MCP Server Directory

blackducksoftware/mcp-server

AI-powered security scanning using Black Duck Signal for vulnerability detection.

blackdome-ai/blackdome-mcp

Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

Kevthetech143/chain-signer

Security suite for AI agents: flag drains, permit-phishing & risky actions before signing.

clayseal/clayseal-capabilities

Authorizes MCP tool calls against a session policy, not one call at a time.

commit-check/commit-check-mcp

Commit policy as code for AI agents: check commit messages, branch names and authors before a push

EranYonai/Conning

Run commands on your remote test machines over SSH without the agent ever seeing a secret.

shadoprizm/cyberlens-mcp-server

Security scanning for websites, public repositories, and Open CLAW skills.

DeepSleuth/deepsleuth-mcp

Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.

pipeworx-io/mcp-deezer

Deezer MCP — public catalog (no auth required).

deliverd-dev/deliverd-sdk

Find and redact personal data and secrets in text before it reaches a model. Local, no account.

pipeworx-io/mcp-dictionary

Dictionary MCP — wraps Free Dictionary API (free, no auth)

dingdawg/dingdawg-agent-1

AI code review — security, quality, performance. Learns your patterns. Receipted.

yusiwen/drone-mcp-server

MCP server for Drone CI/CD: 45 tools for builds, repos, secrets, users and templates

pipeworx-io/mcp-ebay

eBay MCP — Browse + Taxonomy APIs via client_credentials OAuth

pipeworx-io/mcp-edgar

EDGAR MCP — SEC EDGAR public APIs (free, no auth)

cyanheads/evals-mcp-server

Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.

cyanheads/first-epss-mcp-server

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

t1ktakdev/ForgeBridge

A local, permissioned MCP agent for authorized developer workstations.

Gadriel-ai/gadriel-copilot-plugin

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

pipeworx-io/mcp-gamedeals

Gamedeals MCP — wraps CheapShark API (game deal aggregator, no auth required)

shane-js/ghostfree

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

GhostPawJS/souls

Local cognitive identity engine with traits, behavioral evidence, and revision history.

pipeworx-io/mcp-grants-gov

Grants.gov MCP — open federal grant opportunities (free, no auth)

pipeworx-io/mcp-gutendex

Gutendex MCP — wraps Gutendex API for Project Gutenberg books (free, no auth)

pipeworx-io/mcp-iconify

Iconify MCP — wraps the Iconify public API (free, no auth)

pipeworx-io/mcp-imgflip

Imgflip MCP — wraps Imgflip API (free, no auth for template listing)

theone55/jfs

Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.

dulzuradev/liveauth-mcp

MCP server for LiveAuth: PoW + Lightning auth, L402 bundles, and paid MCP tool receipts.

gentaArnezzi/MCPSentinel

Precision-first security scanning for Model Context Protocol servers.

Tyox-all/Weave_Protocol

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

mcp-protocol/node-runtime

This package is intended for demonstration only. Maintained by JFrog Security.

kanywst/mcp-opa-authz

Authorization answers from real policy code: evaluate Rego locally, or ask an AuthZEN 1.0 PDP.

edithatogo/osf-cli-go

Read-only MCP tools for authenticated Open Science Framework projects and files.

pipeworx-io/mcp-owid

OWID MCP — Our World in Data chart/indicator access (free, no auth)

RudrenduPaul/ownvoice

Wraps the ownvoice CLI as a single generic MCP tool for voice/identity checks.

stasxr/palanit-core

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

cyanheads/pentest-mcp-server

Offline methodology engine for authorized penetration testing, CTF, and security research.

100xPercent/pop-pay

Runtime security for AI agent commerce. CLI + MCP server blocks hallucinated purchases.

pipeworx-io/mcp-pubmed

PubMed MCP — wraps the NCBI E-utilities API (biomedical literature, free, no auth)

nan786521/recon-mcp

Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

mechubsec/rustsdcmcp

Juniper Security Director Cloud MCP server: scoped, audited change control. Rust.

munhq/sealkeep

Let AI agents use secrets without seeing them: inject into a command, redact the output.

omarmohelal/SecHelix

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

rijul170/sophos-central-mcp

MCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant ops

pipeworx-io/mcp-stackexchange

StackExchange MCP — wraps the StackExchange API v2.3 (free, no auth required for read)

digidenone/SynapseAudit

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

CharitonMedia/Tremelay

Local MCP broker: agents call credentials through a daemon without seeing secrets.

SoWhatI/vaultshell

Injects secrets into shell commands at exec time; plaintext never reaches the LLM context