#MCP serverStars · npm/mo

1. 193Make Auditarose26/make-audit-mcpAudit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.LocalFree319
2. 194Vulnicheckandrasfe/vulnicheckHTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.LocalFree11
3. 195Bug Bounty Intelligenceholistis/bug-bounty-intelligence-mcpAI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.RemoteFree11
4. 196PasteHTMLAliOsm/pastehtml.devPublish, update, and organize HTML and Markdown pastes on PasteHTML as the authorized user.RemoteAccount needed11
5. 197ProductClankcovariance-network/productclank-mcp-serverBoost posts and launch community growth campaigns from your AI assistant. OAuth, credit-billed.RemotePaid service11
6. 198Bunkerwebbunkerity/bunkerweb-mcpOfficial BunkerWeb WAF integration to manage services, instances, IP bans, configurations, plugins, and scheduler jobs over stdio or streamable HTTP.LocalFree10
7. 199Blackwallbluetieroperations-create/blackwall-mcpRisk gate that agents call before irreversible actions, returning a risk score, reversibility class, red flags and a proceed/confirm/human-required decision.LocalAccount needed0291
8. 200AnwaniAnwani-app/anwani-mcpAnwani MCP: create and manage permanent 9-digit address codes through OAuth (9code.app).Local + RemoteFree0305
9. 201Krita Codexcyyprezz/krita-codex-mcpControl Krita through a secure local MCP server and authenticated Windows bridge.LocalFree10
10. 202Niroapxlabs-ai/niroAI pentester for PRs — finds exploitable bugs and hands your developer agent the fix.LocalFree10
11. 203Omnideckaapd-studio/omnideck-mcpLocal privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.LocalFree0286
12. 204PincerVouchlyAI/Pincer-MCPSecure grip for your agent's secrets - security-hardened MCP gateway with proxy token architectureLocalAccount needed6114
13. 205PnP PowerShellpnp/pnp-powershell-mcp-serverManage Microsoft 365 in natural language with PnP PowerShell and author PnP PowerShell scripts.LocalFree10
14. 206Protocol Conformancestudiomeyer-io/mcp-protocol-conformanceMCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.LocalFree0290
15. 207Secret Hygienemrfentmen/secret-hygiene-mcpCount secret-like patterns in bounded local files without returning values, keys, paths,...LocalFree0297
16. 208Threat IntelligenceJam0k/Threat-Intelligence-MCPLive threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.Local + RemoteAccount needed3214
17. 209URL Safety ValidatorOjasKord/url-safety-validator-mcpAI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.Local + RemoteAccount needed1258
18. 210wardenermoluk/mcp-wardenLocal credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.LocalFree10
19. 211Webcheckyifanyifan897645/webcheck-mcpWebsite health analysis: SEO, accessibility, performance, security, and broken linksLocalFree3220
20. 212PerspectiveGraphluiacuaniello/perspectivegraphAttack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.LocalFree9
21. 213Ciphertrust Managersanyambassi/ciphertrust-manager-mcp-serverThales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring.LocalAccount needed9
22. 214Commitpiiiico/proof-of-commitmentSupply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.Local + RemoteAccount needed9281
23. 215Code Sentinelsalrad22/code-sentinelCode quality analysis MCP server - detects security issues, deceptive patterns, and placeholdersLocalFree3172
24. 216CorvusAlbasha0x0/CorvusReverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.LocalFree9
25. 217Draugrdraugr-dev/draugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.LocalFree9
26. 218Ghost PublisherBlogFactoryHQ/ghost-publisher-mcpLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.LocalAccount needed0268
27. 219Ghost PublisherBoraGkc/ghost-publisher-mcpLocal-first MCP server for safe Ghost authoring, diagnostics, scheduling, and publishing.LocalAccount needed268
28. 220hexveromaximilianfeix/hexveroElectron release diff for security review: what changed in IPC, contextBridge, windows and hosts.LocalFree93.7k
29. 221Microsoft ProjectHorizunGroup/horizun-msproject-mcpAudit, reschedule and author Microsoft Project schedules. No Java, no Project install.LocalFree9
30. 222Power Automatesapientsai/power-automate-mcp-serverInspect, operate, and author Microsoft Power Automate cloud flows from an agent context.LocalFree2195
31. 223RealAgentRedDateTech/RealAgentMCPAI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.LocalFree1227
32. 224Stackhawkstackhawk/stackhawk-mcpAn MCP server that provides interaction with StackHawk's security scanning platform.LocalAccount needed9
33. 225Trenttrnt-ai/trent-agent-pluginSecurity reviews, threat models over a repo or website, and remediation tracking, in your editor.RemoteAccount needed9
34. 226AuditP4ST4S/mcp-auditTransparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.LocalFree8
35. 227SDKrohan-protocol/sdkStateless privacy shield, WebMCP semantic firewall, and gasless on-chain state settlement for autonomous AI agents on Midnight Network.LocalAccount needed8
36. 228Job VerifyyessGlory17/job-verifyCheck recruiters and job offers for scams: cross-checks company registration, domain age, look-alike domains, blocklists and crypto-scam databases.LocalAccount needed8
37. 229Lazarettojamesdfinance-dev/lazaretto-mcpCheck lockfiles against malicious-package advisories and scan artifacts for credential theft, exfiltration, obfuscation, prompt injection and droppers.Local + RemoteAccount needed1207
38. 230OPAOrygnsCode/opa-mcp-serverOPA and Rego policy toolkit wrapping the OPA CLI and Regal: format, lint, evaluate, test and benchmark policies, manage the OPA REST API and explain decisions.LocalAccount needed8
39. 231Tamperlensharuodev/tamperlens-mcpDocument forensics via the Tamperlens API: detect post-creation edits, failed redactions and embedded prompt injection in PDFs, Office files and images.LocalAccount needed0240
40. 232Agent EnvelopeBlackBoxEngineering/agent-envelope-mcpNeutral MCP server for AgentEnvelope authority: sovereign verify + vault verify/lookup/mint.LocalFree1220
41. 233Aikido Security Analysis PlatformBajuzjefe/Aikido-Security-Analysis-PlatformSecurity analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.LocalFree2177
42. 234Decantrdecantr-ai/decantrStable eight-tool MCP server for changed-UI assurance, authority-aware UI task context, and repair.LocalFree8
43. 235Google Sheets Fullmoooonad/mcp-google-sheets-fullFull Google Sheets MCP: 26 tools + run_sheets_script escape hatch. User OAuth, no service account.LocalFree0252
44. 236Nel VeilNELPROINC/nel-veil-mcpFree passive security scanning - check any domain's DMARC, TLS, headers, and exposures.LocalFree0231
45. 237PLCWare - TIA Portal (tia)renanlido/tia-opennessDrive Siemens TIA Portal V21 from AI: author, compile, export and gated download via Openness.LocalFree8
46. 238Safety Wardengautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.LocalFree8
47. 239Snyk API & Websnyk/saw-mcpMCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triageLocalAccount needed8
48. 240sshgelse/ssh-mcpMCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.LocalFree8