[{"name": "io.github.aks129/healthclaw-guardrails", "kind": "mcp", "desc": "Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation", "repo": "https://github.com/aks129/HealthClawGuardrails", "install": ["https://mcp-server-production-5112.up.railway.app/mcp"], "stars": 34, "pushed": "2026-11-12T02:19:40Z", "license": "MIT", "plat": "fhir"}, {"name": "Prism Scanner", "kind": "mcp", "desc": "Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.", "repo": "https://github.com/aidongise-cell/prism-scanner", "install": ["pypi:prism-scanner"], "stars": 28, "pushed": "2026-04-07T03:44:50Z", "license": "Apache-2.0", "plat": ""}, {"name": "AI Guard", "kind": "mcp", "desc": "Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done.", "repo": "https://github.com/ai-guard-dev/eslint-plugin-ai-guard", "install": ["npm:eslint-plugin-ai-guard"], "stars": 19, "pushed": "2026-11-12T13:18:55Z", "license": "MIT", "plat": "ai-written js/ts"}, {"name": "ToolTrust Scanner", "kind": "mcp", "desc": "Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.", "repo": "https://github.com/AgentSafe-AI/tooltrust-scanner", "install": ["npm:tooltrust-mcp"], "stars": 19, "pushed": "2026-11-12T18:12:52Z", "license": "MIT", "plat": "mcp servers"}, {"name": "aikido", "kind": "claude-plugin", "desc": "Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.", "repo": "https://github.com/AikidoSec/aikido-claude-plugin.git", "install": ["claude plugin install aikido@claude-plugins-official"], "stars": 15, "pushed": "2026-11-05T16:03:26Z", "license": null, "plat": "anthropic"}, {"name": "pkgxray", "kind": "mcp", "desc": "Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.", "repo": "https://github.com/adamsjack711-ux/pkgxray", "install": ["npm:pkgxray", "https://mcp.pkgxray.ca/mcp"], "stars": 12, "pushed": "2026-11-11T16:06:10Z", "license": "MIT", "plat": "npm"}, {"name": "Corvus", "kind": "mcp", "desc": "Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.", "repo": "https://github.com/Albasha0x0/Corvus", "install": ["nuget:CorvusRE"], "stars": 11, "pushed": "2026-11-09T23:41:46Z", "license": "Apache-2.0", "plat": "net"}, {"name": "FairMind", "kind": "mcp", "desc": "Release gate for AI systems from FairMind: evaluations, framework evidence and ledger snapshots.", "repo": "https://github.com/adhit-r/fairmind", "install": ["pypi:fairmind-mcp"], "stars": 11, "pushed": "2026-11-12T16:02:53Z", "license": "AGPL-3.0", "plat": "ai systems"}, {"name": "io.github.andrasfe/vulnicheck", "kind": "mcp", "desc": "HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.", "repo": "https://github.com/andrasfe/vulnicheck", "install": ["oci:docker.io/andrasfe/vulnicheck:main"], "stars": 11, "pushed": "2026-02-22T14:45:13Z", "license": "MIT", "plat": "python"}, {"name": "CookieGuard", "kind": "mcp", "desc": "Audit HTTP cookie security against your local policy. Returns findings without cookie values.", "repo": "https://github.com/aiscihub/cookieguard-ai", "install": ["npm:@aiscihub/cookieguard-mcp"], "stars": 5, "pushed": "2026-11-08T03:36:56Z", "license": "MIT", "plat": ""}, {"name": "Android Security Analyzer", "kind": "mcp", "desc": "MCP server for static security analysis of Android source code", "repo": "https://github.com/ako2345/android-security-analyzer", "install": ["https://android-security-analyzer.ako-labs.workers.dev/mcp"], "stars": 3, "pushed": "2026-03-14T22:06:00Z", "license": null, "plat": "android source code"}, {"name": "io.github.Aitejiu/jev", "kind": "mcp", "desc": "Jev judgments for agents: injection scanning, shell risk gating, ranking", "repo": "https://github.com/Aitejiu/jev-harness-lab", "install": ["pypi:jev-mcp"], "stars": 3, "pushed": "2026-09-21T08:00:57Z", "license": null, "plat": "jev"}, {"name": "io.github.shotwellj/air-blackbox", "kind": "mcp", "desc": "EU AI Act compliance scanner for Python AI agents — scan, analyze, and remediate", "repo": "https://github.com/airblackbox/air-blackbox-mcp", "install": ["pypi:air-blackbox-mcp"], "stars": 3, "pushed": "2026-10-15T19:32:02Z", "license": "Apache-2.0", "plat": "python ai agents"}, {"name": "Actenon Kernel", "kind": "mcp", "desc": "Verify consequential AI actions before they execute.", "repo": "https://github.com/Actenon/actenon-kernel", "install": ["pypi:actenon-kernel"], "stars": 2, "pushed": "2026-11-02T22:01:22Z", "license": "Apache-2.0", "plat": "ai actions"}, {"name": "CVSS Calculator MCP", "kind": "mcp", "desc": "Calculate and validate CVSS 2.0, 3.0, 3.1, and 4.0 base scores.", "repo": "https://github.com/alfa-reza/cvss-calculator-mcp", "install": ["https://cvss.my.id/mcp"], "stars": 2, "pushed": "2026-11-08T10:53:23Z", "license": "Apache-2.0", "plat": ""}, {"name": "Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner", "kind": "mcp", "desc": "GitHub Secret Scanner - Find Leaked API Keys | Gitleaks", "repo": "https://github.com/AnshumanAtrey/gitleaks-github-secret-scanner", "install": ["https://mcp.apify.com/?tools=anshumanatrey/gitleaks-github-secret-scanner"], "stars": 2, "pushed": "2026-11-12T04:54:35Z", "license": "MIT", "plat": "github"}, {"name": "42crunch-api-security-testing", "kind": "claude-plugin", "desc": "Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.", "repo": "https://github.com/42Crunch-AI/claude-plugins.git", "install": ["claude plugin install 42crunch-api-security-testing@claude-plugins-official"], "stars": 1, "pushed": "2026-11-03T16:09:53Z", "license": null, "plat": "anthropic"}, {"name": "Aileron Journal", "kind": "mcp", "desc": "Read-only queries over Aileron audit journals: verify integrity, search recorded tool calls", "repo": "https://github.com/aileron-sh/aileron", "install": ["pypi:aileron"], "stars": 1, "pushed": "2026-11-12T15:05:34Z", "license": "Apache-2.0", "plat": "aileron"}, {"name": "Oxiploitability", "kind": "mcp", "desc": "Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.", "repo": "https://github.com/abelreqma/oxiploitability-mcp", "install": ["cargo:oxiploitability-mcp"], "stars": 1, "pushed": "2026-10-23T00:16:22Z", "license": "Apache-2.0", "plat": ""}, {"name": "SecLens.ONE Email Security", "kind": "mcp", "desc": "Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.", "repo": "https://github.com/42Sec-Pte-Ltd/seclens", "install": ["https://seclens.one/mcp"], "stars": 1, "pushed": "2026-10-27T13:18:45Z", "license": "Apache-2.0", "plat": ""}, {"name": "VeriSight MCP", "kind": "mcp", "desc": "Sub-3ms OpenCV 5 image forensics, deepfake, AI inpainting & tamper fraud detection MCP.", "repo": "https://github.com/Adityarajtiwari880/verisight", "install": ["pypi:verisight"], "stars": 1, "pushed": "2026-11-12T13:04:25Z", "license": "Apache-2.0", "plat": ""}, {"name": "AcidPeak", "kind": "mcp", "desc": "Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches.", "repo": null, "install": ["https://www.acidpeak.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Agent Guestbook", "kind": "mcp", "desc": "Read and verify the Blue Cloud Cyber agent guestbook, and sign one Ed25519 entry per UTC day.", "repo": null, "install": ["npm:@bluecloudcyberai/guestbook-mcp"], "stars": null, "pushed": null, "license": null, "plat": "blue cloud cyber"}, {"name": "AgentProof", "kind": "mcp", "desc": "Start AgentProof security audits of websites you own or may test, and read reports and findings.", "repo": null, "install": ["https://isagentproof.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "AGORA Omega", "kind": "mcp", "desc": "Pay-per-call checks for AI agents: sanctions, MiCA, French KYB, AI Act. USDC via x402.", "repo": null, "install": ["https://agoraverify.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "AI application security research and assessments", "kind": "mcp", "desc": "Read AI security guides and lab research, and request an LLM or AI agent security assessment.", "repo": "https://github.com/Excession-Labs/mcp-servers", "install": ["https://airedteamingservices.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "ai security"}, {"name": "AI Website Security", "kind": "mcp", "desc": "Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.", "repo": null, "install": ["https://scan.aiwebsitesecurity.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ai.kaiv/dependency-trust", "kind": "mcp", "desc": "Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.", "repo": null, "install": ["https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ai.smithery/PabloLec-keyprobe-mcp", "kind": "mcp", "desc": "Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…", "repo": "https://github.com/PabloLec/KeyProbe-MCP", "install": ["https://server.smithery.ai/@PabloLec/keyprobe-mcp/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "AIS CVE Priorities — daily exploit-ranked patch list for AI agents", "kind": "mcp", "desc": "Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full", "repo": null, "install": ["https://api.aislabs.ai/cve/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "app.vercel.exploitwatch-kappa/exploitwatch", "kind": "mcp", "desc": "Check dependencies against CISA's real Known Exploited Vulnerabilities feed.", "repo": null, "install": ["https://exploitwatch-kappa.vercel.app/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": "cisa"}, {"name": "Arbiter", "kind": "mcp", "desc": "Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.", "repo": null, "install": ["https://api.arbiterscan.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Arcjet", "kind": "mcp", "desc": "An MCP server for Arcjet - the runtime security platform that ships with your AI code.", "repo": "https://github.com/arcjet/mcp", "install": ["https://api.arcjet.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "arcjet"}, {"name": "Aribot", "kind": "mcp", "desc": "Threat modeling, code, API & cloud security, shadow-AI & compliance governance.", "repo": null, "install": ["https://mcp.aribot.ayurak.com/"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ASL Colorado Complaint Access", "kind": "mcp", "desc": "Colorado DORA license lookups, the SOMB provider directory and answers from the rules and standards.", "repo": null, "install": ["https://mcp.autosecurelogin.com/colorado/mcp"], "stars": null, "pushed": null, "license": null, "plat": "asl colorado"}, {"name": "ASMHunter", "kind": "mcp", "desc": "Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports.", "repo": null, "install": ["pypi:asmhunter-mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ATK Security Checks", "kind": "mcp", "desc": "PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps", "repo": null, "install": ["https://atkvn.com/agent/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "AttackerView quick website security check", "kind": "mcp", "desc": "Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed.", "repo": null, "install": ["https://attackerview.com/api/public/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Auditon security assessments", "kind": "mcp", "desc": "Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.", "repo": null, "install": ["https://auditon.co/mcp"], "stars": null, "pushed": null, "license": null, "plat": "auditon"}, {"name": "AurelianFlo", "kind": "mcp", "desc": "OFAC wallet screening, EDD memos, exposure forecasts, review queues and watchlists. Free to try.", "repo": "https://github.com/kelm2021/aurelianflo-public", "install": ["https://api.aurelianflo.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "ofac"}, {"name": "AuthiChain", "kind": "mcp", "desc": "Verification of signed records, plus an EU DPP check.", "repo": "https://github.com/undone0603/authichain-unified", "install": ["https://authichain.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "verification"}, {"name": "Automaton Onchain Tools", "kind": "mcp", "desc": "Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan.", "repo": null, "install": ["https://automaton-tx-explainer.vercel.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": "base/eth/bsc"}, {"name": "Axiom Solana Token Risk", "kind": "mcp", "desc": "Solana SPL token risk checks: free preview tool plus links to paid x402 (USDC) full reports.", "repo": null, "install": ["https://axiom-risk-mcp.vercel.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": "solana"}, {"name": "Aya scam check", "kind": "mcp", "desc": "Screens a message or its links for scam patterns with Aya's offline rules, in English and Spanish.", "repo": null, "install": ["https://mcp.autosecurelogin.com/aya/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "BizVerify", "kind": "mcp", "desc": "KYB for AI agents: verify business registrations from MCP clients.", "repo": "https://github.com/BizVerify/bizverify-mcp", "install": ["https://api.bizverify.co/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Black Duck Security Scanner", "kind": "mcp", "desc": "AI-powered security scanning using Black Duck Signal for vulnerability detection.", "repo": "https://github.com/blackducksoftware/mcp-server", "install": ["npm:@black-duck/mcp-server", "mcpb:https://github.com/blackducksoftware/mcp-server/releases/download/v1.1.8/black-duck-mcp-1.1.8.mcpb"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Bot403", "kind": "mcp", "desc": "Invisible bot shield for HTML forms: the browser solves a proof of work and your server checks it.", "repo": null, "install": ["https://bot403.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "html forms"}, {"name": "Bright Security", "kind": "mcp", "desc": "Enables AI agents to access Bright Security tools for app discovery and security testing.", "repo": null, "install": ["https://{instance}.brightsec.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "bright security"}, {"name": "Bynn", "kind": "mcp", "desc": "Document fraud detection for manipulated, fake and AI-generated PDF and image documents.", "repo": "https://github.com/Bynn-Intelligence/skills", "install": ["https://mcp.bynn.com"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ByteRay AI", "kind": "mcp", "desc": "Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai", "repo": null, "install": ["https://mcp.byteray.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Caisey", "kind": "mcp", "desc": "Troubleshoot enrolled client PCs from your AI client, with human approval and an audit trail.", "repo": null, "install": ["https://helpforsupport.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "captcha.cc Human Verification", "kind": "mcp", "desc": "Human verification CAPTCHA with visual and selective-listening audio challenges.", "repo": "https://github.com/earonesty/captcha", "install": ["https://captcha.cc/mcp"], "stars": null, "pushed": null, "license": null, "plat": "captcha.cc"}, {"name": "CERT-FR Security Advisories — buy per-query in-session (certfrwatch)", "kind": "mcp", "desc": "CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/certfrwatch-cert-fr-anssi-national-security-advisories-b65f45/http"], "stars": null, "pushed": null, "license": null, "plat": "cert-fr"}, {"name": "Chainitor", "kind": "mcp", "desc": "Monitor EVM wallets, tokens, contracts and Safe multisigs, and read their alerts.", "repo": null, "install": ["https://mcp.chainitor.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "chainitor"}, {"name": "Chainsaw package firewall", "kind": "mcp", "desc": "Package firewall for agents: route npm, pip and docker installs through Chainsaw.", "repo": null, "install": ["https://chain305.com/chainproxy/mcp"], "stars": null, "pushed": null, "license": null, "plat": "chainsaw package firewall"}, {"name": "CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)", "kind": "mcp", "desc": "CISA advisories & ICS alerts: new CVEs, remediation. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/cisaalerts-cisa-cybersecurity-ics-advisories-55420c/http"], "stars": null, "pushed": null, "license": null, "plat": "cisa"}, {"name": "CISA Known Exploited Vulnerabilities (kevwatch)", "kind": "mcp", "desc": "CISA KEV catalog: active-exploit alerts, hourly. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/cisa-known-exploited-vulnerabilities-kevwatch-aedaf3/http"], "stars": null, "pushed": null, "license": null, "plat": "cisa"}, {"name": "co.auditro/auditro", "kind": "mcp", "desc": "UAE ICV compliance: governed scores, evidence gaps and actions with deterministic numbers.", "repo": null, "install": ["https://app.auditro.co/mcp"], "stars": null, "pushed": null, "license": null, "plat": "auditro"}, {"name": "com.arcnautical/mcp", "kind": "mcp", "desc": "Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included.", "repo": "https://github.com/arcnautical/arcnautical-mcp", "install": ["npm:@arcnautical/mcp", "https://mcp.arcnautical.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.arcself/arc-security", "kind": "mcp", "desc": "Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.", "repo": "https://github.com/ArcSelf/arc-security-mcp", "install": ["npm:arc-security-mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.bidda/bidda-compliance", "kind": "mcp", "desc": "10,065 source-verified compliance nodes, 39 pillars, 25 MCP tools (EU AI Act, GDPR, NIST, MITRE).", "repo": null, "install": ["https://bidda.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "compliance"}, {"name": "com.cautellus/scam-detection", "kind": "mcp", "desc": "Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages.", "repo": null, "install": ["https://cautellus.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": "scam detection"}, {"name": "com.chaink9/chaink9", "kind": "mcp", "desc": "Token risk checks on BSC, ETH, Base and Arc: trades the token on a fork. Paid in USDC/USDT via x402.", "repo": "https://github.com/ChainK9/chaink9-mcp", "install": ["npm:chaink9-mcp", "https://api.chaink9.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "chaink9"}, {"name": "com.checkmarx/checkmarx", "kind": "mcp", "desc": "Official Checkmarx MCP Server", "repo": "https://github.com/Checkmarx/cx-agentic-ai", "install": ["https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"], "stars": null, "pushed": null, "license": null, "plat": "checkmarx"}, {"name": "com.cognivators/mcp-safeguard", "kind": "mcp", "desc": "MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.", "repo": "https://gitlab.com/anasmohiuddinsyed/mcp-safeguard", "install": ["pypi:mcp-safeguard"], "stars": null, "pushed": null, "license": null, "plat": "security"}, {"name": "com.compliapi/screening", "kind": "mcp", "desc": "OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo", "repo": null, "install": ["https://api.compliapi.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "com.compliapi"}, {"name": "com.craftedtrust/mcp-shield", "kind": "mcp", "desc": "Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.", "repo": "https://github.com/cybercraftsolutionsllc/trust-gated-agent-example", "install": ["https://mcp.craftedtrust.com/api/v1/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.dechonet/mcp", "kind": "mcp", "desc": "30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.", "repo": "https://github.com/node-man/dechonet-mcp", "install": ["npm:dechonet-mcp", "https://dechonet.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.edgethirteen.www/exploitwatch", "kind": "mcp", "desc": "Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.", "repo": null, "install": ["https://www.edgethirteen.com/api/mcp/exploitwatch"], "stars": null, "pushed": null, "license": null, "plat": "cisa"}, {"name": "com.edgethirteen.www/tariff-refund-screen", "kind": "mcp", "desc": "Screen US public companies for IEEPA tariff-refund exposure disclosed in their SEC filings.", "repo": null, "install": ["https://www.edgethirteen.com/api/mcp/tariff-refund-screen"], "stars": null, "pushed": null, "license": null, "plat": "ieepa"}, {"name": "com.edgethirteen.www/triageshield", "kind": "mcp", "desc": "Verify a vuln report's file/line/function claims against a real GitHub repo.", "repo": null, "install": ["https://www.edgethirteen.com/api/mcp/triageshield"], "stars": null, "pushed": null, "license": null, "plat": "github"}, {"name": "com.encompassconfirm/ec360", "kind": "mcp", "desc": "KYC automation from authoritative public sources. Requires an Encompass licence.", "repo": null, "install": ["https://encompass-mcp.encompassconfirm.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.fidacy/ai-agent-firewall", "kind": "mcp", "desc": "Every agent action watched, every money-moving one gated, every verdict independently verifiable.", "repo": "https://github.com/lucaslubi/fidacy-mcp", "install": ["npm:@fidacy/mcp"], "stars": null, "pushed": null, "license": null, "plat": "agent actions"}, {"name": "com.grcmigrate/directory", "kind": "mcp", "desc": "Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.", "repo": null, "install": ["https://grcmigrate.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "com.grcmigrate/directory"}, {"name": "com.kenoodl/verify", "kind": "mcp", "desc": "Runs your code against a contract; HELD or BROKE at the exact input. Deterministic. 0.10 USDC/call.", "repo": null, "install": ["https://kenoodl.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "com.kenoodl/verify"}, {"name": "com.keyboardcrumbs/mcp", "kind": "mcp", "desc": "Live threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.", "repo": "https://github.com/kbcrumbs/mcp", "install": ["pypi:keyboardcrumbs-mcp"], "stars": null, "pushed": null, "license": null, "plat": "com.keyboardcrumbs/mcp"}, {"name": "com.mcparmory/pagerduty", "kind": "mcp", "desc": "Manage incidents, on-call schedules, escalation policies, and alert notifications", "repo": "https://github.com/mcparmory/registry", "install": ["pypi:mcparmory-pagerduty", "oci:ghcr.io/mcparmory/pagerduty:1.0.2"], "stars": null, "pushed": null, "license": null, "plat": "pagerduty"}, {"name": "com.metricprovenance/odgs-mcp-server", "kind": "mcp", "desc": "ODGS governance enforcement — validation, regulation compilation, drift detection, signed S-Certs.", "repo": "https://github.com/MetricProvenance/odgs-mcp-server", "install": ["pypi:odgs-mcp-server"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.mnemopay/gridstamp", "kind": "mcp", "desc": "Tamper-evident spatial receipts: cryptographic proof-of-presence for AV fleets, logistics and AR.", "repo": "https://github.com/mnemopay/gridstamp", "install": ["npm:gridstamp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "com.obeliskgate/trust-tools", "kind": "mcp", "desc": "Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.", "repo": null, "install": ["https://obeliskgate.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "obelisk gate"}, {"name": "ContinueOps Public MCP", "kind": "mcp", "desc": "BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.", "repo": null, "install": ["https://tjcjvxibsrxizwuajypz.supabase.co/functions/v1/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Contractor Licence Changes", "kind": "mcp", "desc": "Did this contractor's licence change? Observed lapses and reinstatements, not a snapshot.", "repo": "https://github.com/modelcontextprotocol/registry", "install": ["https://license-changes-mcp.ottobot2025.workers.dev/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ContrastAPI", "kind": "mcp", "desc": "55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.", "repo": "https://github.com/UPinar/contrastapi", "install": ["https://api.contrastcyber.com/mcp/"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Crovia — verifiable silence (TACET) and Crovia Seal", "kind": "mcp", "desc": "Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals", "repo": "https://github.com/croviatrust/countersign", "install": ["https://croviatrust.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "bitcoin-anchored observations"}, {"name": "Custosa Tools", "kind": "mcp", "desc": "Scans schema metadata to classify PHI, score HIPAA readiness, and generate compliant migrations.", "repo": null, "install": ["https://mcp.custosa.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "hipaa"}, {"name": "CVE Intelligence by Casco", "kind": "mcp", "desc": "Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.", "repo": null, "install": ["https://casco.com/cve/mcp"], "stars": null, "pushed": null, "license": null, "plat": "cve intelligence by casco"}, {"name": "CVE Risk Check", "kind": "mcp", "desc": "Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.", "repo": "https://github.com/nguyenhieuec/agent-tools-plugins", "install": ["https://cve.openkrill.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": "cve risk"}, {"name": "CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)", "kind": "mcp", "desc": "CVE advisories: high/critical NVD vulns, daily digest. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/cvewatch-cve-security-advisories-nvd-high-critical-9a16b6/http"], "stars": null, "pushed": null, "license": null, "plat": "nvd"}, {"name": "Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch)", "kind": "mcp", "desc": "Cybersecurity news & breach alerts: hacks, patches. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/bleepingwatch-cybersecurity-news-breach-alerts-522e02/http"], "stars": null, "pushed": null, "license": null, "plat": "bleeping computer"}, {"name": "CyberSPF", "kind": "mcp", "desc": "Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card.", "repo": null, "install": ["pypi:cyberspf-mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "CYBO Attest", "kind": "mcp", "desc": "Scan, fix and justify your application code until it is approved to ship.", "repo": "https://github.com/ulap-co/cybo-attest-mcp", "install": ["https://attest.ulapcybo.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": "cybo"}, {"name": "Cybret findings", "kind": "mcp", "desc": "Validated API and app vulnerability findings with remediation guidance.", "repo": null, "install": ["https://mcp.cybret.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "cybret"}, {"name": "DataNexus MCP", "kind": "mcp", "desc": "Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.", "repo": null, "install": ["npm:@datanexusmcp/mcp-server", "https://datanexusmcp.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Debian Security Advisories — buy per-query in-session (debianwatch)", "kind": "mcp", "desc": "Debian Security Advisories (DSA). $0.01/query. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/debian-security-advisories-05eb6d/http"], "stars": null, "pushed": null, "license": null, "plat": "debian"}, {"name": "Dependency Vulnerability Tracker — package security advisories ($0.01/query)", "kind": "mcp", "desc": "Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"], "stars": null, "pushed": null, "license": null, "plat": "nvd"}, {"name": "Dregs", "kind": "mcp", "desc": "Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules.", "repo": "https://github.com/dregs-sdk/dregs-mcp", "install": ["https://dregs.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Employee Operations — Access Request Review — Larkspur Partners (81479355)", "kind": "mcp", "desc": "Free to compete: testnet faucet funds everything. 12 synthetic access request exception cases:…", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/benchmarks/access-request-review-2026-09-10-81479355/http"], "stars": null, "pushed": null, "license": null, "plat": "access request review"}, {"name": "Enoki", "kind": "mcp", "desc": "Test your AI agents for security and safety weaknesses, and re-verify the fixes.", "repo": null, "install": ["https://mcp.enokilabs.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "EuroComply EU AI Act", "kind": "mcp", "desc": "Classify AI systems by EU AI Act risk tier, estimate fines, write Art. 50 notices, list deadlines.", "repo": null, "install": ["https://eurogpsr.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Evolize", "kind": "mcp", "desc": "Accessibility scans with evidence, public reports, and fresh checks after fixes.", "repo": null, "install": ["https://evolize.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Excession Labs: CVE intelligence and security research", "kind": "mcp", "desc": "Search CVEs, source software/version evidence, KEV, EPSS and public security research.", "repo": null, "install": ["https://excessionlabs.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "excession labs"}, {"name": "ExecBro", "kind": "mcp", "desc": "Catches what reading the code misses: AI agents check running React Native apps", "repo": "https://github.com/igorzheludkov/execbro", "install": ["npm:execbro"], "stars": null, "pushed": null, "license": null, "plat": "react native"}, {"name": "Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database", "kind": "mcp", "desc": "Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)", "repo": null, "install": ["pypi:eip-mcp", "https://mcp.exploit-intel.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "exploit intelligence platform"}, {"name": "Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb)", "kind": "mcp", "desc": "Exploit-DB: new public exploits & PoCs, daily. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/exploitdb-exploit-db-new-public-exploits-pocs-e3345b/http"], "stars": null, "pushed": null, "license": null, "plat": "exploit-db"}, {"name": "FEDLIN Scanners", "kind": "mcp", "desc": "Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.", "repo": "https://github.com/fedlinllc/fedlin-mcp-server", "install": ["https://mcp.fedlin.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "fedlin"}, {"name": "FillTrust security questionnaire corpus", "kind": "mcp", "desc": "Guidance for answering vendor security questionnaires. Every result carries the page it came from.", "repo": null, "install": ["https://www.filltrust.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": "vendor security questionnaires"}, {"name": "FlawPilot", "kind": "mcp", "desc": "Scan websites and code for security, performance and SEO issues from your AI assistant.", "repo": null, "install": ["https://mcp.flawpilot.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Front Sentinel", "kind": "mcp", "desc": "Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls", "repo": null, "install": ["https://frontsentinel.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "GeekWala Dependency Scanner", "kind": "mcp", "desc": "Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.", "repo": null, "install": ["https://www.geekwala.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "geekwala"}, {"name": "Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)", "kind": "mcp", "desc": "Go vulns: CVEs per module, fixed versions. $0.01/query. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/govulnwatch-go-vulnerability-database-tracker-dac615/http"], "stars": null, "pushed": null, "license": null, "plat": "go vulnerability database"}, {"name": "Go-Live Check", "kind": "mcp", "desc": "Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.", "repo": null, "install": ["https://dontdeployonfriday.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Grisoco AI security audits", "kind": "mcp", "desc": "Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.", "repo": null, "install": ["https://grisoco.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "evm, daml"}, {"name": "GuardCue", "kind": "mcp", "desc": "Checks a site built with AI tools for security problems and gives the fix in plain English.", "repo": null, "install": ["https://api.guardcue.com/api/v1/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Helixar Security", "kind": "mcp", "desc": "Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.", "repo": "https://github.com/Helixar-AI/helixar-mcp", "install": ["https://mcp.helixar.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "helixar security"}, {"name": "HostSherlock", "kind": "mcp", "desc": "Check SPF, DKIM, DMARC and MX of any domain, and read the DMARC reports of domains you monitor.", "repo": null, "install": ["https://mcp.hostsherlock.com/v1/mcp"], "stars": null, "pushed": null, "license": null, "plat": "hostsherlock"}, {"name": "Human for AI", "kind": "mcp", "desc": "Ask a human for legal review, confirmation, a signature, or a physical-world act", "repo": null, "install": ["https://yourhuman.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "io.github.KryptosAI/mcp-seatbelt", "kind": "mcp", "desc": "MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.", "repo": "https://github.com/KryptosAI/mcp-seatbelt", "install": ["npm:@kryptosai/mcp-seatbelt"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "IP99 IP risk & geolocation", "kind": "mcp", "desc": "Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.", "repo": null, "install": ["https://ip99.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "ip99"}, {"name": "IPMusk", "kind": "mcp", "desc": "Residential and static proxies: check usage, build proxy URLs, open tickets, get payment links.", "repo": null, "install": ["https://ipmusk.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "ipmusk"}, {"name": "IT Security — Access Change Request Recertify — Alder Court Partners (b578285f)", "kind": "mcp", "desc": "Free to compete: testnet faucet funds everything. 12 synthetic access change request exception…", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/benchmarks/access-change-request-recertify-2026-09-15-b578285f/http"], "stars": null, "pushed": null, "license": null, "plat": "access change request"}, {"name": "Jithox EU Counterparty Sanctions Preflight", "kind": "mcp", "desc": "Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict.", "repo": null, "install": ["https://sanctions.mcp.jithox.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "eu sanctions"}, {"name": "Katla", "kind": "mcp", "desc": "GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.", "repo": null, "install": ["https://api.katla.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Kenwea Notary", "kind": "mcp", "desc": "Signed, traced record of what an npm package or file attempts when run, network included. No key.", "repo": "https://github.com/kenwea-protocol/kenwea", "install": ["https://mcp.kenwea.com/notary/v1"], "stars": null, "pushed": null, "license": null, "plat": "kenwea notary"}, {"name": "Kindnod cookie consent", "kind": "mcp", "desc": "GDPR cookie banner any coding agent can install with no account: provision, snippet, scan, verify.", "repo": null, "install": ["https://kindnod.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": "gdpr"}, {"name": "Kodem", "kind": "mcp", "desc": "Ask about your Kodem Security data and act on findings in plain language, with your permissions.", "repo": null, "install": ["https://api.kodemsecurity.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "kodem"}, {"name": "Koot by Datakoot", "kind": "mcp", "desc": "One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.", "repo": "https://github.com/datakoot/koot-mcp", "install": ["https://koot.datakoot.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "sec"}, {"name": "LaunchTrust", "kind": "mcp", "desc": "Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.", "repo": "https://github.com/mustafasalimerek-bit/launchtrust-mcp", "install": ["https://mcp.launchtrust.co/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Licensed House Painters", "kind": "mcp", "desc": "Find licensed house painters in 11 US states, with dated license status from state boards.", "repo": "https://github.com/modelcontextprotocol/registry", "install": ["https://house-painters.ottobot.agency/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Lorg Check", "kind": "mcp", "desc": "Is this token a trap? Is this address safe to pay? Signed verdicts on Base and Ethereum.", "repo": null, "install": ["https://api.lorglabs.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "MacroCyber", "kind": "mcp", "desc": "Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.", "repo": null, "install": ["https://macrocyber.co/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "MacTech CMMC / NIST 800-171", "kind": "mcp", "desc": "NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.", "repo": null, "install": ["https://www.mactechsolutionsllc.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": "mactech cmmc / nist 800-171"}, {"name": "MacTech STIG", "kind": "mcp", "desc": "2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.", "repo": null, "install": ["https://www.mactechsolutionsllc.com/api/mcp/stig"], "stars": null, "pushed": null, "license": null, "plat": "mactech stig"}, {"name": "Malinois", "kind": "mcp", "desc": "Check a live app you own for public databases, leaked keys and exposed files.", "repo": null, "install": ["https://malinois.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "MCPFax On-Chain Toolkit", "kind": "mcp", "desc": "The on-chain facts you need in the seconds before you transact.", "repo": null, "install": ["https://onchain-toolkit.bowling-anthony.workers.dev/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Merron", "kind": "mcp", "desc": "Inspect selected project excerpts and screen user-confirmed facts for bounded EU AI Act readiness.", "repo": null, "install": ["https://merron.app/mcp"], "stars": null, "pushed": null, "license": null, "plat": "eu ai act"}, {"name": "MeWeApps Deep-Tech Scanners", "kind": "mcp", "desc": "Free PQC TLS, CRA disclosure, green claims, battery passport, CRISPR, REACH and URDF scanners.", "repo": null, "install": ["https://meweapps.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "MFSMAI Sentinel", "kind": "mcp", "desc": "Risk checks for BNB Chain tokens, wallets and ERC-8004 AI agents before you pay or trade.", "repo": null, "install": ["https://api-sentinel.mfsmai.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch)", "kind": "mcp", "desc": "MSRC Windows updates: CVE rollups, Patch Tuesday. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/msrcwatch-microsoft-msrc-security-updates-99ddab/http"], "stars": null, "pushed": null, "license": null, "plat": "microsoft"}, {"name": "MobileValidate", "kind": "mcp", "desc": "Check phone numbers (WhatsApp, Telegram, carrier, spam reputation) and e-mail addresses.", "repo": "https://github.com/brntech/mobilevalidate-sdk", "install": ["npm:@mobilevalidate/mcp", "https://mcp.mobilevalidate.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "N0N4 Guardian", "kind": "mcp", "desc": "C2PA sign/verify for AI agents, prompt-injection scanning, and signed M2M custody handoffs.", "repo": null, "install": [], "stars": null, "pushed": null, "license": null, "plat": "n0n4 guardian"}, {"name": "Nizh", "kind": "mcp", "desc": "Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.", "repo": null, "install": ["https://mcp.nizh.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": "nizh"}, {"name": "Opzyai Pro", "kind": "mcp", "desc": "Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.", "repo": null, "install": ["https://www.opzyai.com/api/mcp/pro/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Opzyai Security Check", "kind": "mcp", "desc": "Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.", "repo": null, "install": ["npm:@opzyai/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Opzyai Vibe Check", "kind": "mcp", "desc": "Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.", "repo": null, "install": ["https://www.opzyai.com/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "OrionCMD Checks", "kind": "mcp", "desc": "Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).", "repo": null, "install": ["https://api.orioncmd.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Ostorlab", "kind": "mcp", "desc": "Query and act on your Ostorlab scans, vulnerabilities, tickets and assets.", "repo": null, "install": ["https://api.ostorlab.co/apis/mcp/{api_key}/"], "stars": null, "pushed": null, "license": null, "plat": "ostorlab"}, {"name": "PentaTrail CTEM", "kind": "mcp", "desc": "PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level", "repo": null, "install": ["https://api.pentatrail.co/mcp"], "stars": null, "pushed": null, "license": null, "plat": "pentatrail"}, {"name": "Person Enrichment", "kind": "mcp", "desc": "Identify a person from partial information and return a profile with a confidence score per field.", "repo": null, "install": ["https://api.theona.ai/mcp/person-enrichment"], "stars": null, "pushed": null, "license": null, "plat": "person enrichment"}, {"name": "Pilotex KYC", "kind": "mcp", "desc": "KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result.", "repo": null, "install": ["https://pilotex.club/mcp"], "stars": null, "pushed": null, "license": null, "plat": "pilotex kyc"}, {"name": "PkgGuard", "kind": "mcp", "desc": "Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker", "repo": null, "install": ["npm:@agentgate-builder/pkgguard", "https://api.youraitools.co/pkgguard/mcp"], "stars": null, "pushed": null, "license": null, "plat": "agent"}, {"name": "Port Scanner API", "kind": "mcp", "desc": "Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.", "repo": null, "install": ["https://api.portscan.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Pre-Trip compliance scanner", "kind": "mcp", "desc": "Screen regulated-health marketing copy against source-cited rulesets, all 50 states.", "repo": null, "install": ["npm:pretrip-mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Preflight", "kind": "mcp", "desc": "Scans an MCP server for security gaps before your agent connects. Free tier, no signup.", "repo": null, "install": ["https://preflight.allthepossibles.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)", "kind": "mcp", "desc": "Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/rustsecwatch-rustsec-crate-security-advisories-0f9271/http"], "stars": null, "pushed": null, "license": null, "plat": "rust crates"}, {"name": "Sanctions & PEP Screening", "kind": "mcp", "desc": "Screen a name in one call against US OFAC SDN, the EU Consolidated Financial Sanctions List, UK…", "repo": "https://github.com/kevmoz/macaroonnetwork-mcp", "install": ["pypi:macaroonnetwork-mcp-sanctions-pep-screening-v1"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "ScamVerify Threat Verification", "kind": "mcp", "desc": "AI-powered scam and threat verification for phone numbers, URLs, texts, and emails.", "repo": "https://github.com/scamverifyai/scamverify-ai", "install": ["https://scamverify.ai/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "SecureNow", "kind": "mcp", "desc": "Production security for Node.js apps: investigate live attacks, block IPs, tune detections.", "repo": "https://github.com/securenow-ai/securenow-npm", "install": ["npm:securenow", "https://api.securenow.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "node.js"}, {"name": "Security Intel MCP", "kind": "mcp", "desc": "CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.", "repo": "https://github.com/datakoot/security-intel-mcp", "install": ["https://security.datakoot.com/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Sekura", "kind": "mcp", "desc": "Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.", "repo": "https://github.com/sekuraai/sekura-plugins", "install": ["https://sekura.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "github"}, {"name": "ShipSafe — Independent security verification", "kind": "mcp", "desc": "Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.", "repo": null, "install": ["npm:@ship-safe/mcp", "https://ship-safe.co/api/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "SkillTotal", "kind": "mcp", "desc": "Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.", "repo": "https://github.com/pezhik/skilltotal", "install": ["pypi:skilltotal"], "stars": null, "pushed": null, "license": null, "plat": ""}, {"name": "Summer", "kind": "mcp", "desc": "Telehealth support for Claude, Codex and Cursor: investigate cases and connect your tools.", "repo": "https://github.com/compound-technologies/summer-mcp", "install": ["https://api.gosummer.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "summer"}, {"name": "Trent", "kind": "mcp", "desc": "Security reviews, threat models over a repo or website, and remediation tracking, in your editor.", "repo": "https://github.com/trnt-ai/trent-agent-plugin", "install": ["https://mcp.trent.ai/mcp", "https://mcp.eu.trent.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "github"}, {"name": "Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session", "kind": "mcp", "desc": "Ubuntu security: USNs per CVE, patched versions. Be born in one call — free testnet funds.", "repo": "https://github.com/ee324/a2awire", "install": ["https://a2awire.com/mcp/data/usnwatch-ubuntu-security-notices-usn-c06aa6/http"], "stars": null, "pushed": null, "license": null, "plat": "ubuntu"}, {"name": "VerifyDesk", "kind": "mcp", "desc": "Verify French and UK companies, EU VAT and IBANs; screen OFAC, UN, EU and UK sanctions lists.", "repo": "https://github.com/agenttoolworks/mcp-servers", "install": ["https://verifydesk.agenttoolworks.com/mcp"], "stars": 0, "pushed": "2026-10-01T12:45:30Z", "license": null, "plat": "ai agents"}, {"name": "Vongola", "kind": "mcp", "desc": "Read-only operator instrumentation for the vongola TLS gateway.", "repo": "https://github.com/qompassai/vongola", "install": ["mcpb:https://github.com/qompassai/vongola/releases/download/v0.2.0/vongola-mcp-0.2.0-linux-x64.mcpb"], "stars": null, "pushed": null, "license": null, "plat": "vongola"}, {"name": "VulX Watch", "kind": "mcp", "desc": "Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.", "repo": "https://github.com/NgoTomek/vulx-watch-cursor", "install": ["https://mcp.vulx.ai/mcp"], "stars": null, "pushed": null, "license": null, "plat": "vulx watch"}, {"name": "ZEN SecDB", "kind": "mcp", "desc": "ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.", "repo": null, "install": ["https://secdb.nttzen.cloud/mcp"], "stars": null, "pushed": null, "license": null, "plat": ""}]