3159 Model Context Protocol servers — searchable, rated, ready to install.
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.
Score text and web pages for signs of AI writing; check images for hidden AI instructions.
Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
Compress GIFs from HTTPS URLs, poll results, and check credits. Hosted MCP with API key auth.
Offline full-text search over the HackTricks security wiki, synced every 3 days.
Uganda URSB company search by name and BRN, with director, secretary and shareholder lookup.
Connect authorized ad accounts to AI assistants for audits, reporting, and approval-gated changes.
Read-only BoomTax tools for filings, forms, payers, and e-file status through OAuth.
Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.
Synthetic UX reviews, findings, evidence images, and repair prompts. OAuth required.
Read-only Sinthoma clinical connector: patients, sessions and prep; OAuth consent and audit.
Short links and trackable QR codes: editable after printing, device routing, scan stats.
Pre-launch website QA: deterministic rule-based scans, readiness score, and blockers for agents.
Semantic search over the current Dodo Payments documentation. No authentication required.
Check how visible a website is in ChatGPT, Claude and Gemini answers, and start a new scan.
DMCA.com cases. Your own token via Authorization: Bearer. No function key, no shared token.
26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr
Convert JSON to TOON (about 43% fewer LLM tokens) and TOON back to JSON. Free, no auth.
Capture a web page from your own Chrome as a PDF whose text is still text.
KYC automation from authoritative public sources. Requires an Encompass licence.
Official HitPay MCP: sales, payouts, balances; create payment links and invoices. OAuth; no refunds.
Read/verify the public map of location-anchored BSV pins; build place/mint payloads. No auth.
Let AI agents use secrets without seeing them: inject into a command, redact the output.
POST /mcp