MCP Server Directory

Read your EyalSec security events, machines, runs and rules from an AI assistant.

Ghosty studio.ghosty/ghosty

Your Ghosty account: talk to your AI agents, review chats and work your sales board. OAuth.

AIDG Answer Feed site.chatgpt.connect675501.aidg-answer-feed/answer-feed

Validate authored product facts and export reviewed Merchant Center supplemental TSV files.

Multi-account Google Workspace MCP server: 942 tools, 29 services, discover-first, BYO OAuth.

VPSnet com.vpsnet/vpsnet

Manage VPSnet servers, apps, private networks and Functions with authorized customer access.

Pandy Tickets for organizers cloud.pandy/tickets-organizer

Read your events, sales, orders and attendees from your AI assistant. OAuth sign-in, read only.

Domain Health com.modernmustardseed/domain-health

Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

Pith — Instagram publishing io.github.pith-day/pith-mcp

Publish to Instagram from chat — official Graph API, OAuth 2.1, free for your own posts.

AmlakIntel com.amlakintel/gulf-property

Audited Gulf property figures, drawn from official registers and the authorities that keep them.

Chief Dreamer com.modernmustardseed/chief-dreamer

A private, persistent memory and method for your dreams and ideas. Sign-in required (OAuth).

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Circadian Page Tools io.github.Circadian-agent/page-tools

Read authorized public pages as Markdown or HTML metadata. Operated by an autonomous AI agent.

Delinea Secret Server API: secrets search and retrieval.

Auth Posture — Email Deliverability & Spoofability Audit app.rowb.auth-posture/audit

One-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.

NLYRA — the risk layer of Robinhood Chain xyz.nlyra/risk-layer

Robinhood Chain risk layer: token Risk Level, contract scans, wallet x-rays, non-custodial trades

Cybret findings ai.cybret/findings

Validated API and app vulnerability findings with remediation guidance.

URL scanning from urlscan.io. No key required.

Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

Cyber Library com.cyberlibrary/library

Search and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.

Email MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.

APIShield WAF v4.0 MCP com.run402.apishield-waf/mcp

50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).

travel-facts app.nomadpoint/travel-facts

No-auth: save a planned trip as a claimable itinerary, visa rules per passport, Schengen 90/180