MCP Server Directory

tamas-fm/project-lore-mcp

A local-first MCP server that routes development tasks to authoritative project documentation.

I4cTime/q-ring

OS keychain secrets for AI coding agents, over MCP.

VamsiSudhakaran1/release-gate

Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

mdfifty50-boop/secure-vault-mcp

Encrypted secrets and credential management for agents

TeodorMCP/universal-connector-mcp

Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.

vmware-skills/VMware-NSX-Security

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

AhmedLaminou/windows-mcp-server

Local Windows management, diagnostics, security, cleanup, and optimization MCP server.

usezn/zn

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

noor202401938-netizen/cyber-chef-mcp

CyberChef MCP server providing 28 core data transformations, ciphers, hashing, JWT decoding, representation-calibrated Shannon entropy, and multi-layer payload deobfuscation for AI coding and security agents. npx -y @noorfatima123456/cyber-chef-mcp

Adeptus-Innovatio/solvitor-mcp

Reverse engineering tools from Solvitor: extract IDL files from closed-source Solana smart contracts and decompile them.

airblackbox/air-blackbox-mcp

EU AI Act compliance scanner for Python AI agents (LangChain, CrewAI, AutoGen, OpenAI) with prompt injection detection, risk classification and fix generation.

renkagod/osint-toolbox-mcp

Runs 12 OSINT tools locally (Sherlock, Maigret, Holehe, GHunt, SpiderFoot, subfinder...) plus built-in WHOIS, DNS, crt.sh and Wayback lookups. No API keys.

moxno/privacyscrubber-mcp

Local, zero-trust masking of PII and secrets.

drupadsachania/aegis-skills

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

Digital-Defiance/ai-capabilities-suite

Advanced filesystem operations with strict security boundaries for AI agents

WSattazahn/caveat-lang

Authoring bridge for Caveat: validate, check and test programs; explain decisions; find dependents.

New1Direction/ningen-shikkaku

Serve a secret to an agent exactly N times from locked RAM, then wipe it and self-destruct.

Defenter-AI/defenter-proxy

Real-time semantic security for AI coding agents and MCP tools

sparkvibe-io/GuardianShield

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

getmcpm/cli

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

DownAtTheBottomOfTheMoleHole/megalinter-mcp

MCP server for running Ox Security MegaLinter via mega-linter-runner

mastrophot/near-mcp-contract-security

MCP smart contract scanner with NEAR-focused security context.

alisaitteke/npm-mcp

MCP server for npm package management, security analysis, and compatibility checking

Mickdownunder/SafeInstall

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

KryptosAI/mcp-seatbelt

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

RudrenduPaul/skillguard

Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.

aliboIly/Tripwire

MCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.

info-arnav/unlocalhost

Deploy localhost to a private, authenticated link from your AI coding agent.

deaabie/skuuy-mcp

13 privacy-first network, auth & web tools for AI agents — no API key, 60 req/min free.

9hannahnine-jpg/arc-gate-mcp

Runtime governance for MCP tool calls that blocks prompt injection and capability abuse before tool results reach the agent.

laszlopere/mcp-bytesmith

Offline byte toolbox: hex/Base64/Base58 encoding, cryptographic and CRC hashing, base conversion, secure tokens, plus optional Ethereum/EVM tools.

Erodenn/fetch-guard

URL fetcher and HTML-to-Markdown converter with layered prompt injection defense: hidden-element sanitization, risk scanning and content boundary wrapping.

jamjet-labs/jamjet-policy/mcp-shim

MCP interceptor that applies one YAML policy (block, require approval, audit, budget cap) to tool calls, also usable in Claude Code hooks and agent SDKs.

ppcvote/misp-mcp-server

Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.

srinivasan-sundaresan95/orihime

Cross-repository code knowledge graph for Java, Kotlin, JavaScript and TypeScript: call-flow tracing, taint analysis, reachability and license compliance.

muhannad-hash/mcp-shield

Pre-install security scanner for MCP servers: detects backdoors, exfiltration code, obfuscation, dangerous execution, prompt injection and supply chain risks.

askalf/truecopy

Supply-chain gate for agent skills and MCP servers: detects poisoned tool definitions, pins servers by hash, checks drift in CI and proxies only pinned tools.

nickgeorgeseo/mcp-gatehouse

Permission tiers, approval gates and secret-redacting audit logging enforced inside MCP servers at the tool boundary, with a demo order-desk server.

nagameTW/mcp-server-malcolm

Malcolm threat hunting: search and aggregate network traffic, query Suricata alerts, browse Arkime sessions and resolve NetBox assets. Read-only by default.

privacyfence/privacyfence

Privacy and approval gateway between AI assistants and Gmail, Drive, Slack, Salesforce, Jira and more: human approval for sensitive reads and writes, local PII detection and an audit log.

felixpg13-glitch/spendshield

Payment guardrails for AI agents: spend caps, budget and approval gates, prompt-injection defense, an encrypted secret vault and an audit trail.

eliottreich/taskbounty-check

Local, read-only scanner for GitHub Actions and CI maintenance issues in AI-built apps, with finding explanations and fix plans.

tunahanaliozturk/derbent

One local gate for Claude Code, Codex, Copilot CLI and Antigravity: allow, deny and ask rules over MCP and built-in tool calls, approvals from a terminal UI, and hash-chained receipts.

ApocData/ApocData-mcp-server

天启至数 ApocData - MCP Server for A-share market data (46 free, no-auth endpoints)

dinglebear-ai/rapprise

Apprise notifications over MCP and CLI with authenticated stdio and HTTP transports.

pipeworx-io/mcp-art

Art MCP — Metropolitan Museum of Art Collection API (free, no auth)

RealSpap/authority-risk-oracle-showcase

Read-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.

bawbel/bawbel-mcp

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.