#MCP serverStars · npm/mo

1. 97Reconnickpending/mcp-reconConversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple recon levels.LocalFree31
2. 98HealthClawGuardrailsaks129/HealthClawGuardrailsGuardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolationRemoteAccount needed31
3. 99Dnstwistermrfentmen/dnstwister-mcpDNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.LocalFree891
4. 100sigelocsigelo/sigeloOne identity an AI agent owns: proves who it is offline, keeps its reputation, pays, messages agentsLocal + RemoteFree0881
5. 101Security Guardpetrovicistefan/mcp-security-guardAudit the MCP servers you use against the OWASP MCP Top 10: tool poisoning, rug pulls, shadowing, secrets and supply-chain risk, with runtime guards, approved-server policy and adversarial testing for server authors.LocalFree0853
6. 102Bitwarden Public API and Secrets Manager (unofficial)mguttmann/the-real-bitwarden-mcpUnofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.LocalFree0830
7. 103Cinema4dkumoproductions/mcp-cinema4dMCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.LocalFree28
8. 104Prism Scanneraidongise-cell/prism-scannerSecurity scanner for AI Agent skills, plugins, and MCP servers with A-F grading.LocalFree28
9. 105Csl CoreChimera-Protocol/csl-coreDeterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.LocalFree27
10. 106CTRLRun OperatorCTRLRun/ctrlrunExecution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an approval queue and hash-chained receipts.LocalFree27
11. 107Intruderintruder-io/intruder-mcpAccess Intruder to identify, understand and fix security vulnerabilities in your infrastructure.LocalAccount needed26
12. 108Wardenicoretech/warden-mcpManage Bitwarden and Vaultwarden vaults via the bw CLI: search, create, edit and organize logins, notes, cards, identities, SSH keys, folders and Sends.LocalAccount needed26
13. 109Appstore Connectbeautyfree/appstore-connect-mcpApp Store Connect API as MCP: apps, TestFlight, subscriptions, localizations, reports. JWT auth.LocalPaid service14351
14. 110BrightspaceJhostinAleck/brightspace-mcpD2L Brightspace MCP server: courses, grades, rubrics, feedback, course files, calendar. Multi-auth.LocalFree13392
15. 111CorrectOverCorrectOver/mcp-serverMCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.LocalFree781
16. 112DelegoDelego-Dev/delegoIntent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.LocalFree25
17. 113VirusTotalVirusTotal/virustotal-mcpOfficial VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.Local + RemoteAccount needed25
18. 114Mobsfpullkitsan/mobsf-mcp-serverStatic and dynamic analysis of Android and iOS apps with MobSF.LocalFree24
19. 115AIMAIM-Intelligence/AIM-MCPSecurity-focused safety guidelines and content analysis for AI agents.LocalFree23
20. 116Gecko SurfGeckoVision/gecko-surfPoint Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools.Local + RemoteFree22
21. 117Sapiom jssapiom/sapiom-jsLocal Sapiom developer MCP for authoring, testing, deploying, and inspecting agents.LocalFree22
22. 118Mastyf AImastyf-ai/mastyf.aiRuntime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.LocalFree21
23. 119Poland KRSpkolawa/krs-poland-mcp-serverAccess to Polish National Court Register (KRS)—the government's authoritative registry of all businesses, foundations, and other legal entities.LocalFree4523
24. 120BailingHub for Business Operationsbailinghub/bailinghub-mcp-serverLet AI agents query and operate business systems with authorization, approval and audit trails.LocalAccount needed0625
25. 121Mlawsonkingmlawsonking/MCPInput/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.LocalFree1761
26. 122pinGautamTalksDev/mcp-pinStdio proxy that pins every tool definition (name, description, input schema, annotations) when you approve a server and blocks the session, with a diff, if any of it changes later. Also keeps a public, signed log of tool definition changes across public MCP servers.LocalFree4467
27. 123Arguscommet/argusPreserve a user-authorized judgment and append later answers. No model verdict or human score.LocalFree1582
28. 124Agentwardagentward-ai/agentwardMCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates compliance audit trails.LocalFree19
29. 125Fidaajipurn/fidaLocal-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.LocalFree19
30. 126SsidDrumworks/ssid-mcpMAC address (OUI) vendor lookup with randomized-address detection, plus router default login IPs and admin credentials cited to manufacturer documentation.Local + RemoteAccount needed2495
31. 127Clipboard Historyd-khomenko/clipboard-history-mcpYour clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.LocalFree19
32. 128FAOSTATberba-q/faostat-mcpFAOSTAT data for 245 countries: crops, trade, food security, and emissions via 23 MCP tools.LocalAccount needed19
33. 129Npm SentinelNekzus/npm-sentinel-mcpProvide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…Local + RemoteAccount needed19
34. 130Aegis — AI Agent GovernanceAcacian/aegisPolicy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit logging.LocalFree18
35. 131Aletheia Runtime Safety & Scope Creep Filtervikasny30/aletheia-mcpDeterministic pre-execution filter for agent tool calls that blocks scope creep (credential reads, SSRF, destructive shell/SQL) and prompt injection.LocalFree12176
36. 132Calllintcalllint/calllintOffline pre-flight security linter for MCP servers, agent tools and skills that returns SAFE, REVIEW, BLOCK or UNKNOWN verdicts without executing them.LocalFree3437
37. 133AethisAethis-ai/aethis-mcpDeterministic eligibility decisions and test-driven rule authoring via the Aethis developer API.LocalFree1517
38. 134FTXasqi-carter/ftx-mcpMCP server for FactoryTalk Optix: author, preview, and verify Studio changes via the emulator.LocalFree18
39. 135GSC Scannerpoliakarmai/gscLocal security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.LocalFree18
40. 136Openapi Scoutmrfentmen/openapi-scout-mcpLocal read-only OpenAPI and Swagger inspection with secret-safe schema summaries. Tools include...LocalFree0552
41. 137Cortexgbrigandi/mcp-server-cortexCortex integration for observable analysis and automated security responses.LocalFree17
42. 138Vmsjyjune/mcp_vmsRetrieve live and recorded video from a CCTV recording program (VMS) and control it, such as opening live or playback dialogs for specific channels and times.LocalFree17
43. 139Hangarmcp-hangar/mcp-hangarSelf-hosted policy enforcement for MCP server fleets: deterministic admission and egress policies, attributable audit logs and SIEM export.LocalFree17
44. 140DROS VajraClaw HackerTop-Celestial-Company-Ltd/DROS-VajraClaw-HackerDeterministic execution governance gateway and W3C DID security guardrail for AI agent MCP tool calls.LocalFree16
45. 141Thehivegbrigandi/mcp-server-thehiveTheHive integration for collaborative security incident response and case management.LocalFree16
46. 142Redactanickjlamb/redactaPrivacy boundary for healthcare AI agents: pseudonymises patient identifiers (NHS numbers, names, dates of birth, addresses; UK and US) into labelled tokens locally, keeps the reversal map out of agent context, and restores originals only at the trusted boundary.LocalFree8248
47. 143EnigmagentAgnuxo1/enigmagent-mcpLocal AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.LocalFree7266
48. 144SkillTotalpezhik/skilltotalDeterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.LocalFree16