#MCP serverStars · npm/mo

1. 385Orihimesrinivasan-sundaresan95/orihimeCross-repository code knowledge graph for Java, Kotlin, JavaScript and TypeScript: call-flow tracing, taint analysis, reachability and license compliance.LocalFree2
2. 386Proofport AIzkproofport/proofport-aiGenerate zero-knowledge proofs of identity claims (Coinbase KYC, country, Google OIDC, Microsoft 365) without revealing personal information.LocalAccount needed2
3. 387Shieldmuhannad-hash/mcp-shieldPre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and supply chain risks.LocalFree2
4. 388Sicarius GuardChronolapse411/sicarius-guardSolana token safety oracle: byte-level SPL mint analysis, honeypot detection, freeze/mint authority checks, Birdeye market data and composite risk scoring.LocalAccount needed2
5. 389Truecopyaskalf/truecopySupply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only pinned tools.LocalFree2
6. 390Trustboost APIteodorofodocrispin-cmyk/trustboost-apiRedacts emails, phone numbers, national IDs, private keys and financial data before text reaches LLMs, in English, Spanish, Portuguese, German and Japanese.LocalAccount needed2
7. 391Wrg Sigma RulesWRG-11/wrg-sigma-rulesWrite, validate and convert Sigma detection rules for Splunk, Elastic, Kibana and Wazuh, backed by a rule corpus covering MITRE ATT&CK tactics.LocalAccount needed2
8. 392Aggreteaggrete/aggretePolicy proxy that refuses forbidden tool calls, stopping prompt-injection exfiltration and forbidden data combinations across Slack, Drive, GitHub and more.LocalAccount needed2
9. 393gatehousenickgeorgeseo/mcp-gatehousePermission tiers, approval gates and secret-redacting audit logging enforced inside MCP servers at the tool boundary, with a demo order-desk server.LocalFree2
10. 394Lucairn SdksDeclade/lucairn-sdksPrivacy gateway that sanitizes German and English PII before prompts reach an LLM and issues a signed, timestamped certificate for each call.LocalAccount needed2
11. 395M2M SentinelM2M-Sentinel/m2m-sentinel-sdkEVM bytecode capability analysis, EIP-1967 proxy resolution, gas recommendations and preflight safety checks for agents on Base.Local + RemoteAccount needed2
12. 396MalcolmnagameTW/mcp-server-malcolmMalcolm threat hunting: search and aggregate network traffic, query Suricata alerts, browse Arkime sessions and resolve NetBox assets. Read-only by default.LocalFree2
13. 397PrivacyFenceprivacyfence/privacyfencePrivacy and approval gateway between AI assistants and Gmail, Drive, Slack, Salesforce, Jira and more: human approval for sensitive reads and writes, local PII detection and an audit log.LocalFree2
14. 398SpendShieldfelixpg13-glitch/spendshieldPayment guardrails for AI agents: spend caps, budget and approval gates, prompt-injection defense, an encrypted secret vault and an audit trail.LocalFree2
15. 399Taskbounty Checkeliottreich/taskbounty-checkLocal, read-only scanner for GitHub Actions and CI maintenance issues in AI-built apps, with finding explanations and fix plans.LocalFree2161
16. 400Waxseal SDKdegenlegion-com/waxseal-sdkOn-chain Ed25519 identity for AI agents: verify seals by fingerprint, validate document signatures and gate irreversible actions behind human-signed approvals.LocalAccount needed2
17. 401Agentstampvinaybhosle/agentstampTrust intelligence for AI agents: identity stamps, reputation scoring, a registry, forensic audit trails and A2A passports via x402 micropayments.RemotePaid service2
18. 402Derbenttunahanaliozturk/derbentOne local gate for Claude Code, Codex, Copilot CLI and Antigravity: allow, deny and ask rules over MCP and built-in tool calls, approvals from a terminal UI, and hash-chained receipts.LocalFree2
19. 403HoneyLabshoneylabshq/honeylabs-mcpHoneypot threat intelligence from a sensor network: IP reputation, scanner classification, CVE probing trends and JA4, JA4H and HASSH fingerprints.RemoteAccount needed2
20. 404Anp2anp2dev/anp2AI-agent economic protocol over MCP — identity, reputation, tasks, credit, Sybil resistanceLocalPaid service2
21. 405Apprise RMCPdinglebear-ai/rappriseApprise notifications over MCP and CLI with authenticated stdio and HTTP transports.LocalFree2
22. 406Authority Risk Oracle ShowcaseRealSpap/authority-risk-oracle-showcaseRead-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.LocalFree066
23. 407Bawbel Scannerbawbel/bawbel-mcpScan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.LocalFree2
24. 408BrandingForge-Space/branding-mcpAI-powered brand identity generation via MCP with design tokens, typography, and logo assets.LocalFree2
25. 409Compliance Trestleoscal-compass/compliance-trestle-mcpAn MCP server that provides tools to author OSCAL security compliance documentationLocalFree2
26. 410Create Starterstarter-series/create-starterScaffold Starter Series projects and check release, deployment, security, and agent instructions.LocalFree2174
27. 411DugganUSA CLIpduggusa/dugganusa-cliLocal STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.LocalFree2520
28. 412ElectronYawLabs/electron-mcpElectron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistantsLocalFree2
29. 413Flatbreadflatbread-cli/flatbreadShare a coding agent's session as one link, secrets redacted first; pull another run's brief.LocalFree22.1k
30. 414GuardbeeGuardBee/guardbee-mcpScans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposureLocalFree2
31. 415JikidaunesLam/jikidaSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.LocalFree2
32. 416keyshrouddinhkarate/keyshroudAgent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in outputLocalFree21.7k
33. 417Linear MCP (multi-workspace, PAT auth)adelaidasofia/linear-mcpMulti-workspace Linear MCP — PAT auth, 57 tools + 3 prompts, substrate enforcement, drop-in.LocalFree2
34. 418MCPAmpelMCPAmpel/mcpampelScan installed MCP servers for security vulnerabilities with 16 detection engines.LocalAccount needed2
35. 419npm RegistryYawLabs/npmjs-mcpnpm registry MCP server — package intelligence, security audits, dependency analysisLocalFree2
36. 420Osv Advisorycyanheads/osv-advisory-mcp-serverQuery OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.Local + RemoteFree2
37. 421Portunusmdostal/portunusSecret broker for agents: reference secrets by name; values injected only at the execution boundary.LocalFree2
38. 422Promptrejectormcprevsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.LocalAccount needed2337
39. 423Raven Nesttidynest/raven-nest-mcpAI-driven penetration testing - 22 security tools behind safety-hardened MCP endpointsLocalFree2
40. 424Razieltide-foundation/raziel-mcpMCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysisLocal + RemoteFree2
41. 425Rubrik Security Cloudrubrikinc/rubrik-mcpConnect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.LocalFree2
42. 426Sentinel ScanVentrova/sentinel-scan-cliMCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.LocalFree2200
43. 427Sn1per1N3/sn1per-mcpRun scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.LocalFree2
44. 428Suprawall Pluginswiserautomation/suprawall-plugins-SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.LocalAccount needed67
45. 429Two-KeyInsomniac-VibeLabs/two-keyAuthorization proxy for another MCP server: a rule check and AI judges approve each tool callLocalFree2
46. 430ValcaPranLabs/valcaScans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.LocalFree2
47. 431aictrlaictrl-dev/skillsProject context, backlog tasks, and controlled workflows for coding agents. OAuth sign-in.RemoteAccount needed2
48. 432Cinderficinderfi/cinderfi-mcpRetirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.RemoteAccount needed2