UAP-protocol
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
api-securityauthentication-authorizationcloud-security+8
1
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
pigeonlabshq/pigeonEnforce least-privilege delegation for AI agents with signed, scoped credentials. Grant sub-agents narrow capabilities and resources, verify actions…
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
les-k/wp-secure-mcpA WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by…
foxboron/ssh-tpm-agentSSH agent that creates and manages TPM-sealed keys for hardware-bound authentication, supporting key generation, import, wrapping, PIN protection,…
tuskira/ai-agent-gatewayOpen-source gateway that secures, governs, and observes AI agents' MCP tool calls and LLM traffic, with API-key authentication and an admin console…
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
accuknox/agentzZero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.
owasp/trisuella-aidlca-frameworkPolicy-governed LLMSecOps framework providing AST-based SAST, secret scanning, supply-chain and multi-cloud CSPM checks, AI-BoM generation, and CI/CD…
kontext-security/kontext-cliRuntime security for AI agents: discover agents, map their permissions, and enforce what they can do.
iknowjason/purplecloudA little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…
tech4242/aquaman🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you…
commonguy25/authproof-sdkCryptographically signed delegation receipts for AI agents. Define exactly what an AI can and can't do — signed, verifiable, tamper-proof.
scopeblind/scopeblind-gatewayFail-closed Cedar policy gate plus signed receipts for AI agent tool calls. npx protect-mcp
renich/genclaveCentralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH…
nearai/ironclawSecure, private AI agent operating system with local encrypted storage, OAuth/SSO authentication, policy-based access control, and extensible…
makerchecker/makercheckerOpen-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of…
anee769/conduitOn-prem API gateway for AI coding agents with per-engineer cost attribution, hard budgets, egress governance (secrets/entity scanning), context-rot…