#MCP serverStars · npm/mo

1. 241Strac MCP DLPstrac-io/strac-mcp-dlpDetect and redact PII, PHI, PCI and secrets in text and files before an AI agent sees them.LocalAccount needed8
2. 242RAD Securityrad-security/mcp-serverQuery the RAD Security API for Kubernetes and cloud security findings, reports and runtime data.LocalAccount needed7
3. 243urlDNAurldna/mcpURL scanning and phishing triage: capture DOM snapshots, network requests and screenshots, and hunt historical scans with a custom query language.LocalAccount needed7
4. 244Araitaniwhaai/araiEnforces rules from existing agent instruction files (CLAUDE.md, .cursorrules) by blocking prohibited tool calls and logging per-rule compliance verdicts.LocalFree7
5. 245Minreestrvelvetway/minreestr-mcpSearch the Russian software registry for import-substitution and FSTEC/FSB-certified products, with full-text search and manufacturer listings.LocalAccount needed7
6. 246AgentsealJoeyBrar/agentseal-mcpAction logs for AI agents: records every action in a SHA-256 hash chain as an audit trail.LocalAccount needed3112
7. 247Bastionvaquarkhan/MCP-BastionSecurity middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.LocalFree7
8. 248Figuard Corefiguard/figuard-corePre-flight spend authorization for AI agents. Set a budget, enforce limits, audit every decision.LocalFree2160
9. 249GenPark Secure Secret Token Redactoralphaparkinc/genpark-secure-secret-token-redactor-skillHigh-speed regex and entropy-based scanner redacting API keys, JWT tokens, and credentialsLocalFree7
10. 250Hadith Checker [Dorar.net]ibnsaleem29/dorar-hadith-mcpResearch Hadith, authenticity, grading, Takhrij and Sharh [commentaries] in Claude Desktop for free.LocalFree7
11. 251Intelthreadlinqsthreadlinqs-cmd/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEsLocalAccount needed0222
12. 252Judges PanelKevinRabun/judges45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.LocalFree7
13. 253McpHubSoflutionltd/McpHubOne MCP endpoint for all your servers: a few meta-tools, Keychain secrets, sandbox, audit, OAuth.LocalFree7
14. 254Aident LoadoutAident-AI/aident-skillConnect any AI agent to 1,000+ apps and 27,000+ actions through one remote MCP server (OAuth).RemoteAccount needed7
15. 255Retro Diffusion Pixel ArtRetro-Diffusion/retro-diffusion-mcpGenerate authentic pixel art - sprites, animations, and tilesets - from any MCP clientRemoteAccount needed7
16. 256Imprisekera-radim/impriSelf-hostable human-in-the-loop approval inbox: humans approve, reject or edit proposed agent actions via web, mobile, Slack, Discord or Telegram.Local + RemoteAccount needed6
17. 257AuthboxMARUCIE/authboxZero-knowledge password manager and MCP credential gateway: policy-gated agent access, deterministic passwords, BIP-39 recovery and a hash-chain audit trail.LocalFree6
18. 258Ida Headlesszboralski/ida-headless-mcpHeadless IDA Pro binary analysis with concurrent sessions and Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering.LocalFree6
19. 259VerifyScopeBlind/verify-mcpOffline verification of Ed25519/JCS-signed artifacts such as receipts, manifests and audit bundles.LocalFree6
20. 260Guardvibegoklab/guardvibeSecurity scanner for vibe-coded apps (Next.js, Supabase, Stripe, Prisma and more): taint analysis, auto-fix, SARIF export, pre-commit hook and CVE detection.LocalFree66.8k
21. 261LachesisUnboundCompute/lachesisCode property graph for C, Python and TypeScript: callers/callees, data and taint flow with source-to-sink witnesses, points-to and guard/sink structure.LocalFree6
22. 262mcpwallbehrensd/mcp-firewallDeterministic security proxy for MCP that intercepts tool calls, enforces YAML policies, scans for secret leakage and logs everything.LocalFree186
23. 263PentagonalPentagonal-ai/pentagonalGenerate, audit, fix and compile smart contracts on Ethereum, Solana, Base and other chains, with adversarial multi-agent pen testing and honeypot detection.LocalAccount needed1143
24. 264RugSnareParaphern/rugsnarePin MCP tool contracts by hash and catch silent drift, rug pulls and per-client bait-and-switch after approval, with a CI gate, live stdio/HTTP proxies, canary replay, call policies and on-chain release verification.LocalFree62.3k
25. 265ArcIDarcusid/arcid-mcpLook up AI agents on Arc: ERC-8004 identity, feedback, validations and USDC-backed trust scores.Local + RemotePaid service0187
26. 266Argo RPG PlatformArgo-RPG-Platform/MCPMCP server for Argo RPG Platform — connects AI assistants to campaign data via OAuth2Local + RemoteAccount needed1159
27. 267Auditjoepangallo/mcp-audit-serverThin MCP and CLI proxy for AI agent and MCP security auditing via a hosted backendLocalAccount needed0186
28. 268Base Security Scannerlordbasilaiassistant-sudo/base-security-scanner-mcpMCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.LocalFree184
29. 269Charmshotscharmshots/mcp-serverRead-only MCP connector for Charmshots photoshoots, photo metadata and owner-authenticated links.Local + RemoteFree0165
30. 270Code Factoryzrk222/code-factoryRead-only audit evidence for security, tests, native coverage, runtime failures and repair status.LocalFree6
31. 271Customsmcpcustoms/mcp-customsInspect an MCP server for common security risks before you install it. Offline, zero telemetry.LocalFree2121
32. 272Detectzestackmlugo-apx/detectzestack-mcpDetect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.LocalFree0181
33. 273FedRAMP 20x RequirementsKevinRabun/FedRAMP20xMCPAn MCP server that provides access to FedRAMP 20x security requirements and controls.LocalFree6
34. 274golivemyanptl/golive-mcpCheck a site before you share it: link previews, SPA refresh 404s, noindex, security headers.LocalFree0183
35. 275hushomarei-omoto/hushTeam secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.LocalFree6
36. 276Huskhusk-security/huskLocal-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configsLocalFree6174
37. 277Korea Company Datalichtsalz/korea-dataKorean company identity, registration status and monthly payroll-based employment, in English.Local + RemoteAccount needed0177
38. 278scanCodingSelim/mcp-scanPassive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.LocalFree0182
39. 279Xrpl Identityjarod-vyent/xrpl-identity-mcpMCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.LocalFree1158
40. 280PreClickcybrlab-ai/preclick-mcpPreClick scans links for threats and confirms intent match with high accuracy before agents click.RemoteAccount needed6
41. 281PriorSealimokokok/PriorSealBounded authorization and independently verifiable execution evidence for agents.RemoteAccount needed6
42. 282Service Public FranceOneNicolas/mcp-service-publicFrench public services: tax, property, admin, education, healthcare, security, risks, legal textsRemoteAccount needed6
43. 283Scalekitscalekit-inc/scalekit-mcp-serverManage Scalekit organizations, users and SSO.LocalAccount needed5
44. 284AgentAvowAgentAvow/AgentAvowSigned, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate CI merges.LocalFree5
45. 285Enigma Pythondenismaggior8/enigma-python-mcpEncrypt and decrypt messages with historically accurate Enigma machine emulators from the enigmapython library.LocalAccount needed5
46. 286Osv UItoan203/osv-uiVisual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after confirmation.LocalFree5
47. 287cmdxrayaurelio-nakamura/cmdxrayOffline safety gate for agent shell commands: rates each command as danger, caution or none and explains every flag, pipe, redirect and subshell.LocalFree5440
48. 288FriskJiangw2718i/friskScreen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or block verdict.LocalPaid service1120