#MCP serverStars · npm/mo

1. 625PayGuardChecks crypto addresses against the US Treasury OFAC SDN list; free yes/no preview, entity details paid via x402.Local + RemotePaid service
2. 626Railsjaimenbell/rails-mcpSelf-hosted default-deny action registry, append-only spend-intent ledger and human sign-off audit trail for gating irreversible agent actions.LocalFree0
3. 627RqwstrKjopstad-IT/rqwstr-mcpHTTP security testing toolkit (send, intruder, race, chain, out-of-band) with low-level HTTP/1.1 and HTTP/2 control: raw framing and connection pinning.LocalFree0
4. 628SaveSaveSaveSavestefantsezarov/SaveSaveSaveSaveRead-only checks before an agent acts: prompt-injection and phishing scan of untrusted text (local), npm package check for malware, hijacked releases and typosquats, crypto address and token scan, and address-poisoning comparison. Zero dependencies.LocalAccount needed691
5. 629Sealaurumflux20/sealExactly-once payments for agents: prevents double settlement across processes and retries, confirms charges with the provider and reconciles out-of-band spend.LocalFree0
6. 630ShodanBurtTheCoder/mcp-shodanQuery the Shodan API and Shodan CVEDB: IP lookups, device searches, DNS lookups, vulnerability queries and CPE lookups.LocalAccount needed
7. 631VERAXverax-ai/veraxSits between an agent and its tools: every call passes a policy gate and leaves a signed decision record before it runs, a refusal is recorded like an approval, payments wait for an operator on the same machine, and the ledger stays there and verifies offline. Apache-2.0.LocalFree0
8. 632verify-proofFulcrum-Enterprises/verify-proofVerify blockchain-anchored timestamp proofs locally: recompute a file's SHA-256, walk the Merkle path and check the anchor on Polygon or Bitcoin.LocalFree0
9. 633Veritymeloliva14/verity-mcpFail-closed trust gate for agents: fact-checking, prompt-injection detection, content moderation, PII and secret detection, and a pre-action guardrail.LocalAccount needed0
10. 634VirustotalBurtTheCoder/mcp-virustotalQuery the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports.LocalAccount needed
11. 635VMware Hardenzw008/VMware-HardenRead-only VMware vSphere compliance scanning and drift detection against CIS, vSphere SCG, China DJCP 2.0 and PCI-DSS, with remediation suggestions.LocalAccount needed
12. 636VorimKzino/vorim-mcp-serverAgent identity, trust and audit trails: Ed25519 agent registration, permission checks, tamper-evident audit events, trust scores and credential delegation.LocalAccount needed
13. 637VulnFeedinfai-tech/vulnfeed-mcpScans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and alerting.LocalFree
14. 638x402 Notaryforgemeshlabs/x402-notary-mcpNotarize AI model outputs with signed Ed25519 attestations, SHA-256 content hashes and Merkle anchoring on Base or Solana, paid via x402.LocalPaid service0
15. 639AffixIOGenerate and verify zero-knowledge proofs with post-quantum attestations, without exposing personal data.RemoteAccount needed
16. 640Agent VerifierTest and debug your AI agent's Web Bot Auth (RFC 9421) signature and see exactly what to fix.RemoteFree
17. 641AgentAegisastafford8488/agentaegis-mcpScan MCP servers and skills before install, vet endpoints before calling them, and run vulnerability scans, threat intel and compliance checks.RemoteAccount needed
18. 642AgentGlassScans a public URL for hidden instructions aimed at AI agents and returns a risk level with evidence.RemoteFree
19. 643APIR Agent VerificationVerify an AI agent's signed credential and the human mandate behind it; keys are public for offline checks.RemoteFree
20. 644ATK Security ChecksPost-quantum TLS and certificate checks, Wazuh rules tested on a real manager, and a PHP2Shell CVE check.RemoteFree
21. 645attestmrpkk/attestVerifies an artifact an AI agent produced (JSON, code, structured output) against a JSON Schema plus positional prompt-injection checks, returning a verdict with reasons before you accept the result. x402-paid with a free tier of 20 checks/day.RemotePaid service0
22. 646Auth PostureOne-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.RemoteFree
23. 647CanaryGuard 402ak10082247-max/canaryguard-402Deterministic prompt-injection detector, concealed Unicode scrubber, and honeypot wallet defense MCP server for AI agents.Local + RemoteAccount needed0
24. 648DemiSignalGrade a domain's live DMARC, SPF, DKIM, MX, BIMI and MTA-STS records, and generate SPF and DMARC records.RemoteFree
25. 649DnsGuardChecks a domain's SPF, DKIM, DMARC, BIMI, MX, MTA-STS and TLS-RPT, with a 0–100 score and fixes.RemoteFree
26. 650DomainCanaryCheck a domain's DMARC, SPF and DKIM, build an SPF record, explain bounces, read DMARC reports.RemoteFree
27. 651Dragons EyeRansomware leak-site claims by company or domain, plus IOC, CVE and ransomware group intel; paid per call via x402.RemotePaid service
28. 652EtchSaravananJaichandar/etch-mcpSigned audit chain for AI agent decisions: events are signed, Merkle-chained per project, anchored to public transparency logs and verifiable offline.RemoteFree0
29. 653Feldspar free repository security scanproject-feldspar-resources/feldspar-scanDeterministic security scan of public git repositories: vulnerable dependencies via OSV, hard-coded secrets and risky config lint, as file:line findings.Local + RemoteFree0
30. 654Front SentinelRead-only dApp and website domain checks: registrar and registry locks, DNSSEC, CAA, SRI, SEAL DNS & Registrar controls.RemoteFree
31. 655HallucCfredyee/hallucc-mcpClaim-level hallucination detection with sources, agent trajectory verification, risk gating for computer-use actions and prompt-injection defense.RemoteAccount needed0
32. 656IP99IP risk and geolocation lookup where every verdict carries the age of its evidence.RemoteFree
33. 657JidChecks a business against US registries, sanctions and its domain before an agent pays or signs, with signed receipts.RemoteFree
34. 658LatticeCVE, KEV, ATT&CK, CWE and detection graph; links marked declared or inferred. 3 tools keyless, all 7 with a free key.RemoteFree
35. 659MalinoisPassive leak check for a live app you own: open Supabase/Firebase data, keys in JS, exposed .env/.git.RemoteFree
36. 660Mifori CertAgentLive AI agent trust oracle: audit synthetic IQ, latency and JSON compliance via x402 or free telemetry tokens.RemotePaid service
37. 661Odile GateGateway for the API your AI agent calls: per-app keys, allowed calls, loop breaker, approvals and an audit log.RemoteFree
38. 662Onchain DiarySearch and read Web3 security education: 120 articles and a 230-term crypto scam glossary.RemoteFree
39. 663OrbylonChecks whether AI agents can find, trust and pay a business, and looks up a verified domain key and prices.RemoteFree
40. 664OrionCMD ChecksDomain threat checks, a 30-day domain watch, and TLS, DNS/email-auth and expiry checks; paid per call in USDC via x402.RemotePaid service
41. 665Perspective API Alternative (Toxicity Detection)koyourmoon/perspective-api-alternative-mcpToxicity scores (0-1) for text before an AI agent posts it: toxicity, severe toxicity, insult, profanity, threat and identity attack. Google Perspective API compatible, deterministic (no LLM).RemoteAccount needed0
42. 666PreflightScans an MCP server for security gaps before your agent connects.RemoteFree
43. 667PromptBrake Free ToolsPrompt-injection payloads, OWASP LLM risk guidance, release planning, and CI test-pack creation.RemoteFree
44. 668satledgerRFC 3161 timestamp over a digest you supply; USDC per call over x402, no account, verifies offline.RemotePaid service
45. 669State of Web Vitalscorewebvitals/state-of-cwv-mcpCore Web Vitals metrics by CMS, CDN and framework, based on Chrome field data and a multi-site crawl.RemoteAccount needed0
46. 670TanodPre-transaction address checks, agent skill and MCP package scans, Solidity scans; paid per call via x402.RemotePaid service
47. 671Weio site checkHTTPS certificate check and published business facts (CMS, mobile viewport, role emails, phones) for any site.RemoteFree
48. 6724da4DA-Systems/4da-mcp-serverUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.LocalFree0