MCP Servers

T

Tenable MCP (Management Control Panel)

rajagrawal104

Tenable MCP server.

T

Tencent Ekyc Mcp Server

FrogOVO

Tencent Cloud eKYC MCP Server — face verification, liveness detection, and identity verification via Model Context Protocol

S

Sentinel Payment Boundary Tools

TerminallyLazy

Read-only payment-boundary preflights plus an unsubmitted public quote-request draft tool

U

unripe

texWoW

Check how long ago a package version was published before an agent adds it, in 20 ecosystems

L

leaks.md and confession.md

thechristianaicompany

Anonymous, encrypted disclosure of AI alignment and safety failures, with signed receipts

S

seo-web-analysis-mcp-server

TheNextGenNexus

Run Lighthouse audits, check SSL certificates, detect tech stacks, query WHOIS and DNS records

J

JFSecure

theone55

Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure

E

Every App Is Open Source

thomasisalwayslate

Native reverse engineering with Ghidra and evidence on Apple Silicon macOS. Setup required

I

intelthreadlinqs-mcp

threadlinqs-cmd

Threadlinqs threat-intelligence MCP with 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

K

Keystash

thu-lawyer

Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one

C

Codna — repository intelligence

thyn-ai

Repo intelligence: triage, fix PRs, SARIF reachability, recall. Free codna login to execute

M

mcp-gateway

titus-civic

Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools

G

GAIP Trust & Assurance Agent

tjcgraham-rgb

Now part of GAIP Witness: verifies GAIP receipts; evidence packs and incident bundles.

T

Token Safety X402

Br0ski777

Token contract safety scanner (honeypot, tax, proxy, blacklist, risk score) — x402 micropayment API + MCP server for AI agents

T

Tokensafe

ampactor-labs

Quick safety screening for any Solana SPL token. Returns: risk score (0-100), risk level (LOW/MODERATE/HIGH/CRITICAL/EXTREME), human-readable summary, token name/symbol, whether authorities are renounced, trusted_authority (true when active authority belongs to a known issuer lik

S

SiteVitals

tom18a

Monitor website health, uptime, SEO, security and performance via your AI assistant

J

Janus

tonylchang

Secure Kubernetes MCP server: scoped, redacted diagnostics and human-approved writes

T

TopSMS

topsms-ghb

Czech SMS gateway: send and schedule SMS, OTP verification codes, delivery status and credit

A

arcstone-mcp-sidecar

trencinodin-stack

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

I

ISMS Copilot

tristanroth1

The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more

T

Trust Gate Mcp

CWNApps

Policy-gated AI decisions with Ed25519 cryptographic receipts. No receipt, no trust.

T

Trusteed

trusteed-io

CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth

D

domain-trust

trusterinfo

Website trust checks: 0-100 safety score, verdict and community reviews (truster.info)

T

trustlists

trustlists

Find public vendor trust centers, analyze SOC 2 reports, and request trust-center access

T

Trustping

charlieSAX

Real-time entity verification API for AI agents. Verify emails, URLs, and domains before your agent acts on them. Returns trust scores (0-1), verdicts (pass/warn/fail), and detailed signals. Free tier (50 calls/day) + instant metered access for agents with wallets ($0.003/call)

T

trustscoreagent

trustscoreagent

Check the reputation of AI microservices and public APIs from an open trust registry

P

Proof CLI (unofficial)

tsarlewey

Notarize, e-sign, and verify identity with the Proof API. Unofficial; not affiliated with Proof

T

Turbopentest

integsec

TurboPentest is an agentic AI penetration testing platform built by IntegSec that makes professional-grade security assessments accessible to every organization. Instead of waiting weeks for a manual pentest engagement or relying on a single scanning tool, TurboPentest deploys

D

dependency-fitness-mcp

TweedBeetle

npm dependency fitness: deprecated, yanked, superseded, and verified safe migration target

M

MailHunterPro

twojlogin

Read-only queries on local phishing scan results: findings, IOCs, SPF/DKIM/DMARC.

T

TWZRD Agent Intelligence

twzrd-sol

Pre-spend trust for AI agents that buy: check x402 services and product listings before paying.

T

twzrd-mcp

twzrd-sol

Auto-pay MCP for the TWZRD Trust API: free preflight + x402-paid Solana trust intel

A

Agent Skill & Config Security Audit

tylerscomic-lab

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

D

Dockerfile Security Audit

tylerscomic-lab

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

G

GitHub Actions Security Audit

tylerscomic-lab

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

M

MCP Trust & Tool-Poisoning Audit

tylerscomic-lab

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

N

npm Supply Chain Audit

tylerscomic-lab

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

P

PII & Secret Redactor

tylerscomic-lab

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders

R

Regex Safety Audit

tylerscomic-lab

Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites

S

Secrets Leak Audit

tylerscomic-lab

Scan text and git diffs for committed credentials using real vendor key formats plus entropy

A

Atinamos Evidence

atinamos.co.uk

Read-only verification evidence for paid machine services and buyer policy checks

E

ERC-8126 Scan

cybercentry.co.uk

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402

D

Docker Compose Audit

UnbearableDev

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

D

Dockerfile Audit

UnbearableDev

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

G

GitHub Actions Audit

UnbearableDev

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

I

IAC Audit Pack

UnbearableDev

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

K

Kubernetes Manifest Audit

UnbearableDev

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

U

uuaid

uuaid

Permanent identity + encrypted, quantum-ready memory that outlives the session, for any AI agent

D

Dependency Health MCP

ux-xd

Package alive? Verdict with evidence: deprecated, archived, stale or active; plus runtime EOL dates

S

Scout Security

Varpost

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues

V

Vizier Guard

vassiliylakhonin

Deterministic authorization and security guard for AI agent actions with signed receipts

V

vtimestamp

vdappdev2

MCP server for verifying and querying vtimestamp proofs on the Verus blockchain

V

vtimestamp-write

vdappdev2

MCP server for creating vtimestamp proofs on the Verus blockchain via a local or remote daemon

F

Faro

vedux98

Verify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents

V

Verifa

Verifa-Solutions

Identity verification, document checks, sanctions and PEP screening, and case review as agent tools

V

Verify Action

Armada735

MCP server issuing HMAC-attested receipts for AI agent tool-call evidence (verify_action_receipt.v0 reference impl)

V

VEYA

veyanet

Check, limit, record and prove AI agent actions with 2-of-3 validators and onchain proofs

P

POPCORN MCP

violetclaire

Witness layer for agents: signed receipts binding a fingerprint to a witnessed time. $0.001

P

POPCORN Witness Verifier

violetclaire

MCP server for verifying receipts: POPCORN-WITNESS/2.0 signature, digest, and time. Free, read only

W

witnessd

witnessd.vip

Neutral third-party witness: independently fetch, hash, timestamp, archive any URL or API response