MCP Servers

A

Alienvault Otx

pipeworx-io

AlienVault OTX MCP — Open Threat Exchange (free with key)

B

Bug Bounty Programs

pipeworx-io

bug-bounty-programs

C

Censys

pipeworx-io

Censys MCP — internet-scan search over the Censys Platform API (censys.com)

C

Circl Vulnerability Lookup

pipeworx-io

CIRCL Vulnerability-Lookup — aggregated vulnerability records

C

Cisa Kev

pipeworx-io

CISA KEV MCP

C

Cloudflare Radar

pipeworx-io

Cloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality)

C

Crtsh

pipeworx-io

crt.sh — Certificate Transparency log search

D

Deps Dev

pipeworx-io

deps.dev MCP — Google's package metadata + dependency graph API.

D

Didit

pipeworx-io

Didit MCP — wraps the Didit v3 identity / compliance API (didit.me)

D

Disify

pipeworx-io

Disify MCP — wraps the Disify API (anonymous tier + BYO key)

E

Epss

pipeworx-io

FIRST.org EPSS (Exploit Prediction Scoring System) MCP

F

Feodotracker

pipeworx-io

Feodo Tracker MCP — botnet C&C IP blocklist from abuse.ch

G

Greynoise

pipeworx-io

GreyNoise Community MCP — internet scanner classification (free tier with key)

H

Hackertarget

pipeworx-io

HackerTarget MCP

H

Hash

pipeworx-io

Cryptographic hash & HMAC MCP.

H

Hibp

pipeworx-io

Have I Been Pwned MCP

I

Ipqualityscore

pipeworx-io

IPQualityScore MCP — wraps the IPQualityScore fraud-prevention API (ipqualityscore.com).

I

Ipquery

pipeworx-io

IPQuery MCP

I

Isc Sans

pipeworx-io

SANS Internet Storm Center (ISC) MCP

J

Jwt

pipeworx-io

JWT decoder MCP.

M

Malwarebazaar

pipeworx-io

MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

M

Mitre Attck

pipeworx-io

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

M

Mitre Cwe

pipeworx-io

MITRE CWE API MCP.

M

Mozilla Observatory

pipeworx-io

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

N

Nist Standards

pipeworx-io

NIST Standards MCP pack

N

Nvd

pipeworx-io

NVD MCP — wraps the NIST National Vulnerability Database API.…

O

Ooni

pipeworx-io

OONI MCP — internet censorship & website reachability measurements from the Open Observatory of…

O

Osv

pipeworx-io

OSV.dev (Open Source Vulnerabilities) MCP.

O

Osv Dev

pipeworx-io

OSV.dev — Google's open-source vulnerability database

O

Owasp

pipeworx-io

OWASP MCP — keyless.

P

Password

pipeworx-io

Password strength analysis MCP.

P

Passwordgen

pipeworx-io

Secure password generator MCP.

P

Phishtank

pipeworx-io

PhishTank MCP — Wraps PhishTank API (checkurl.phishtank.com)

P

Pulsedive

pipeworx-io

Pulsedive MCP — threat-intelligence IOC enrichment (pulsedive.com)

R

Rdap

pipeworx-io

RDAP MCP — Registration Data Access Protocol via IANA bootstrap

R

Ripe Stat

pipeworx-io

RIPE Stat MCP — IP/ASN/BGP data

S

Security Feeds

pipeworx-io

Security Feeds MCP.

S

Securitytrails

pipeworx-io

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

S

Seon

pipeworx-io

SEON MCP, wraps the SEON fraud / digital-footprint enrichment APIs (seon.io)

S

Shodan

pipeworx-io

Shodan MCP, wraps the full Shodan REST API (api.shodan.io)

S

Shodan Internetdb

pipeworx-io

Shodan InternetDB MCP, wraps Shodan InternetDB (internetdb.shodan.io)

S

Sigstore Rekor

pipeworx-io

Sigstore Rekor, the public transparency log for software signatures.

T

Threatfox

pipeworx-io

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

T

Token Risk

pipeworx-io

Token Risk — rug-pull / honeypot screening for crypto tokens

U

Urlhaus

pipeworx-io

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

U

Urlscan Io

pipeworx-io

urlscan.io MCP.

V

Virustotal

pipeworx-io

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

W

Whoisxml

pipeworx-io

WhoisXML MCP — wraps WhoisXML API (whoisxmlapi.com)

X

Xposedornot

pipeworx-io

XposedOrNot MCP — free breach-exposure lookup by email

P

Piqrypt Mcp Server

PiQrypt

Cryptographic audit trail for AI agents via Model Context Protocol. Every AI decision signed Ed25519, hash-chained, tamper-proof. AISS-1.0 compliant. Post-quantum ready. Compliance-ready for SEC, FINRA, GDPR, HIPAA.

A

Argus

pochtmanr

Drive Argus anti-detect browser profiles: isolated identities with their own fingerprint and proxy

P

Policy MCP Server

TangoIndiaPapa

Model Context Protocol Server using FastMCP 2.0 to enforce policies

P

Policypulse Mcp

raviteja-pegata

PolicyPulse connects your AI assistant directly to your Kubernetes policy engines. Instead of switching between three dashboards and two CLIs, you ask in plain English and get answers enriched with CIS Kubernetes, PCI-DSS, NIST 800-53, and SOC 2 framework references.

P

Port Scanner X402

Br0ski777

Scan TCP ports on any host — check open/closed status, response time. 16 common ports by default. — x402 micropayment API + MCP server for AI agents

L

LookupLab

PpiNeaPpLe

Phone carrier, email domain, IP network and DNS checks using your LookupLab account

S

Security MCP

pratham-jain33

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

S

sops-mcp

privacyplaybook

MCP server for creating and managing SOPS-encrypted secrets

P

PrivadoVPN x402 Payer

privadovpn

Local MCP server that signs x402 USDC payments (Solana, EVM) to buy PrivadoVPN access

R

RunStack Checks

runstack.pro

External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix

P

probe402-check

probe402

Ask probe402's public record about an x402 or MPP endpoint before an agent pays it.