MCP Server Directory

Scan an MCP server or agent configuration for security posture — evidence-bound findings

STEM — Persistent AI Memory dev.awase/stem

Persistent memory and shared context across compatible AI assistants, with account-scoped OAuth.

Pre-publish npm pack auditor: shipped files, size, secret-pattern leaks, missing fields.

Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.

Kestrova: Solidity Vulnerability Scan io.github.som2026-commits/kestrova

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

Read, check and write Rowih, a language for AI agents whose moves state force, basis and authority

LLM Red-Team Scanner io.github.manhliemcn4euwlu-source/llm-red-team-scanner

LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails

Find and redact personal data and secrets in text before it reaches a model. Local, no account.

Safety-first OPNsense firewall MCP: read-only by default, planned and auto-reverting writes.

Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.

Dependency Vulnerability Check (OSV) io.github.brunckel/dependency-vuln-check

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Local-first PII and secret scrubber with checksum checks and reversible LLM tokens.

iter0 io.github.inchwormz/iter0-mcp

Build and edit launch-ready websites for tech founders from a brief or an authorised reference.

CVE Exploit Priority (CISA KEV + EPSS) io.github.brunckel/cve-exploit-priority

CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.

TerraVault com.terravaulthq/licenses

U.S. state cannabis license lookups, licensed stores nearby, CA recalls. Read-only, no key.

The smart-environment module — scopes an agent's authority to actuate a home, tier by tier, and

resumejson com.tiraisoft/resumejson

Parse a resume or CV (PDF, DOCX, text, scan or photo) into typed JSON.

Stablecoin intelligence and vault readiness through WalletWall MCP.

Stride — AI software delivery platform page.stride/stride

Your team's stories, acceptance criteria, designs and docs, for coding agents. Sign in with OAuth.

Arrumou Neural io.github.brunoreisportela/arrumou-neural

Manage vacation rentals, bookings, calendars and operations with OAuth and action approvals.

Headless Metabase MCP: API-key auth, no OAuth. 178 tools, toolsets, stdio or HTTP, all tiers.

Author, render and visually verify Manim math animations from natural language

credential leases, never raw keys — scoped, expiring secret leases for agents; the agent gets a

The governed Zendesk server: OAuth-first, drafts until approved, and a receipt for every touch.