MCP Server Directory

semgrep/semgrep/mcp

Scan code for security vulnerabilities using Semgrep.

safedep/vet

Locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code.

ucsandman/DashClaw

Fail-closed approval layer for unattended agent runs: checks actions against org policy, requests human approval and logs every decision to a causal ledger.

echelongraph/echelongraph-mcp

Keyless, read-only CVE and internet-exposure intelligence: CVE lookup and search, CISA KEV, EPSS history, CWE, vendor advisories (MSRC, Red Hat, Cisco, GHSA and more), SBOM and manifest checks, and aggregate exposure radars. Use the hosted endpoint (mcp.echelongraph.io) with no install, or run locally with npx.

timescale/rsigma

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.

cycodehq/cycode-cli

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

mobb-dev/bugsy

Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.

snyk/studio-mcp

Embeds Snyk's security engines into agentic workflows to secure AI-generated code in real time and work through vulnerability backlogs faster.

panther-labs/mcp-panther

Use Panther's SIEM platform in natural language to write detections, query logs and manage alerts.

swnotmetal/Project-Koma/koma-gate-mcp

Classify input for prompt injection and out-of-scope content with Koma Gate's LLM-based classifier.

bunkerity/bunkerweb-mcp

Official BunkerWeb WAF integration to manage services, instances, IP bans, configurations, plugins, and scheduler jobs over stdio or streamable HTTP.

luiacuaniello/perspectivegraph

Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.

rad-security/mcp-server

Query the RAD Security API for Kubernetes and cloud security findings, reports and runtime data.

urldna/mcp

URL scanning and phishing triage: capture DOM snapshots, network requests and screenshots, and hunt historical scans with a custom query language.

sekera-radim/impri

Self-hostable human-in-the-loop approval inbox: humans approve, reject or edit proposed agent actions via web, mobile, Slack, Discord or Telegram.

scalekit-inc/scalekit-mcp-server

Manage Scalekit organizations, users and SSO.

maxfain/basedagents

Agent identity registry (reputation, capability search, task marketplace, messaging) plus a local encrypted vault that leases provider keys to agents.

alexar76/argus

Query ARGUS-3 and check its status; WARDEN vets third-party MCP servers with a scored firewall, tool-definition pinning and drift detection.

dnsdoctor/claude-plugin

Scan and fix a domain's email authentication (SPF, DMARC, DKIM, MX), blacklist status and domain/SSL expiry, with deterministic, validated fix records.

FoundryNet/mint-mcp

MINT Protocol work attestation for agents: cryptographically attest, verify, rate and discover agent work to build portable on-chain reputation.

alexar76/aimarket-mcp

SSRF-hardened web gateway with web fetch, web search and Metis verification, sharing an audited security core with Metis and ARGUS.

thyn-ai/algenta-sdk

Algenta decision engine: dataset discovery, exact queries, utility models, decision memory and governed agent runs with approvals and execution receipts.

kakunin-ai/kakunin-mcp

Agent compliance and identity: verify an agent's X.509 certificate scope, read its behavioral risk score and append to an immutable audit trail.

mandarelabs/mandare

Accountability for AI agent fleets: verify a signed, hash-chained ledger, check budgets, kill an agent, and issue passports and mandates, all through the local CLI.

aeoess/agent-passport-mcp

Agent identity, scoped delegation and governance: issue passports, verify narrowing-only delegation chains, enforce gateway policy and emit signed records.

Remote, no-auth MCP server providing AI-powered codebase context and answers

Clean up sloppy AI code and prevent vulnerabilities

shieldly-io/mcp

Analyze AWS IAM policies and CloudFormation templates with Shieldly to flag privilege-escalation paths, wildcards and over-permissive access.

trustscoreagent/trustscoreagent

Check the reputation of AI microservices and public APIs before calling them and submit ratings afterward, via an open trust registry.

true-alter/cli

Personal identity profiles under a ~name handle, paid lookups that share revenue with the person found, skill-proving quests and collectives.