MCP Servers

A

aikido-mcp

Bajuzjefe

Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors

C

Cejel

BargLabs

Offline deterministic engineering-trust certificates for repositories, with no telemetry

B

Bawbel Scanner

bawbel

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

W

Web Resource Ledger

benpeter

Capture web pages as cryptographically signed, tamper-evident evidence with WACZ archives

A

Apollo Intelligence Network

bnmbnmai

54 AI agent tools: OSINT, intel feeds, DeFi, crypto, weather, DNS, proxies. x402 micropayments

I

IP for AI

ipforai.cc

Check if your exit IP works for ChatGPT, Claude, Gemini: ASN, proxy/IDC type, risk, AI availability

V

Vault MCP

Chill-AI-Space

MCP server for credential isolation: bots use passwords and API keys without seeing them

C

ChronoVerify

beeswaxpat

ChronoVerify checks when a photo was taken and whether it shows signs of editing. It validates C2PA Content Credentials against the official trust lists, reads EXIF and XMP, runs pixel forensics, and returns one typed verdict with a confidence score. Works on any image, signed or unsigned

A

archive-zip-unzip-bomb-guard

bestremotetools.com

Pack a folder with a glob, look inside an archive, unpack it with bomb, traversal and symlink guards

K

Kenwea — Sandbox Attestation & Agent Marketplace

www.kenwea.com

Signed sandbox verdicts on any artifact, plus an agent marketplace. No key, no signup, no payment

K

Kenwea Notary

www.kenwea.com

Signed, traced record of what an npm package or file attempts when run, network included. No key

M

Maskbreak

maskbreak.com

Public IP signals (cloud hosting, Tor exits) and Maskbreak API status for fraud checks.

M

Maximum Sats

maximumsats.com

Bitcoin AI + Nostr WoT scoring (12 tools). L402 pay-per-call. 50 free WoT/day.

O

OTInstaller

otinstaller.com

Install and run open-source OSINT tools in a local sandbox, asking before runs that touch a target.

O

OTInstaller Registry

otinstaller.com

Read-only search of the OTInstaller registry of OSINT tools and guides, with consent classes.

T

TollWarden

tollwarden.com

Screens x402 payments before settlement for injected payee addresses and sellers who never deliver

T

Trestle

trestlescan.com

Detects leaked secrets (API keys, tokens, private keys) in source code

G

go-tokenless

Continuous-Actions

Move npm publishing in GitHub Actions from NPM_TOKEN to trusted publishing (OIDC)

K

Kāhea

copyleftdev

Kāhea

A

attack-surface-mcp-server

cyanheads

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan

D

devops-status-mcp-server

cyanheads

Vendor status pages, TLS certificate inspection, DNS propagation checks, and incident-response playbooks

O

osv-advisory-mcp-server

cyanheads

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP

E

entra-news-podcast

darrenjrobinson

Search Entra.Chat podcast transcripts, Merill Fernando's Microsoft Entra podcast on YouTube

M

Microsoft Entra SCIM

darrenjrobinson

Microsoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock

A

AIFeed

denyn1

Verify signed AIFeed permissions, fetch token-budgeted markdown, and verify assets for AI agents

D

dns-doctor

dnsdoctor.dev

Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes

S

safeprompt

safeprompt.dev

Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM

M

MCPAmpel - MCP Security Scanner

diemoeve

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

D

dep-diff-mcp

DigiCatalyst-Systems

Translates a lockfile diff into a human-readable upgrade plan for npm, PyPI and GitHub Actions

O

onyx-mcp

dimitrilaouanis-tech

Ed25519-signed ground-truth oracle — 63 paid x402 tools live on Base mainnet

D

Dominion Observatory

vdineshk

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools

I

insumer

douglasborthwick-crypto

Read-first blockchain verification. ECDSA-signed booleans across 37 chains. 27 tools

T

taskbounty-check

eliottreich

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit

G

gpg-mcp

emiliano-go

Security-focused MCP server for GnuPG signing, encryption and key management

Q

qeaas-mcp

qeaas.eu

QRNG-seeded random bytes, seeds and ML-KEM-768 keys with signed provenance receipts

O

OctoWatch DLP

extralabs

Read-only OctoWatch DLP Cloud MCP: risks, idle time, productivity, monitoring.

R

rekey

Ezra-Black

Rotate API keys across AWS, GitLab, Cloudflare, OpenAI & more. Secrets never reach the model.

Y

yieldagentx402

Fabio662

Policy-gated x402 MCP for agent workflows with TEE receipts, 18 tools, and no custody

S

SpendShield

felixpg13-glitch

Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit

F

figuard-mcp

figuard

Pre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision

F

flagrix

flagrix-io

Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents

M

MINT Protocol — Universal Work Attestation

FoundryNet

Trust stack for AI agents: identity, attest, verify, rate, recommend, and discover, on Solana

H

Homestead Memory

fuckbigtech-ai

Tamper-evident record of what your AI agent did, plus local-first verifiable memory.

A

agent-trust

Garl-Protocol

Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools

G

Garl-Protocol

Garl-Protocol

18 trust tools for AI agents — verify, score, route, compare, and delegate with confidence

M

MCP Code Review Server

GoodJobwilliam

Code review as an MCP server, with structured reviews and OWASP security scanning

G

Guard Core

Guard-Core

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection

W

WhitePact

Guruprasath-Annadurai

AI governance MCP server: trust scoring, guardrails, bias/hallucination detection, compliance

H

Have I Been Pwned MCP Server

Cyreslab-AI

Mirror of

3

3ilm-mcp

holistis

Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.

I

inam-mcp

inamprotocol

Check an agent's INAM reputation before trusting it, and sign a receipt when work is done

J

jikida

jikida.io

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets

V

Vulnify

vulnify.io

Ask Vulnify before an AI agent acts. Check, record, and read policy decisions

I

IPinfo

ipinfo

Official IPinfo MCP Server - IP intelligence tools for AI assistants

A

AWS Payment Cryptography

J8k3

AWS Payment Cryptography via MCP: keys, PIN/MAC/CVV/ARQC, PCI guards, HSM migration analysis.

T

threatcluster

Jam0k

Live threat intel for agents: incidents, threat actors, CVEs with KEV/EPSS, ransomware leak-site victims

H

Hermes Plant — Agent Commerce Assurance

JesseGdotIO

Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools

G

GDPR Shift-Left Compliance

KevinRabun

GDPR compliance MCP server - article lookup, DPIA, ROPA, DSR, IaC analysis, Bicep templates

K

KubeStellar MCP

kubestellar

AI-powered Kubernetes diagnostics, RBAC analysis, security checks, and app deployment via MCP

L

Laraguard Mcp

ecr17dev

An MCP server that analyzes Laravel projects for security vulnerabilities, misconfigurations, and insecure coding patterns, generating structured audit reports with actionable recommendations