MCP Server Directory

Omodaka9375/netexpert-mcp

Cross-platform local-network diagnostics & security-posture MCP server — 31 tools.

vaaya-ai/vaaya-mcp

Paid APIs and tokenized shares for agents. Prepaid funding, including authorized Instinct checkout.

StacklokLabs/osv-mcp

Access the OSV (Open Source Vulnerabilities) database for vulnerability information. Query vulnerabilities by package version or commit, batch query multiple packages, and get detailed vulnerability information by ID.

ratomirjovanovic/pandaward

Local, evidence-based application security assessment with an evidence ledger and retests.

zakariagharzouli/sparda

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

prodlint/prodlint

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

makash/feedmyagent-skill

Agent-readable feed: AI/agent tech news, security advisories, compliance deadlines, and live events.

LeassTaTT/servicenow-mcp-ai

ServiceNow MCP server — 67 tools over the full REST surface, every auth method, flows, diagrams.

ashlrai/phantom-secrets

Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.

alicelabs-llc/universal-trust-adapter

68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.

koda-ai-studio/agent-bom

Scan AI/MCP dependencies, descriptor injection, risky tool inputs and authentication configuration.

aiden-network/aiden-mcp

Look up AI agents on Robinhood Chain: ERC-8004 identity, feedback and USDG-backed trust scores.

zyx77550/sparda

Injects a live, reversible MCP server into a running Express, FastAPI or Next.js app, with safe reads by default and writes gated behind human confirmation.

eater2/ai_agents_api_library

Find APIs and MCP servers for AI agents: auth, free tier, MCP endpoint, docs, last-checked date.

gambadio/onepassword-agent-mcp

Save and use 1Password secrets locally without exposing plaintext to AI agents.

nickpending/mcp-recon

Conversational recon with httpx and asnmap: domain analysis, security header inspection, certificate analysis and ASN lookups at multiple recon levels.

mrfentmen/dnstwister-mcp

DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.

csigelo/sigelo

One identity an AI agent owns: proves who it is offline, keeps its reputation, pays, messages agents

petrovicistefan/mcp-security-guard

Audit the MCP servers you use against the OWASP MCP Top 10: tool poisoning, rug pulls, shadowing, secrets and supply-chain risk, with runtime guards, approved-server policy and adversarial testing for server authors.

mguttmann/the-real-bitwarden-mcp

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

kumoproductions/mcp-cinema4d

MCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.

aidongise-cell/prism-scanner

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

Chimera-Protocol/csl-core

Deterministic AI safety policy engine with Z3 formal verification: write, verify and enforce machine-verifiable constraints for AI agents.

CTRLRun/ctrlrun

Execution safety for agent actions: a YAML-policy gateway that allows, holds or denies tool calls, plus an approval queue and hash-chained receipts.

slima-ai/slima-mcp

MCP Server for Slima - AI Writing IDE for Novel Authors with AI Beta Reader.

JhostinAleck/brightspace-mcp

D2L Brightspace MCP server: courses, grades, rubrics, feedback, course files, calendar. Multi-auth.

CorrectOver/mcp-server

MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.

Delego-Dev/delego

Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

pullkitsan/mobsf-mcp-server

Static and dynamic analysis of Android and iOS apps with MobSF.

AIM-Intelligence/AIM-MCP

Security-focused safety guidelines and content analysis for AI agents.

GeckoVision/gecko-surf

Point Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools.

sapiom/sapiom-js

Local Sapiom developer MCP for authoring, testing, deploying, and inspecting agents.

zenitheditor/zenith

Author, validate, edit, and render deterministic .zen design docs to PNG/PDF.

mastyf-ai/mastyf.ai

Runtime security proxy for MCP that blocks prompt injection, SSRF, shell/SQL injection and credential exfiltration, plus trust scores for npm MCP packages.

pkolawa/krs-poland-mcp-server

Access to Polish National Court Register (KRS)—the government's authoritative registry of all businesses, foundations, and other legal entities.

mohanagy/madar

Authenticated local evidence paths for JavaScript and TypeScript coding agents.

mlawsonking/MCP

Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

aliengiraffe/spotdb

Ephemeral data sandbox for AI workflows with guardrails and security

GautamTalksDev/mcp-pin

Stdio proxy that pins every tool definition (name, description, input schema, annotations) when you approve a server and blocks the session, with a diff, if any of it changes later. Also keeps a public, signed log of tool definition changes across public MCP servers.

lm203688/aishield

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

commet/argus

Preserve a user-authorized judgment and append later answers. No model verdict or human score.

agentward-ai/agentward

MCP proxy that enforces least-privilege YAML policies on tool calls, classifies PII/PHI, detects dangerous skill chains and generates compliance audit trails.

ajipurn/fida

Local-first MCP gateway for coding agents that redacts detected secrets from file reads and command output before they reach model context.

d-khomenko/clipboard-history-mcp

Your clipboard, but Claude can read it. Type-classified, secret-encrypted. macOS + Linux.

Acacian/aegis

Policy-based governance for agent tool calls across LangChain, OpenAI, Anthropic and MCP: YAML policies, approval gates, risk assessment and audit logging.

vikasny30/aletheia-mcp

Deterministic pre-execution filter for agent tool calls that blocks scope creep (credential reads, SSRF, destructive shell/SQL) and prompt injection.

calllint/calllint

Offline pre-flight security linter for MCP servers, agent tools and skills that returns SAFE, REVIEW, BLOCK or UNKNOWN verdicts without executing them.

Aethis-ai/aethis-mcp

Deterministic eligibility decisions and test-driven rule authoring via the Aethis developer API.