MCP Servers

G

GaugeMesh

aliengineering-byte

Route MCP capabilities through deterministic identity, policy, budget and deadline constraints

A

Allowance MCP

useallowance

Payment security for AI agents. Allowance lets agents request human-approved virtual cards, complete checkout, and report receipts without exposing a real card.

A

Almega

almega-ai

Give your AI agents a wallet they can't abuse. Almega is an MCP server that puts a control layer in front of every payment: per-agent spending limits, allow-listed categories, 1-click human approval on sensitive transactions, and a full audit ledger. Two backends ship in one file.

L

loggly-mcp

andrewbabu

Read-only Loggly search and analytics with aggregation-first traffic tools and IP intelligence

C

clawvault-mcp-server

andrewszk

AI agent payment security - spending limits, whitelists, and human approval

W

Web Scan

ankitkumarjha515

Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.

D

DevOps & Cloud Code Auditor

Ansarii

Detects database migration table locks, terraform cost leaks, and OWASP API flaws

M

MCP Security & Vulnerability Auditor

Ansarii

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools

N

Neon Zero-Trust Gateway

Ansarii

Zero-Trust MCP gateway securing internal database tools behind an API key firewall

B

Betterleaks Cloud - GitHub & S3 Secret Scanner

AnshumanAtrey

Betterleaks Cloud - GitHub Secret Scanner + Validator

B

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

AnshumanAtrey

Bug Bounty Programs - HackerOne + Bugcrowd Lookup | Bulk

D

Domain History Contact OSINT - Previous Owner + WHOIS History

AnshumanAtrey

Domain History Contact OSINT - Previous Owner + WHOIS History

H

Holehe Email OSINT - Find Registered Accounts

AnshumanAtrey

Email OSINT Tool - Find Registered Accounts on 120+ Sites

N

NetIntel - Unified IP & Domain Intelligence

AnshumanAtrey

NetIntel - Unified IP & Domain Intelligence

N

Nmap Cloud Scanner - Port Scanner + Service Detection | Bulk

AnshumanAtrey

Nmap Cloud - Port Scanner & Service Detection | Free Trial

E

Email & Subdomain Finder - theHarvester OSINT | 54 Sources

AnshumanAtrey

Email & Subdomain Finder - theHarvester OSINT Cloud | Bulk

G

gws-admin-mcp

antct11

Safe Google Workspace admin for AI agents: read-only by default, confirm-gated deletes, audit log

G

GxP Gateway Audit

antonio-castellon

Audits MCP and HTTPS calls. Tamper-evident trail for GLP.

A

Anyway Possible Paid Agent Utilities

anyway-possible

Paid x402 tools for merchant intelligence, Base payment readiness, and verifiable web evidence

M

MCP Blast-Radius Auditor

aos-standard

Static blast-radius audit for MCP servers before agent install. Manifest optional

P

provenance-mcp

apeirontrade

Wash-traffic risk checks for Algorand x402 endpoints before your agent trusts or pays them

A

Apex Copilot

Apex-Foundation

Web3 founder diligence: contract audit, jurisdiction matching, fund discovery, portfolio comparison, scoring. Free, open source

A

Agent Mandate Verification

API-Disk-Integrations

Verify a proposed action against a signed Agent Mandate without executing or mutating accounts

A

Apifreaks Mcp Server

api-freaks

Official MCP server for APIFreaks. Real-time weather, IP, WHOIS, DNS, SSL, currency, screenshots, and more for any AI agent.

A

API Locker

apilocker

Encrypted credential vault: LLM, service and OAuth keys. 21-tool MCP server for your AI agent

B

Bannerproof

bannerproof.app

EU cookie-consent audit: trackers before consent, Reject all, Consent Mode v2, TCF; evidence + fixes

D

Domain Lab

domainlab.app

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

C

Crypto Due Diligence

openkrill.app

Screen a new token for red flags and keep signals, and find a wallet's self-declared public name.

C

CVE Risk Check

openkrill.app

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is

P

Prompt Injection Scanner

openkrill.app

Check text before your agent reads it: hidden instructions, invisible text and links that leak data.

D

Domain Mail Check

openkrill.app

Check a domain's email DNS, whether Gmail and Outlook accept its mail, and its registration.

P

Package Health Check

openkrill.app

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep

C

CYBO Attest

ulapcybo.app

Scan, fix and justify your application code until it is approved to ship

A

Arcanna MCP Server

siscale

No description yet

A

Areacode.fyi Mcp Server

riv-lc

North American NANP area-code and phone-number intelligence for AI agents: area-code lookup, NANP validation, local time, city/state/province coverage, overlays, scam/spoofing context, and block-allocation carrier metadata backed by areacode.fyi.

A

Aribot

aristiun

Threat modeling, code, cloud and pipeline scanning, shadow-AI discovery, compliance checks and fixes, from your assistant

G

google-workspace-mcp

aringad

Google Workspace Admin via MCP. Manage users, groups, aliases, org units.

M

make-audit-mcp

arose26

Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings

W

warda

ArtyKOMarkets

Economic authority for autonomous agents on Kaspa L1. Never holds a key

D

Darkmoon

ASCIT31

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings

K

KarmaDue

ashadow07

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account

V

verify-atom

asherengos

Signed proof of web observations for AI agents: Ed25519 proof packets for any URL

V

vaultguard

ashishrao-4

AI agents use your Obsidian secrets by name — values never reach their context

A

AgentTrust

assister-xyz

Quality verification for AI agents and MCP servers. 6-axis scoring, adversarial probes

B

blast-scope

Atharva-Jayappa

Contextual blast-radius scoring for shell commands an AI agent is about to run

A

atlas-mcp

atlas26onchain

Base token safety checks (honeypot test, liquidity, new launches), paid per call in USDC via x402

A

AtlaSent MCP Server

AtlaSent

AtlaSent for AI agents: with an API key, actions wait for approval with signed proof. No key: demo

A

Aaaa Nexus

atomadictech

Formally verified AI safety APIs for autonomous agents. 75+ endpoints, x402 USDC micropayments, MCP server, A2A protocol. No signup required.

A

Atomadic starter MCP (50 tools)

atomadictech

50 starter MCP tools for AI compliance and trust: identity, escrow, SLA, EU AI Act.

A

ATTACK-MCP

EdenYavin

MCP Server for accessing the MITRE ATTACK knowledge base

A

Attest

attestagents

Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.

A

Attestari

attestari

Auditable memory for AI agents: provable deletion, tamper-evident audit, time-travel recall.

A

Attestd - Deterministic CVE & Supply Chain Data

attestd-io

Deterministic, machine-readable CVE and supply chain risk data for infrastructure, PyPI, and npm packages. Built for AI agents and coding assistants to act on directly, no CVSS interpretation required. Covers nginx, PostgreSQL, Redis, Docker, Kubernetes, and more.

A

Attestify OS

attestifyagent

MCP stdio server for Attestify OS — governed agent execution and Attestify Trust signed evidence.

AuthzX MCP Gateway — policy-enforcing proxy between AI agents and MCP servers

A

automaton-colony

AutomatonColony

Screen Base smart contracts and B20 tokens: free on-chain check, paid Flash Audit over x402 (USDC)

B

BackBond Agent Scan

BackBond

Vet MCP tool manifests before attachment; returns block, review, or no blocking finding

S

Stackhal

bahdanhal

Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities

C

cloud-pathfinder

Baneado98

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s

I

import-guardian

Baneado98

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install