MCP Server Directory

Forge-Space/branding-mcp

AI-powered brand identity generation via MCP with design tokens, typography, and logo assets.

GoodJobwilliam/aicraft

Code review as an MCP server — structured reviews with OWASP security scanning.

oscal-compass/compliance-trestle-mcp

An MCP server that provides tools to author OSCAL security compliance documentation

starter-series/create-starter

Scaffold Starter Series projects and check release, deployment, security, and agent instructions.

pduggusa/dugganusa-cli

Local STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.

YawLabs/electron-mcp

Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

flatbread-cli/flatbread

Share a coding agent's session as one link, secrets redacted first; pull another run's brief.

emiliano-go/gpg-mcp

Security-focused MCP server for GnuPG signing, encryption and key management.

GuardBee/guardbee-mcp

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

pipeworx-io/mcp-imf-portwatch

IMF PortWatch MCP — global maritime trade & chokepoint signals (free, no auth)

unesLam/jikida

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

dinhkarate/keyshroud

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

adelaidasofia/linear-mcp

Multi-workspace Linear MCP — PAT auth, 57 tools + 3 prompts, substrate enforcement, drop-in.

YawLabs/npmjs-mcp

npm registry MCP server — package intelligence, security audits, dependency analysis

cyanheads/osv-advisory-mcp-server

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

mdostal/portunus

Secret broker for agents: reference secrets by name; values injected only at the execution boundary.

tidynest/raven-nest-mcp

AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

tide-foundation/raziel-mcp

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

reworkio/REWORK-Proof

Verify REWORK credentials: is this delivered work genuinely the author's?

rubrikinc/rubrik-mcp

Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.

Ventrova/sentinel-scan-cli

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

1N3/sn1per-mcp

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

toro-guapo/trestle

Detects leaked secrets (API keys, tokens, private keys) in source code.

Insomniac-VibeLabs/two-key

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

PranLabs/valca

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

mandarelabs/mandare

Accountability for AI agent fleets: verify a signed, hash-chained ledger, check budgets, kill an agent, and issue passports and mandates, all through the local CLI.

wei9072/aegis

Admission control for agent file edits: checks syntax, structural-cost regressions and workspace boundaries, returning BLOCK, WARN or PASS verdicts.

joergmichno/clawguard-mcp

Security scanner for AI agents that detects prompt injections using regex patterns.

kimjooyoon/gooo-go-ports/service-grant-mcp

Local stdio server for Gooo-generated service-grant narrowing decisions: checks preservation of one required request and returns the full proof with source/generation bindings. It does not apply grants or authenticate supplied facts.

itsalissonsilva/ModelSafetyMCP

Scan ML model artifacts, URLs and directories for unsafe serialization, malicious patterns and risky packaging using ModelScan, PickleScan and heuristics.

suhui-organization/pod

Least-privilege compiler for agents: record real tool calls, compile a minimal policy, enforce it at an MCP gateway and keep a hash-chained audit.

rev2ret/SecureAudit-MCP

Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.

rob925/mcp-shield

Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt injection.

gautam-u/sieve-mcp

Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command execution.

vaulted-fyi/vaulted-mcp-server

Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.

Perufitlife/web-exposure-mcp

Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.

rudimentall1/agentic-wallet-guardian-v3

Self-hosted security layer that evaluates AI agents' proposed blockchain transactions and returns an explainable allow, warn or block decision.

zekebuilds-lab/captcha-mcp

Middleware that gates MCP tool calls behind a Hashcash proof-of-work challenge or an L402 Lightning payment via self-hosted LNbits.

goldmembrane/cleaner-code

Locally scans AI-generated code for invisible Unicode, Trojan Source, homoglyphs, rules file backdoors and typosquatting using static analysis and CodeBERT.

AIops-tools/Firewall-AIops

Governed OPNsense + pfSense firewall operations — gateway-health, rule-shadow, and blocked-traffic RCA, plus guardrailed rule/alias writes (35 tools) with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

BeBraveBeKind/mcpskills-server

Scores MCP servers, AI skills and npm packages before install, scanning for prompt injection, credential theft and supply-chain risk, with a go/no-go gate.

chrbailey/promptspeak-mcp-server

Pre-execution governance for agent tool calls: risk classification, behavioral drift detection, a hold queue for dangerous operations and an audit trail.

uchit/mcp-regulated-ai-compliance

Regulated-industry AI compliance knowledge: control lookup, use-case classification and crosswalks for EU AI Act, NIST AI RMF, ISO 42001, APRA, GDPR and more.

elberacasa/umbra

Trust scores and guardrails for AI-generated code: static security rules, Docker-verified build/boot checks and receipts that catch agents lying about tests.

Atypical-Consulting/AdrMcp

MCP server for Architectural Decision Records: navigate, author, validate, link, and analyze them.

romanpert/mcp-aemps

MCP server for the Spanish AEMPS CIMA pharmaceutical registry (20,000+ authorised medicines).

co2water/agentegress

See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict

studiomeyer-io/mcp-armor

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.