MCP Server Directory

MCP Trust & Tool-Poisoning Audit io.github.tylerscomic-lab/mcp-trust-audit-mcp

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

cloakcheck com.edgethirteen.www/cloakcheck

Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.

Trent ai.trent/trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

TANDIU AI infrastructure data cn.tandiu/data

Free, no auth. Daily CN AI infra: LLM prices, index, trends, GPU, estimators, agents, PC, funding.

Secure MCP server framework with 23 security layers and ML threat detection. Zero deps.

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

Singularity - MCP Discovery & Security Gateway io.github.gaurav-kumar-sinha-060705/singularity

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

WhyVault io.whyvault/vault

Shared Markdown memory that every AI assistant can read and write. Hosted in the EU.

Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.

PaperOffice AI io.github.paperoffice-ai/paperoffice-mcp

Document AI and headless DMS: OCR, IDP, search, workflows, signatures. EU-hosted, OAuth 2.1.

CedarAI Data Depot io.github.cedarai/cedar-mcp

Read-only Cedar ARMS railroad data via Cedar login for authorized carriers.

Agent Card Health Check io.github.kadopi/agent-card-health-check

Free no-storage MCP that checks A2A Agent Card connection readiness for authorized targets.

Commerce preflights, agent run mandates, D365 authorization, and offer checks; no external writes.

FlygKollen — Swedish Flight Tracking io.github.jannegpriv/flygkollen

Swedish flight tracking: live status, gates, airport boards, nearby-aircraft ADS-B scan.

7IT Solutions io.github.XLSV777/7it

Store speed, web-app security checks, automation ROI, checklists and guides from 7IT Solutions.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

Check text for leaked credentials before an agent writes or commits it. Runs locally.

FirstSales io.github.firstsalesio/firstsales

OAuth CRM tools for companies, deals, campaign insights and contact creation in FirstSales.

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

guide-registry guide.pokerplayer/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

AIOS Public Discovery uk.aios-system/public-discovery

Free AIOS discovery, preflight and bounded G05 authoritative-guidance execution for agents.

corsproxy.dev dev.corsproxy/mcp

Call third-party APIs from agents without leaking secrets. SSRF blocked, per-key quotas.

Barcode Tools (decode, render, GTIN validate) io.github.appvantagelabs2-a11y/barcode

Decode, render, validate barcodes: QR, DataMatrix, EAN, UPC, PDF417. All tools free, no auth.