@sentry/mcp-server

3,101,956 downloads

Sentry MCP Server

@sentry/mcp-server@sentry/mcp-server securityMCP Server security

Security Guides

Claude Code Security Guide

Security best practices for Claude Code users. Protect your codebase, credentials, and development environment from AI agent attacks.

Claude Code securityAI coding assistant securityClaude Code hardening

OpenAI API Key Security Guide

How to securely manage OpenAI API keys in AI agent deployments. Covers rotation, scoping, environment variable patterns, and leak detection.

OpenAI API key securityAPI key managementOpenAI key rotation

.env File Security for AI Agents

How AI agents handle .env files and why they're the most common source of credential leaks in AI-assisted development.

.env file securityenvironment variable AIcredential leak AI agent

Frameworks

AI Agent Frameworks: Security Comparison

Security comparison of popular AI agent frameworks: LangChain, AutoGPT, CrewAI, LlamaIndex, and more.

AI agent frameworks comparisonLangChain securityAutoGPT security

A2A Protocol Implementation Guide

How to implement the Agent-to-Agent (A2A) protocol. Covers agent cards, task routing, streaming, and security considerations.

A2A protocolagent to agent protocolA2A implementation

LangChain Agent Security Hardening

Security hardening guide for LangChain agents. Covers prompt injection defense, tool sandboxing, output filtering, and monitoring.

LangChain securityLangChain hardeningLangChain agent security

AI Tools

Cursor MCP Server Setup Guide

Complete guide to configuring MCP servers in Cursor IDE. Covers installation, configuration, security, and troubleshooting.

Cursor MCP setupMCP server configurationCursor IDE MCP

GitHub Copilot Workspace Security

Security guide for GitHub Copilot and Copilot Workspace. Covers code suggestion risks, repository context, and enterprise configuration.

GitHub Copilot securityCopilot Workspace securityAI code suggestion security

@inquirer/search

1,128,951,044 downloads

Inquirer search prompt

@inquirer/search@inquirer/search securityAI Tool security

Scan Your Tool Stack

HackMyAgent scans your MCP server configurations, agent permissions, and tool integrations for 204 security checks across 60+ categories.

npx hackmyagent secure