MCP Servers

E

elicitation-auditor

GuardBee

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

L

llm-redteam

GuardBee

Active jailbreak, extraction and obfuscation red-teaming for live LLM endpoints

M

mcp-config-auditor

GuardBee

Scans Cursor, Claude, Windsurf and VS Code MCP configs for unpinned versions, secrets and typosquats

M

mcp-server-auditor

GuardBee

Scans MCP server tool definitions for excessive agency, injection sinks and hardcoded secrets

M

memory-poisoning-scanner

GuardBee

Scans agent code for untrusted input poisoning persistent cross-session memory

M

model-scanner

GuardBee

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

O

oauth-auditor

GuardBee

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

O

owasp-scan

GuardBee

Unified OWASP MCP Top 10 scan: path or live tools/list, A–F grade, SARIF

P

prompt-injection-scanner

GuardBee

Scans RAG content and scraped pages for indirect prompt injection

P

prompt-leak-scanner

GuardBee

Catches leaked credentials and PII in outbound LLM prompts

R

reverse-shield

GuardBee

Audits shipped apps for how easily they can be reverse engineered

R

rug-pull-detector

GuardBee

Baselines an MCP server's tools and detects tool-definition changes after approval

S

secret-scanner

GuardBee

Scans files for leaked secrets and API keys

S

security-proxy

GuardBee

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

S

security-suite

GuardBee

Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS

S

slopsquat-scanner

GuardBee

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

S

ssl-inspector

GuardBee

TLS certificate, cipher and protocol inspection

T

threat-rules

GuardBee

GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection

T

tool-poisoning-scanner

GuardBee

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

T

toxic-flow-auditor

GuardBee

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

U

unbounded-consumption-auditor

GuardBee

Scans LLM and agent code for Unbounded Consumption and denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

V

vector-store-scanner

GuardBee

Probes vector-database endpoints for unauthenticated exposure of embeddings and RAG data

V

vulnerability-scanner

GuardBee

Triggers GuardBee scans, queries findings and provides AI-assisted remediation guidance

P

PrufGate

GuardianVigil-Labs

Read-only tools that check whether code, and the tests that claim it works, are real

H

hayward

hedgerow-dev

Checks ML model files (pickle, PyTorch, joblib, NumPy, GGUF, ONNX) for code that runs on load

H

Hejdar

ARKALDA

Hejdar MCP Server — runtime policy enforcement for AI agents

C

coderegistry

hellosg

Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free

O

openttt-pot

Helm-Protocol

Cryptographic audit trail for Claude Code workflows — tamper-proof timestamps, IETF TTTPS compliant

A

ACMP MCP Server

Herzog-GmbH

Community MCP server for Aagon ACMP: clients, inventory, CVEs, jobs, tickets, activity log

H

Hookwarden — Webhook Integrity

Hookwarden

Webhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +23. Local. Deterministic

H

Hvtracker Mcp

YugantM

Pre-connect trust checks for AI agents, frameworks, packages, and MCP servers using HVTracker's public trust registry

H

HydraDNS

hydradns

Manage a self-hosted DNS firewall: block domains, create policies, read query logs and metrics

A

anchor-x402

hypeprinter007-stack

x402-paid agent tools: 18 over HTTP, 14 over stdio. USDC per call, no API key

H

Hyperd Mcp

hyperd-ai

Pre-trade DeFi intelligence for AI agents on Base. 20 paid x402 endpoints - wallet risk, token security, cross-protocol liquidation health (Aave V3 / Compound v3 / Spark / Morpho), portfolio P&L, DEX quote aggregation, governance LLM summaries, sentiment, and a multi-call bundle

D

devin-memory

Icaro0310

Anti-poisoning memory for agents: provenance, conflicts, quarantine gate

I

Infinihash Kyt

Infinihash

Blockchain transaction monitoring + sanctions screening as MCP tools. 10 tools: screen wallets against OFAC SDN + 18,800+ threat-intel labels in under 200ms, open compliance cases, append investigation notes, and generate FinCEN-aligned SAR drafts. Free tier (100 screenings/month)

A

agentrank

agentrank.info

Is this AI agent or x402 service real and settlement-backed before you pay it? Trust check.

D

DefectDojo

inspicere

MCP server for DefectDojo — 24 tools with RBAC, HMAC audit chain, and SIEM forwarding

I

InterAI Risk Oracle

InterAILabs

Pre-execution policy gate for consequential agent actions with durable trust receipts

I

InternetData

internetdata

List InternetData's IP and ASN databases, your license for each, what one holds, and its digests.

A

Arcaeon

arcaeon.io

A record of what an agent did that the agent cannot quietly rewrite, and a way for anyone to check.

A

AsterPay — EUR Settlement for AI Agents

asterpay.io

EUR settlement + trust for AI agent commerce: budgets, KYA, merchant discovery. 22 tools.

M

mcp-api

fusionauth.io

Preview release of FusionAuth API MCP server

I

InternetData

internetdata.io

List InternetData's IP and ASN databases, your license for each, what one holds, and its digests.

G

gateway

mcprating.io

Find MCP servers in the MCP Rating index and connect on demand, with env vars scoped per server.

V

VPNDetection

vpndetection.io

VPN, proxy, Tor, hosting and CDN detection for any IP address, from the VPNDetection API

I

IR Toolshed MCP Server

rossja

An MCP server providing tools for network incident response

M

mcpolyglot

ishay60

Policy-checked, audited agent access to Postgres, MySQL, SQLite, MongoDB and OpenAPI REST APIs

D

djd-agent-score

jacobsd32-cpu

Reputation scoring for AI agent wallets on Base. Trust scores, fraud checks, x402

X

xrpl-identity-mcp

jarod-vyent

MCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.

X

xProof

jasonxkensei

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

S

stig-mcp

jeneric

MCP server: MITRE ATT&CK® -> NIST 800-53r5 -> DISA STIG fix/check steps, mitigations and detections

E

eurodns-mcp

JigSawFr

Model Context Protocol server for the EuroDNS User API: domains, DNS zones, subscriptions and SSL

S

securecode

juanisidoro

Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption

J

JumpServer MCP Server

LeeEirc

No description yet

A

AISentinel by BizDNAi

Kabzhanov

Pre-tool policy enforcement and JSONL audit for AI agents. Apache 2.0

4

402sentinel-mcp

kaditang

DEPRECATED: hosted 402Sentinel retired 2026-10-31. Client for x402 payment-safety checks.

Measured readings on open-source dependencies: health, end-of-life, model prices, incidents

Measured readings on open-source dependencies: health, end-of-life, model prices, incidents

K

kakunin

kakunin-ai

X.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant