#MCP serverStars · npm/mo

1. 289Kepiloleg-vdv/kepilAccountability layer for AI agents: per-version passports, per-job mandates with spending limits, a fail-closed action gate and a hash-chained journal.LocalFree5
2. 290Patch Tuesdayjonnybottles/patch-tuesday-mcpMicrosoft Patch Tuesday triage from the MSRC Security Update Guide: monthly rollups, CVE/KB lookups, supersedence chains and EPSS/CISA KEV urgency ranking.Local + RemoteAccount needed5
3. 291PCI DSS v4.0.1 Compliance Checkershyshlakov/pci-dss-mcpPCI DSS static analysis for Go payment code: finds PAN/CVV exposure, weak crypto, missing audit logs and vulnerable deps, each mapped to a PCI requirement.LocalFree5
4. 292MolTrustMoltyCel/moltrust-mcp-serverTrust infrastructure for AI agents: register DIDs, verify identities, query reputation scores, rate agents and manage W3C Verifiable Credentials.RemoteAccount needed5
5. 293Argusironclawdevs27/ArgusAutomated web QA via Chrome DevTools MCP — a11y, security, visual, env diff, CI; Aegis redaction.LocalFree5531
6. 294AtagMMasey/atag-mcpATAG 2.0 (Authoring Tool Accessibility Guidelines) guidance for authoring tool developersLocalFree1127
7. 295Automatedrcm Billinglaureennicholson635/automatedrcm-billing-mcpMedical-billing tools for AI agents: prior-auth checks, denial decoding, claim triage, appeals.LocalFree0145
8. 296ChestnyznaktheYahia/chestnyznak-mcpMCP server for Chestniy ZNAK (Честный ЗНАК) API — product marking verification. No auth needed forLocalAccount needed5
9. 297CivicrmYogiAdhik/civicrm-mcpModel Context Protocol server for CiviCRM — AuthX-first, schema-introspected, write-gated.LocalAccount needed0146
10. 298DiffPilotbkalafat/DiffPilotMCP server for PR code review, commit messages, changelogs, and secret detection.LocalFree5
11. 299FSVtwayst0/fsvScan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.LocalFree5
12. 300HardeningRCOLKITT/hardening-mcpEnterprise certification for codebases with multi-agent security, reliability, and quality auditsLocalFree139
13. 301kdbxyarrasys/kdbxRead-only access to secrets in a local KeePassXC vault. Runs commands with them injected.LocalFree5
14. 302MoltbridgeSageMindAI/moltbridgeAgent network intelligence for AI agents. Trust scoring, broker discovery, and Ed25519 identity.LocalFree55.9k
15. 303PainprepGoingparabolic/painprep-mcp-serverInterventional pain medicine MCP: Medicare checklists, CPT/ICD-10, ASRA, prior-auth & appealsLocalFree142
16. 304Scanndzachforrest/webscannerioTrigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.LocalAccount needed162
17. 305Skill Auditeltociear/skill-audit-mcpMCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.Local + RemoteFree5
18. 306SkillsSafe Security ScannerGUCCI-atlasv/Skillssafe.comAI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.Local + RemoteFree0149
19. 307Tripwirebonesdefi/TripwireSecurity gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.LocalFree1118
20. 308Bounty Operatorbountyoperator/bounty-operatorArgues against a security finding or a draft bug bounty report before you submit it.RemoteAccount needed5
21. 309Elecz Electricity Price Signal APIzemloai-ctrl/elecz-apiReal-time electricity prices for AI agents. 40+ countries, 100+ zones. No auth required.RemoteAccount needed5
22. 310Odoooconsole/odoo-mcp-serverOdoo ERP for AI agents: hosted OAuth endpoint, gated writes, one endpoint for every instance.RemoteAccount needed5
23. 311Thales Cdsp Cakmsanyambassi/thales-cdsp-cakm-mcp-serverThales CDSP CAKM integration for key management, cryptographic operations and compliance monitoring for Microsoft SQL Server and Oracle databases.LocalAccount needed4
24. 312Cyntrisec CLI (Historical)cyntrisec/cyntrisec-cliLocal-first AWS security analyzer that discovers attack paths and generates remediations using graph theory.LocalFree4
25. 313Czech PII Anonymizer & NLPBuggy1111/anonymize-mcpAnonymize PII for GDPR in Czech and many other languages using ÚFAL/LINDAT NLP (MasKIT, NameTag), plus morphology, translation and spellcheck.LocalFree4
26. 314Eleion Scannerhernaninverso/eleion-scanner-mcpRegister and verify domains, queue security scans (headers, TLS, DNS, ports, CVEs and AI-specific checks) and read findings.LocalAccount needed109
27. 315Guardianrudraneel93/mcp-guardianSecurity and governance proxy for MCP with YAML policies (blocklists, rate limits, token budgets), token cost tracking, health monitoring and RBAC.LocalFree4
28. 316qURLlayervai/qurl-mcpMint, resolve, audit and rotate expiring, scope-limited access links (qURLs) via the qURL API.LocalAccount needed4
29. 317SafeNode MCP Gatewaysp3ak/safenode-mcp-gatewayFail-closed policy proxy for MCP tool calls that denies, warns on or holds each call for human approval before forwarding, with client-side redaction.LocalAccount needed0113
30. 318SASTSkyrxin/sast-mcp-serverSAST/DAST scanners (Bandit, Semgrep, Trivy, CodeQL, OWASP ZAP and more) with closed-loop remediation, SARIF/SBOM/VEX export and compliance reporting.LocalFree4
31. 319ScreenVeritywilliamblakecunningham-max/screenverity-mcpU.S. exclusion, debarment and license screening (OIG LEIE, SAM.gov, state boards) with an Ed25519-signed receipt of the exact list snapshots checked.LocalAccount needed0117
32. 3201Claw Vault1clawAI/1claw-mcpHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.LocalFree4
33. 321Aegis Protocolim-sham/aegis-protocolTrustless escrow for AI agent-to-agent transactions on Base L2 with ERC-8004 identity and USDC.LocalPaid service4
34. 322Analyticsautopilotsudomichael/analyticsautopilotCookieless analytics for AI coding agents. Install in one prompt, 28 tools, OAuth onboarding.LocalFree132
35. 323Baserow Schemaaficiomaquinas/mcp-baserow-schemaGeneric Baserow API client MCP server with automatic 2FA (TOTP) auth and OpenAPI validation.LocalAccount needed0127
36. 324ClawPipefinsavvyai/clawpipeCost-optimized LLM pipeline + 6 AI security skills (reasoning, triage, remediation, compliance).LocalAccount needed119
37. 325EasysendEasysend-co/easysend-mcpEasySend file sharing MCP server - upload, download and share files. No authentication required.LocalFree0114
38. 326EnvaultDinanathDash/EnvaultSecure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.LocalAccount needed4
39. 327Grantdrafavecchi/grantdGrantd MCP server: let your AI agent act on a user's behalf across third-party APIs via OAuth.LocalAccount needed1101
40. 328Leakferretleakferrethq/leakferretContext-aware secret scanner: lets an AI agent scan, verify, and rewrite secrets before committing.LocalFree4
41. 329Opengolfapiopengolfapi/mcp-serverGolf for AI agents — every US course free, plus open contribution, identity & tournaments.LocalFree4
42. 330OpsecForgecyberdroid2077/opsecforge-toolsLocal MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.LocalFree0109
43. 331Project Loretamas-fm/project-lore-mcpA local-first MCP server that routes development tasks to authoritative project documentation.LocalFree0111
44. 332Tubemind Securedewtech-technologies/tubemind-secure-mcpSecure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.LocalAccount needed0119
45. 333Universal ConnectorTeodorMCP/universal-connector-mcpSecurity-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.LocalFree4
46. 334VMware NSX Securityvmware-skills/VMware-NSX-SecurityVMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.LocalFree4
47. 335Windows ManagementAhmedLaminou/windows-mcp-serverLocal Windows management, diagnostics, security, cleanup, and optimization MCP server.LocalFree4
48. 336znusezn/znThe local security layer for coding agents: secret redaction, injection checks and an MCP proxy.LocalFree44k