diff --git a/README.md b/README.md index 12d01198d..68f2444c7 100644 --- a/README.md +++ b/README.md @@ -3472,6 +3472,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [Synvoya/codeinspectus](https://github.com/Synvoya/codeinspectus) [![codeinspectus MCP server](https://glama.ai/mcp/servers/Synvoya/codeinspectus/badges/score.svg)](https://glama.ai/mcp/servers/Synvoya/codeinspectus) πŸ“‡ 🏠 🍎 - Local-first, zero-egress security scanner for AI-generated / "vibe-coded" JS/TS. Bundles Opengrep, Gitleaks & Trivy behind one CWE-keyed schema and adds AI-code-specific checks (client-side secret exposure, Supabase RLS, prompt-injection & LLM-output XSS sinks). No account, no telemetry. - [velvetway/minreestr-mcp](https://github.com/velvetway/minreestr-mcp) [![velvetway/minreestr-mcp MCP server](https://glama.ai/mcp/servers/velvetway/minreestr-mcp/badges/score.svg)](https://glama.ai/mcp/servers/velvetway/minreestr-mcp) 🐍 ☁️ 🍎 πŸͺŸ 🐧 - Search ΠΊΠ°Ρ‚Π°Π»ΠΎΠ³ΠΏΠΎ.Ρ€Ρ„ (Russian software registry, 26k+ products) for import-substitution and ЀБВЭК/Π€Π‘Π‘-certified software discovery. Three tools: full-text search, manufacturer listing, featured products. Ideal for Russian security/compliance teams (152-Π€Π—, 187-Π€Π—) using Claude. - [vespo92/OPNSenseMCP](https://github.com/vespo92/OPNSenseMCP) πŸ“‡ 🏠 - MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language +- [vikasny30/aletheia-mcp](https://github.com/vikasny30/aletheia-mcp) πŸ“‡ 🏠 🍎 πŸͺŸ 🐧 - Deterministic (no-LLM) pre-execution filter for agent tool calls. Pattern-matches known scope-creep (out-of-mandate writes, credential-file reads, SSRF, destructive shell/SQL) and prompt-injection vectors and blocks them in ~25 Β΅s. Runs as standalone guard tools or a fail-closed transparent proxy in front of any downstream MCP server. Signatures from the Aletheia research paper; a first-line pre-filter, not a sandbox. Registry `io.github.vikasny30/aletheia-mcp`. `npx -y aletheia-mcp` - [wei9072/aegis](https://github.com/wei9072/aegis) [![wei9072/aegis MCP server](https://glama.ai/mcp/servers/wei9072/aegis/badges/score.svg)](https://glama.ai/mcp/servers/wei9072/aegis) πŸ¦€ 🏠 🍎 πŸͺŸ 🐧 - AI-agent admission-control MCP server: validates file edits against Ring 0 syntax + Ring 0.5 structural-cost regression + workspace boundary (path / glob / shell-redirect / symlink). Negative-space framing β€” emits BLOCK / WARN / PASS verdicts, never coaches the agent. - [zboralski/ida-headless-mcp](https://github.com/zboralski/ida-headless-mcp) 🏎️ 🐍 🏠 🍎 πŸͺŸ 🐧 - Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering. - [zekebuilds-lab/captcha-mcp](https://github.com/zekebuilds-lab/captcha-mcp) [![zekebuilds-lab/captcha-mcp MCP server](https://glama.ai/mcp/servers/zekebuilds-lab/captcha-mcp/badges/score.svg)](https://glama.ai/mcp/servers/zekebuilds-lab/captcha-mcp) πŸ“‡ 🏠 🍎 πŸͺŸ 🐧 - L402 Lightning paywall + Hashcash proof-of-work gate for MCP tool calls. Free tier solves a PoW challenge; paid tier pays a Lightning invoice via self-hosted LNBits. No accounts, no API keys, no third-party SaaS. Drop-in middleware for any MCP server. `npx @powforge/captcha-mcp`.