Topics / #mcp-security

MCP security projects on GitHub

Security guidance and tooling for MCP servers and clients.

As of , the most-starred MCP security projects on GitHub are mcp-for-beginners (17.5K stars), nono (4.5K stars) and awesome-agent-skills-security (260 stars). GitHub.Locker tracks 5 MCP security repositories with 22.6K stars combined. The fastest-growing on October 16 was nono, with +26 stars in a day.

5Projects
22.6KStars in total
+35Stars in a day
Browse in the catalog →github.com/topics/mcp-security ↗

Hot right now

Most stars gained in a day · Oct 16

+26

nono

nolabs-ai/nono · ★ 4.5K

nono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.

+6

mcp-for-beginners

microsoft/mcp-for-beginners · ★ 17.5K

This is a free, open-source curriculum from Microsoft that teaches the Model Context Protocol (MCP) — the standard that lets AI models connect to tools and services — through hands-on code examples in C#, Java, TypeScript, JavaScript, Rust, and Python.

+2

awesome-agent-skills-security

LLMSecurity/awesome-agent-skills-security · ★ 260

A curated, awesome-list style collection of research papers, standards, frameworks, and benchmarks about securing AI agent tool use and the emerging 'agent skills' ecosystem — covering attacks like prompt injection and tool poisoning as well as defenses like sandboxing and permission control.

+1

ablation

Ablation-Tool/ablation · ★ 214

Ablation is a reverse engineering framework that provides the same core disassembly, decompilation, and binary analysis capabilities as industry tools like Ghidra, IDA Pro, and Binary Ninja, and it's built to be driven by an AI coding agent.

The all-time top

5 projects · by stars

  1. #1 · microsoft/mcp-for-beginners

    mcp-for-beginners

    This is a free, open-source curriculum from Microsoft that teaches the Model Context Protocol (MCP) — the standard that lets AI models connect to tools and services — through hands-on code examples in C#, Java, TypeScript, JavaScript, Rust, and Python.

    17.5K
  2. #2 · nolabs-ai/nono

    nono

    nono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.

    4.5K
  3. #3 · LLMSecurity/awesome-agent-skills-security

    awesome-agent-skills-security

    A curated, awesome-list style collection of research papers, standards, frameworks, and benchmarks about securing AI agent tool use and the emerging 'agent skills' ecosystem — covering attacks like prompt injection and tool poisoning as well as defenses like sandboxing and permission control.

    260
  1. 4

    ablation

    214Ablation-Tool/ablation · Python

    Ablation is a reverse engineering framework that provides the same core disassembly, decompilation, and binary analysis capabilities as industry tools like Ghidra, IDA Pro, and Binary Ninja, and it's built to be driven by an AI coding agent.

  2. 5

    defender

    127StackOneHQ/defender · TypeScript

    It's an open-source shield against indirect prompt injection: Defender inspects tool results (emails, docs, PRs) your AI agent consumes for hidden injection attacks before they reach the LLM, and returns a sanitized copy plus an allow/block verdict.

Often tagged together