259 agent tools in 3 subcategories. See them all in one list ↓
168 tools
69 tools
22 tools
| Tool | Stars | Last update | License | |
|---|---|---|---|---|
| io.github.26zl/cybersec-toolkit Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR. MCP serverGitHub-verified authorLocal · Docker | 95 | MIT | ||
| io.github.aks129/healthclaw-guardrails Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation MCP serverGitHub-verified authorRemote | 34 | MIT | ||
| Prism Scanner Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading. MCP serverGitHub-verified authorLocal · PyPI | 28 | Apache-2.0 | ||
| AI Guard Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done. MCP serverGitHub-verified authorLocal · npm | 19 | MIT | ||
| ToolTrust Scanner Scans MCP servers for prompt injection, data exfiltration, and privilege escalation. MCP serverGitHub-verified authorLocal · npm | 19 | MIT | ||
| aikido Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server. PluginAnthropic marketplace | 15 | — | ||
| pkgxray Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence. MCP serverGitHub-verified authorLocal · npm | 12 | MIT | ||
| Corvus Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch. MCP serverGitHub-verified authorLocal · NuGet | 11 | Apache-2.0 | ||
| FairMind Release gate for AI systems from FairMind: evaluations, framework evidence and ledger snapshots. MCP serverGitHub-verified authorLocal · PyPI | 11 | AGPL-3.0 | ||
| io.github.andrasfe/vulnicheck HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis. MCP serverGitHub-verified authorLocal · Docker | 11 | MIT | ||
| Klarion Secret scanning for AI agents: rules and entropy find candidates, a model decides which are real. MCP serverGitHub-verified authorLocal · MCPB | 11 | MIT | ||
| OT AIops Governed OT tap (57 tools): OPC-UA/Modbus/S7/MC/MTConnect/MQTT/EtherNet-IP/EtherCAT. MCP serverGitHub-verified authorLocal · PyPI | 10 | MIT | ||
| io.github.Agnuxo1/enigmagent-mcp Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys. MCP serverGitHub-verified authorLocal · npm | 7 | MIT | ||
| CookieGuard Audit HTTP cookie security against your local policy. Returns findings without cookie values. MCP serverGitHub-verified authorLocal · npm | 5 | MIT | ||
| 1Claw Vault HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. MCP serverGitHub-verified authorLocal · npm | 4 | MIT | ||
| ai.smithery/alex-llm-attack-mcp-server Query and retrieve information about various adversarial tactics and techniques used in cyber atta… MCP serverVerified domain · smithery.aiRemote | 3 | — | ||
| Android Security Analyzer MCP server for static security analysis of Android source code MCP serverGitHub-verified authorRemote | 3 | — | ||
| Ansvar: Threat Intelligence CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid. MCP serverVerified domain · ansvar.euRemote | 3 | — | ||
| io.github.Aitejiu/jev Jev judgments for agents: injection scanning, shell risk gating, ranking MCP serverGitHub-verified authorLocal · PyPI | 3 | — | ||
| io.github.shotwellj/air-blackbox EU AI Act compliance scanner for Python AI agents — scan, analyze, and remediate MCP serverGitHub-verified authorLocal · PyPI | 3 | Apache-2.0 | ||
| Keyblind Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them. MCP serverGitHub-verified authorLocal · npm | 3 | MIT | ||
| Secret Sentinel Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text MCP serverGitHub-verified authorLocal · PyPI | 3 | MIT | ||
| Sn1per MCP Server: pentest, recon and attack surface scanning Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings. MCP serverGitHub-verified authorLocal · PyPI | 3 | Apache-2.0 | ||
| vaultgate Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only MCP serverGitHub-verified authorRemote | 3 | Apache-2.0 | ||
| Actenon Kernel Verify consequential AI actions before they execute. MCP serverGitHub-verified authorLocal · PyPI | 2 | Apache-2.0 | ||
| CVSS Calculator MCP Calculate and validate CVSS 2.0, 3.0, 3.1, and 4.0 base scores. MCP serverGitHub-verified authorRemote | 2 | Apache-2.0 | ||
| Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner GitHub Secret Scanner - Find Leaked API Keys | Gitleaks MCP serverGitHub-verified authorRemote | 2 | MIT | ||
| io.github.0xdirectping/escrow Agent-to-agent escrow on Base. Post quests with ETH/USDC bounties and settle on-chain. MCP serverGitHub-verified authorRemote | 2 | — | ||
| 42crunch-api-security-testing Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Securit PluginAnthropic marketplace | 1 | — | ||
| AI Scanner Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets. MCP serverGitHub-verified authorLocal · npm | 1 | MIT | ||
| Aileron Journal Read-only queries over Aileron audit journals: verify integrity, search recorded tool calls MCP serverGitHub-verified authorLocal · PyPI | 1 | Apache-2.0 | ||
| io.github.Aguantar/vibescan-mcp-server MCP server for VibeScan — scan projects for leaked secrets and security issues MCP serverGitHub-verified authorLocal · PyPI | 1 | MIT | ||
| io.github.AInoAKARI/keymaster-mcp Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents. MCP serverGitHub-verified authorLocal · npm | 1 | MIT | ||
| Oxiploitability Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV. MCP serverGitHub-verified authorLocal · Cargo | 1 | Apache-2.0 | ||
| SecLens.ONE Email Security Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT. MCP serverVerified domain · seclens.oneRemote | 1 | Apache-2.0 | ||
| VeriSight MCP Sub-3ms OpenCV 5 image forensics, deepfake, AI inpainting & tamper fraud detection MCP. MCP serverGitHub-verified authorLocal · PyPI | 1 | Apache-2.0 | ||
| 28/28 Agent Service Desk: Fix & Verify Check SPF/DKIM/DMARC of a domain, get a non-binding Fix & Verify quote, re-verify after the DNS fix. MCP serverVerified domain · 28in28.aiRemote | — | — | ||
| AcidPeak Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches. MCP serverVerified domain · acidpeak.comRemote | — | — | ||
| Agent Guestbook Read and verify the Blue Cloud Cyber agent guestbook, and sign one Ed25519 entry per UTC day. MCP serverVerified domain · bluecloudcyber.comLocal · npm | — | — | ||
| Agent Secret Store Scoped secrets and HSM wallet signing for agents; humans approve out of band. OAuth 2.1. MCP serverVerified domain · agentsecretstore.comRemote | — | — | ||
| AgentProof Start AgentProof security audits of websites you own or may test, and read reports and findings. MCP serverVerified domain · isagentproof.comRemote | — | — | ||
| AGORA Omega Pay-per-call checks for AI agents: sanctions, MiCA, French KYB, AI Act. USDC via x402. MCP serverVerified domain · agoraverify.comRemote | — | — | ||
| AI application security research and assessments Read AI security guides and lab research, and request an LLM or AI agent security assessment. MCP serverVerified domain · airedteamingservices.comRemote | — | — | ||
| AI Website Security Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering. MCP serverVerified domain · aiwebsitesecurity.comRemote | — | — | ||
| ai.agentrapay/agentra Identity oracle and trust layer for autonomous AI agents. Bidirectional KYA and trust scoring. MCP serverVerified domain · agentrapay.aiRemote | — | — | ||
| ai.facesign/facesign-mcp Build and test FaceSign step-up verification flows from your AI coding tool MCP serverVerified domain · facesign.aiRemote | — | — | ||
| ai.getvda/password-hashing-and-jwt-service Password Hashing and JWT Service MCP serverVerified domain · getvda.aiRemote | — | — | ||
| ai.kaiv/dependency-trust Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems. MCP serverVerified domain · kaiv.aiRemote | — | — | ||
| ai.smithery/PabloLec-keyprobe-mcp Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.… MCP serverVerified domain · smithery.aiRemote | — | — | ||
| ai.tachyo/verify Cryptographic proof of wallet ownership in two steps, with no keys and no custody. MCP serverVerified domain · tachyo.aiRemote | — | — | ||
| AIS CVE Priorities — daily exploit-ranked patch list for AI agents Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full MCP serverVerified domain · aislabs.aiRemote | — | — | ||
| AllClear Connect (OAuth, OIDC, and MCP) Verified identity plus consented personal context, starting with medical records, images & insurance MCP serverVerified domain · allclearid.comRemote | — | — | ||
| APICK Identity Korean ID document verification and PII masking APIs MCP serverVerified domain · apick.appRemote | — | — | ||
| app.vercel.exploitwatch-kappa/exploitwatch Check dependencies against CISA's real Known Exploited Vulnerabilities feed. MCP serverVerified domain · exploitwatch-kappa.vercel.appRemote | — | — | ||
| Arbiter Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix. MCP serverVerified domain · arbiterscan.comRemote | — | — | ||
| Arcjet An MCP server for Arcjet - the runtime security platform that ships with your AI code. MCP serverVerified domain · arcjet.comRemote | — | — | ||
| Aribot Threat modeling, code, API & cloud security, shadow-AI & compliance governance. MCP serverVerified domain · ayurak.comRemote | — | — | ||
| ASL Colorado Complaint Access Colorado DORA license lookups, the SOMB provider directory and answers from the rules and standards. MCP serverVerified domain · autosecurelogin.comRemote | — | — | ||
| ASMHunter Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports. MCP serverVerified domain · asmhunter.appLocal · PyPI | — | — | ||
| ATK Security Checks PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps MCP serverVerified domain · atkvn.comRemote | — | — | ||
| AttackerView quick website security check Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed. MCP serverVerified domain · attackerview.comRemote | — | — | ||
| Auditon security assessments Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes. MCP serverVerified domain · auditon.coRemote | — | — | ||
| AurelianFlo OFAC wallet screening, EDD memos, exposure forecasts, review queues and watchlists. Free to try. MCP serverVerified domain · aurelianflo.comRemote | — | — | ||
| Auth Usuários, sessões, logins sociais e webhooks da sua aplicação MCP serverVerified domain · myinfrastructure.clickRemote | — | — | ||
| Auth0 MCP Server Auth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural language MCP serverVerified domain · auth0.comLocal · npm | — | — | ||
| AuthiChain Verification of signed records, plus an EU DPP check. MCP serverVerified domain · authichain.comRemote | — | — | ||
| Automaton Onchain Tools Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan. MCP serverVerified domain · automaton-tx-explainer.vercel.appRemote | — | — | ||
| Axiom Solana Token Risk Solana SPL token risk checks: free preview tool plus links to paid x402 (USDC) full reports. MCP serverVerified domain · axiom-risk-mcp.vercel.appRemote | — | — | ||
| Aya scam check Screens a message or its links for scam patterns with Aya's offline rules, in English and Spanish. MCP serverVerified domain · autosecurelogin.comRemote | — | — | ||
| Bewary: scam, phishing and fraud detection Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams MCP serverVerified domain · bewary.appRemote | — | — | ||
| Bitwarden Give your assistant its own Bitwarden vault for logins, passwords, 2FA codes and passkeys. MCP serverVerified domain · foreverworks.comLocal · npm | — | — | ||
| BizVerify KYB for AI agents: verify business registrations from MCP clients. MCP serverVerified domain · bizverify.coRemote | — | — | ||
| Black Duck Security Scanner AI-powered security scanning using Black Duck Signal for vulnerability detection. MCP serverVerified domain · blackduck.comLocal · npm | — | — | ||
| BlackVeil DNS & Email Security Scanner DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. MCP serverVerified domain · blackveilsecurity.comRemote | — | — | ||
| BlueTeamJobs Search open defensive cybersecurity (blue team) jobs and salary data. Read-only, no sign-in. MCP serverVerified domain · blueteamjobs.comRemote | — | — | ||
| Bot403 Invisible bot shield for HTML forms: the browser solves a proof of work and your server checks it. MCP serverVerified domain · bot403.comRemote | — | — | ||
| braXos Maestro Governed access to your org's systems (Salesforce, Workday, CCure, Genetec, Zoom, etc.) via braXos. MCP serverVerified domain · braxos.comRemote | — | — | ||
| Breach402 — Email Data-Breach Check Data-breach & credential-exposure check for one owner-approved email. $1 USDC on Solana (x402). MCP serverVerified domain · bmcxiv.comRemote | — | — | ||
| Bright Security Enables AI agents to access Bright Security tools for app discovery and security testing. MCP serverVerified domain · brightsec.comRemote | — | — | ||
| Bynn Document fraud detection for manipulated, fake and AI-generated PDF and image documents. MCP serverVerified domain · bynn.comRemote | — | — | ||
| ByteRay AI Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai MCP serverVerified domain · byteray.aiRemote | — | — | ||
| Caisey Troubleshoot enrolled client PCs from your AI client, with human approval and an audit trail. MCP serverVerified domain · helpforsupport.comRemote | — | — | ||
| captcha.cc Human Verification Human verification CAPTCHA with visual and selective-listening audio challenges. MCP serverVerified domain · captcha.ccRemote | — | — | ||
| CERT-FR Security Advisories — buy per-query in-session (certfrwatch) CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Certificate Checker Got Simplified Check a website's TLS certificate and how many days until it expires. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| Chainitor Monitor EVM wallets, tokens, contracts and Safe multisigs, and read their alerts. MCP serverVerified domain · chainitor.comRemote | — | — | ||
| Chainsaw package firewall Package firewall for agents: route npm, pip and docker installs through Chainsaw. MCP serverVerified domain · chain305.comRemote | — | — | ||
| CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) CISA advisories & ICS alerts: new CVEs, remediation. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| CISA Known Exploited Vulnerabilities (kevwatch) CISA KEV catalog: active-exploit alerts, hourly. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| cn.pianam/ip-location-mcp MCP server for IPv4 geolocation lookup with Chinese output, supports batch queries. MCP serverVerified domain · pianam.cnRemote | — | — | ||
| co.auditro/auditro UAE ICV compliance: governed scores, evidence gaps and actions with deterministic numbers. MCP serverVerified domain · auditro.coRemote | — | — | ||
| com.arcnautical/mcp Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included. MCP serverVerified domain · arcnautical.comLocal · npm | — | — | ||
| com.arcself/arc-security Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings. MCP serverVerified domain · arcself.comLocal · npm | — | — | ||
| com.bidda/bidda-compliance 10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE). MCP serverVerified domain · bidda.comRemote | — | — | ||
| com.buyukesim/mcp No-logs VPN, real UK +44 number eSIMs and travel-data eSIMs, bought with crypto. No KYC, no account. MCP serverVerified domain · buyukesim.comRemote | — | — | ||
| com.cautellus/scam-detection Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages. MCP serverVerified domain · cautellus.comRemote | — | — | ||
| com.chaingrantor/grantor-mcp Wrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke. MCP serverVerified domain · chaingrantor.comLocal · npm | — | — | ||
| com.chaink9/chaink9 Token risk checks on BSC, ETH, Base and Arc: trades the token on a fork. Paid in USDC/USDT via x402. MCP serverVerified domain · chaink9.comLocal · npm | — | — | ||
| com.checkmarx/checkmarx Official Checkmarx MCP Server MCP serverVerified domain · checkmarx.comRemote | — | — | ||
| com.cognivators/mcp-safeguard MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning. MCP serverVerified domain · cognivators.comLocal · PyPI | — | — | ||
| com.compliapi/screening OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo MCP serverVerified domain · compliapi.comRemote | — | — | ||
| com.craftedtrust/mcp-shield Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers. MCP serverVerified domain · craftedtrust.comRemote | — | — | ||
| com.cryptoamlpolicy/site Crypto AML Policy: the site's own MCP server — enquiry (enquiry = a human handoff, not a... MCP serverVerified domain · cryptoamlpolicy.comRemote | — | — | ||
| com.dechonet/mcp 30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots. MCP serverVerified domain · dechonet.comLocal · npm | — | — | ||
| com.dustforge/demipass Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context. MCP serverVerified domain · dustforge.comLocal · npm | — | — | ||
| com.edgethirteen.www/exploitwatch Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/killcord Dead-man's switch for Anthropic API spend: kills the key the instant it crosses a limit you set. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/sanctions Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/tariff-refund-screen Screen US public companies for IEEPA tariff-refund exposure disclosed in their SEC filings. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/triageshield Verify a vuln report's file/line/function claims against a real GitHub repo. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.edgethirteen.www/us-diligence Screen a US company against SEC EDGAR, OFAC sanctions, federal awards and federal court dockets. MCP serverVerified domain · www.edgethirteen.comRemote | — | — | ||
| com.eleyed/redact Redact PII from text before it reaches a model. Nothing stored, no third-party AI. MCP serverVerified domain · eleyed.comRemote | — | — | ||
| com.encompassconfirm/ec360 KYC automation from authoritative public sources. Requires an Encompass licence. MCP serverVerified domain · encompassconfirm.comRemote | — | — | ||
| com.fidacy/ai-agent-firewall Every agent action watched, every money-moving one gated, every verdict independently verifiable. MCP serverVerified domain · fidacy.comLocal · npm | — | — | ||
| com.flo-voice1/agent-identity-mcp Give an AI agent a throwaway email and phone number to test signup/verification flows end to end. MCP serverVerified domain · flo-voice1.comRemote | — | — | ||
| com.grcmigrate/directory Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only. MCP serverVerified domain · grcmigrate.comRemote | — | — | ||
| com.insumermodel/insumer Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains. MCP serverVerified domain · insumermodel.comLocal · npm | — | — | ||
| com.kenoodl/verify Runs your code against a contract; HELD or BROKE at the exact input. Deterministic. 0.10 USDC/call. MCP serverVerified domain · kenoodl.comRemote | — | — | ||
| com.keyboardcrumbs/mcp Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key. MCP serverVerified domain · keyboardcrumbs.comLocal · PyPI | — | — | ||
| com.korushield/koru-shield Manage Koru Shield DNS filtering: profiles, rules, categories, schedules, and logs. MCP serverVerified domain · korushield.comLocal · npm | — | — | ||
| com.mcparmory/pagerduty Manage incidents, on-call schedules, escalation policies, and alert notifications MCP serverVerified domain · mcparmory.comLocal · PyPI | — | — | ||
| com.metricprovenance/odgs-mcp-server ODGS governance enforcement — validation, regulation compilation, drift detection, signed S-Certs. MCP serverVerified domain · metricprovenance.comLocal · PyPI | — | — | ||
| com.mnemopay/gridstamp Tamper-evident spatial receipts: cryptographic proof-of-presence for AV fleets, logistics and AR. MCP serverVerified domain · mnemopay.comLocal · npm | — | — | ||
| com.myprivacyagent/public Read-only opt-out guides, removal routes for 950+ data brokers, and privacy library search. MCP serverVerified domain · myprivacyagent.comRemote | — | — | ||
| com.obeliskgate/trust-tools Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate. MCP serverVerified domain · obeliskgate.comRemote | — | — | ||
| com.oksigenia/checker-mcp Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first. MCP serverVerified domain · oksigenia.comLocal · npm | — | — | ||
| com.olane/copass-local Local encryption and project setup plugin for Copass. Keys never leave your machine. MCP serverVerified domain · olane.comLocal · PyPI | — | — | ||
| com.olane/cosync-local Local encryption and project setup plugin for CoSync. Keys never leave your machine. MCP serverVerified domain · olane.comLocal · PyPI | — | — | ||
| com.pentest-tools/mcp-server MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM. MCP serverVerified domain · pentest-tools.comRemote | — | — | ||
| com.pentonym/clearance US & EU trademark, domain & handle clearance — a signed three-state verdict, not legal advice. MCP serverVerified domain · pentonym.comRemote | — | — | ||
| ConsentLayer Cookie consent for GDPR/CCPA: scan sites for trackers, configure consent banners, get install code. MCP serverVerified domain · consentlayer.comRemote | — | — | ||
| ContinueOps Public MCP BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA. MCP serverVerified domain · continueops.comRemote | — | — | ||
| Contractor Licence Changes Did this contractor's licence change? Observed lapses and reinstatements, not a snapshot. MCP serverVerified domain · ottobot.agencyRemote | — | — | ||
| ContrastAPI 55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key. MCP serverVerified domain · contrastcyber.comRemote | — | — | ||
| ControlDrill List, schedule, and retrieve evidence for ControlDrill incident-response tabletop exercises. MCP serverVerified domain · controldrill.comRemote | — | — | ||
| Cookie Compliance Add a cookie consent banner that blocks trackers before consent and records proof of consent. MCP serverVerified domain · cookie-compliance.coRemote | — | — | ||
| Crovia — verifiable silence (TACET) and Crovia Seal Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals MCP serverVerified domain · croviatrust.comRemote | — | — | ||
| Custosa Tools Scans schema metadata to classify PHI, score HIPAA readiness, and generate compliant migrations. MCP serverVerified domain · custosa.comRemote | — | — | ||
| CVE Intelligence by Casco Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key. MCP serverVerified domain · casco.comRemote | — | — | ||
| CVE Risk Check Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is. MCP serverVerified domain · openkrill.appRemote | — | — | ||
| CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch) CVE advisories: high/critical NVD vulns, daily digest. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch) Cybersecurity news & breach alerts: hacks, patches. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| CyberSPF Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card. MCP serverVerified domain · cyberspf.comLocal · PyPI | — | — | ||
| CYBO Attest Scan, fix and justify your application code until it is approved to ship. MCP serverVerified domain · ulapcybo.appRemote | — | — | ||
| Cybret findings Validated API and app vulnerability findings with remediation guidance. MCP serverVerified domain · cybret.aiRemote | — | — | ||
| Código 07 · Human verification in Peru Marketplace of vetted human verifiers in Peru, hired and paid by AI agents in USDC via x402. MCP serverVerified domain · codigo07.vercel.appRemote | — | — | ||
| DataNexus MCP Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains. MCP serverVerified domain · datanexusmcp.comLocal · npm | — | — | ||
| Debian Security Advisories — buy per-query in-session (debianwatch) Debian Security Advisories (DSA). $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Deltabridge Threat Intelligence Cyber threat intelligence: threat actors, malware, CVEs, IOCs, ATT&CK and analyst briefs. MCP serverVerified domain · deltabridge.aiRemote | — | — | ||
| Dependency Vulnerability Tracker — package security advisories ($0.01/query) Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Domain Health Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers. MCP serverVerified domain · modernmustardseed.comRemote | — | — | ||
| Dregs Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules. MCP serverVerified domain · dregs.comRemote | — | — | ||
| Employee Operations — Access Request Review — Larkspur Partners (81479355) Free to compete: testnet faucet funds everything. 12 synthetic access request exception cases:… MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Enoki Test your AI agents for security and safety weaknesses, and re-verify the fixes. MCP serverVerified domain · enokilabs.aiRemote | — | — | ||
| ENYAL by Greenland AI Accounts are powered by ENYAL identity, and records are verifiable without trusting us. MCP serverVerified domain · enyal.aiRemote | — | — | ||
| EuroComply EU AI Act Classify AI systems by EU AI Act risk tier, estimate fines, write Art. 50 notices, list deadlines. MCP serverVerified domain · eurogpsr.comRemote | — | — | ||
| Evolize Accessibility scans with evidence, public reports, and fresh checks after fixes. MCP serverVerified domain · evolize.comRemote | — | — | ||
| Excession Labs: CVE intelligence and security research Search CVEs, source software/version evidence, KEV, EPSS and public security research. MCP serverVerified domain · excessionlabs.aiRemote | — | — | ||
| ExecBro Catches what reading the code misses: AI agents check running React Native apps MCP serverVerified domain · execbro.comLocal · npm | — | — | ||
| Exepal Safety tools for AI agents: safe page reader, prompt-injection, secrets, PII and MCP server scans MCP serverVerified domain · exepal.comRemote | — | — | ||
| Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs) MCP serverVerified domain · exploit-intel.comLocal · PyPI | — | — | ||
| Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb) Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Fairquery Agent Trust & Data Safety PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check. MCP serverVerified domain · getfairquery.comLocal · npm | — | — | ||
| FEDLIN Scanners Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP. MCP serverVerified domain · fedlin.comRemote | — | — | ||
| FET112 Security intelligence for AI agents monitoring Ethereum before actions. MCP serverVerified domain · fet112.comRemote | — | — | ||
| FillTrust security questionnaire corpus Guidance for answering vendor security questionnaires. Every result carries the page it came from. MCP serverVerified domain · filltrust.comRemote | — | — | ||
| FlawPilot Scan websites and code for security, performance and SEO issues from your AI assistant. MCP serverVerified domain · flawpilot.comRemote | — | — | ||
| Front Sentinel Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls MCP serverVerified domain · frontsentinel.comRemote | — | — | ||
| GeekWala Dependency Scanner Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token. MCP serverVerified domain · geekwala.comRemote | — | — | ||
| Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch) Go vulns: CVEs per module, fixed versions. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Go-Live Check Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching. MCP serverVerified domain · dontdeployonfriday.comRemote | — | — | ||
| Grisoco AI security audits Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports. MCP serverVerified domain · grisoco.comRemote | — | — | ||
| GuardCue Checks a site built with AI tools for security problems and gives the fix in plain English. MCP serverVerified domain · guardcue.comRemote | — | — | ||
| Hash Generator Got Simplified Compute MD5, SHA-256 or SHA-512 hashes of text. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| Helixar Security Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases. MCP serverVerified domain · helixar.aiRemote | — | — | ||
| HostSherlock Check SPF, DKIM, DMARC and MX of any domain, and read the DMARC reports of domains you monitor. MCP serverVerified domain · hostsherlock.comRemote | — | — | ||
| Human for AI Ask a human for legal review, confirmation, a signature, or a physical-world act MCP serverVerified domain · yourhuman.aiRemote | — | — | ||
| io.github.KryptosAI/mcp-seatbelt MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine. MCP serverGitHub-verified authorLocal · npm | — | — | ||
| IP99 IP risk & geolocation Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key. MCP serverVerified domain · ip99.comRemote | — | — | ||
| IPMusk Residential and static proxies: check usage, build proxy URLs, open tickets, get payment links. MCP serverVerified domain · ipmusk.comRemote | — | — | ||
| isIPsafe Check whether an IP address or network is malicious and report abusive IPs to isIPsafe. MCP serverVerified domain · isipsafe.comRemote | — | — | ||
| isMalicious threat intelligence for AI agents Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans MCP serverVerified domain · ismalicious.comLocal · npm | — | — | ||
| IT Security — Access Change Request Recertify — Alder Court Partners (b578285f) Free to compete: testnet faucet funds everything. 12 synthetic access change request exception… MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Jeevesus — DugganUSA threat-intel MCP Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks. MCP serverVerified domain · dugganusa.comRemote | — | — | ||
| Jithox EU Counterparty Sanctions Preflight Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict. MCP serverVerified domain · jithox.comRemote | — | — | ||
| Katla GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies. MCP serverVerified domain · katla.appRemote | — | — | ||
| Kenwea Notary Signed, traced record of what an npm package or file attempts when run, network included. No key. MCP serverVerified domain · www.kenwea.comRemote | — | — | ||
| KEVWire Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources. MCP serverVerified domain · kevwire.comRemote | — | — | ||
| Keycloak Admin Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events. MCP serverGitHub-verified authorLocal · npm | — | — | ||
| KeyHalve - verify sealed documents Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys. MCP serverVerified domain · keyhalve.comLocal · npm | — | — | ||
| KeySlip Send and read one-time encrypted secrets with local encryption. MCP serverVerified domain · keyslip.appLocal · MCPB | — | — | ||
| KeyZula Use passwords and API keys from your KeyZula vault without the assistant seeing them. MCP serverVerified domain · keyzula.comLocal · npm | — | — | ||
| Kin Connect accounts once. Set what agents may do per account. Enforced when the action runs. MCP serverVerified domain · kinlab.aiRemote | — | — | ||
| Kindnod cookie consent GDPR cookie banner any coding agent can install with no account: provision, snippet, scan, verify. MCP serverVerified domain · kindnod.comRemote | — | — | ||
| Kodem Ask about your Kodem Security data and act on findings in plain language, with your permissions. MCP serverVerified domain · kodemsecurity.comRemote | — | — | ||
| Koot by Datakoot One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places. MCP serverVerified domain · datakoot.comRemote | — | — | ||
| LaunchTrust Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure. MCP serverVerified domain · launchtrust.coRemote | — | — | ||
| LeakGuard Find and redact leaked secrets, wallet keys and PII before an AI agent sends text. MCP serverVerified domain · youraitools.coLocal · npm | — | — | ||
| Licensed House Painters Find licensed house painters in 11 US states, with dated license status from state boards. MCP serverVerified domain · ottobot.agencyRemote | — | — | ||
| Lightbringer Register innovations, request patent preparation, and collaborate with Lightbringer’s patent team. MCP serverVerified domain · lightbringer.comRemote | — | — | ||
| Lorg Check Is this token a trap? Is this address safe to pay? Signed verdicts on Base and Ethereum. MCP serverVerified domain · lorglabs.comRemote | — | — | ||
| MacroCyber Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes. MCP serverVerified domain · macrocyber.coRemote | — | — | ||
| MacTech CMMC / NIST 800-171 NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation. MCP serverVerified domain · www.mactechsolutionsllc.comRemote | — | — | ||
| MacTech STIG 2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export. MCP serverVerified domain · www.mactechsolutionsllc.comRemote | — | — | ||
| Malinois Check a live app you own for public databases, leaked keys and exposed files. MCP serverVerified domain · malinois.appRemote | — | — | ||
| MCPFax On-Chain Toolkit The on-chain facts you need in the seconds before you transact. MCP serverVerified domain · mcpscores.comRemote | — | — | ||
| Merron Inspect selected project excerpts and screen user-confirmed facts for bounded EU AI Act readiness. MCP serverVerified domain · merron.appRemote | — | — | ||
| MeWeApps Deep-Tech Scanners Free PQC TLS, CRA disclosure, green claims, battery passport, CRISPR, REACH and URDF scanners. MCP serverVerified domain · meweapps.comRemote | — | — | ||
| MFSMAI Sentinel Risk checks for BNB Chain tokens, wallets and ERC-8004 AI agents before you pay or trade. MCP serverVerified domain · mfsmai.comRemote | — | — | ||
| Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch) MSRC Windows updates: CVE rollups, Patch Tuesday. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Midkernel Threat Intel Free, read-only public-source threat intel over MCP. No account or API key. MCP serverVerified domain · midkernel.comRemote | — | — | ||
| MobileValidate Check phone numbers (WhatsApp, Telegram, carrier, spam reputation) and e-mail addresses. MCP serverVerified domain · mobilevalidate.comLocal · npm | — | — | ||
| MX Verdict Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health. MCP serverVerified domain · mxverdict.comRemote | — | — | ||
| N0N4 Guardian C2PA sign/verify for AI agents, prompt-injection scanning, and signed M2M custody handoffs. MCP serverVerified domain · n0n4.com | — | — | ||
| Nizh Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools. MCP serverVerified domain · nizh.comRemote | — | — | ||
| Odile Gate Free, no signup: per-app keys, allowed calls, approvals and an audit log for your API or model key. MCP serverVerified domain · odilelabs.comRemote | — | — | ||
| Opzyai Pro Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets. MCP serverVerified domain · opzyai.comRemote | — | — | ||
| Opzyai Security Check Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs. MCP serverVerified domain · opzyai.comLocal · npm | — | — | ||
| Opzyai Vibe Check Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds. MCP serverVerified domain · opzyai.comRemote | — | — | ||
| OrionCMD Checks Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402). MCP serverVerified domain · api.orioncmd.comRemote | — | — | ||
| Ostorlab Query and act on your Ostorlab scans, vulnerabilities, tickets and assets. MCP serverVerified domain · ostorlab.coRemote | — | — | ||
| Password Generator Got Simplified Generate strong passwords with the character sets you choose. MCP serverVerified domain · gotsimplified.comRemote | — | — | ||
| PentaTrail CTEM PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level MCP serverVerified domain · pentatrail.coRemote | — | — | ||
| Pentest requests, security headers checker, guides Request a penetration test, grade a website's HTTP security headers, and search pentest guides. MCP serverVerified domain · penetrationtestservices.comRemote | — | — | ||
| PentestCompare: pentest provider data Sourced data on 66 penetration testing providers: scope, delivery, published prices, retests. MCP serverVerified domain · pentestcompare.comRemote | — | — | ||
| Person Enrichment Identify a person from partial information and return a profile with a confidence score per field. MCP serverVerified domain · theona.appRemote | — | — | ||
| Pilotex KYC KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result. MCP serverVerified domain · pilotex.clubRemote | — | — | ||
| PkgGuard Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker MCP serverVerified domain · youraitools.coLocal · npm | — | — | ||
| Port Scanner API Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup. MCP serverVerified domain · portscan.comRemote | — | — | ||
| Porticol Coding agents call your APIs without the keys. A person approves risky calls; each call is logged. MCP serverVerified domain · porticol.app | — | — | ||
| Pre-Trip compliance scanner Screen regulated-health marketing copy against source-cited rulesets, all 50 states. MCP serverVerified domain · kesey.agencyLocal · npm | — | — | ||
| Preflight Scans an MCP server for security gaps before your agent connects. Free tier, no signup. MCP serverVerified domain · allthepossibles.comRemote | — | — | ||
| PrivacyPill GDPR cookie banners with Consent Mode v2, plus a free scan of what loads before consent. MCP serverVerified domain · privacy-pill-consent-studio.lovable.appRemote | — | — | ||
| Provian Self-custodial agent wallet on Base and a verifiable record of its work (Provenance Envelopes). MCP serverVerified domain · provian.aiRemote | — | — | ||
| Rust Crate Security Advisories — buy per-query in-session (rustsecwatch) Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Sanctions & PEP Screening Screen a name in one call against US OFAC SDN, the EU Consolidated Financial Sanctions List, UK… MCP serverVerified domain · macaroonnetwork.comLocal · PyPI | — | — | ||
| ScamVerify Threat Verification AI-powered scam and threat verification for phone numbers, URLs, texts, and emails. MCP serverVerified domain · scamverify.aiRemote | — | — | ||
| Scrub MCP Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported. MCP serverVerified domain · scrub-mcp.malgorath.comRemote | — | — | ||
| SecureNow Production security for Node.js apps: investigate live attacks, block IPs, tune detections. MCP serverVerified domain · securenow.aiLocal · npm | — | — | ||
| Security Intel MCP CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys. MCP serverVerified domain · datakoot.comRemote | — | — | ||
| Sekura Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent. MCP serverVerified domain · sekura.aiRemote | — | — | ||
| ShipSafe — Independent security verification Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access. MCP serverVerified domain · ship-safe.coLocal · npm | — | — | ||
| Skarn Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted MCP serverVerified domain · getskarn.comLocal · npm | — | — | ||
| SkillTotal Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. MCP serverVerified domain · skilltotal.aiLocal · PyPI | — | — | ||
| Strix AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets. MCP serverVerified domain · strix.aiRemote | — | — | ||
| Summer Telehealth support for Claude, Codex and Cursor: investigate cases and connect your tools. MCP serverVerified domain · gosummer.aiRemote | — | — | ||
| TheLeaf Threat Observatory Read-only honeypot observations and evidence. Invite-only API key; request access on our website. MCP serverVerified domain · observatory.theleaf.aiRemote | — | — | ||
| ThornGuard Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging. MCP serverVerified domain · thorns.qwady.app | — | — | ||
| Trent Security reviews, threat models over a repo or website, and remediation tracking, in your editor. MCP serverVerified domain · trent.aiRemote | — | — | ||
| Trusty Squire Provision, ship, and pay from your coding agent — keys and cards never leave the vault. MCP serverVerified domain · trustysquire.aiLocal · npm | — | — | ||
| Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session Ubuntu security: USNs per CVE, patched versions. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| Unit 42 Threat Research & Malware Analysis — buy per-query in-session (unit42watch) Unit 42 malware analysis & threat research. $0.01/query. Be born in one call — free testnet funds. MCP serverVerified domain · a2awire.comRemote | — | — | ||
| US Business Verification (KYB) MCP Server Keyless KYB: verify, OFAC SDN + GLEIF ownership/UBO graph (parents+subsidiaries). NY/CO/CT. No key. MCP serverVerified domain · greyridgesignals.aiRemote | — | — | ||
| vault-ask Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat. MCP serverVerified domain · erseni.comLocal · npm | — | — | ||
| VerifyDesk Verify French and UK companies, EU VAT and IBANs; screen OFAC, UN, EU and UK sanctions lists. MCP serverVerified domain · agenttoolworks.comRemote | 0 | — | ||
| Vongola Read-only operator instrumentation for the vongola TLS gateway. MCP serverVerified domain · qompass.aiLocal · MCPB | — | — | ||
| VulX Watch Independent security review for AI-built apps. Watch a GitHub repo. Never a patch. MCP serverVerified domain · vulx.aiRemote | — | — | ||
| Vysion Darknet threat intelligence for AI assistants: leaks, documents, chat, ransomware. MCP serverVerified domain · vysion.aiRemote | — | — | ||
| ZEN SecDB ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits. MCP serverVerified domain · secdb.nttzen.cloudRemote | — | — |
Filters apply to the top 259 of 259 tools by stars.