MCP Server Directory

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

The agent tool formulary: certified-equivalent substitution com.textforagents/tool-formulary-substitution-for-agents

Certified-equivalent tool substitution: probe-certified ratings, signed receipts, DAW, prior auth.

AW-1 Sovereign Circuit Breaker io.github.MvikManners/aw1-circuit-breaker

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

GeekWala Dependency Scanner com.geekwala/dependency-scanner

Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.

Local macOS arm64 vault with a stdio bridge. Install and open the bundled ISA app first.

Ranuk Web Accessibility & AST Security Auditor io.github.RanuK12/ada-audits

Edge MCP Server for live WCAG 2.1 AA accessibility compliance and AST security audits.

Pugi io.pugi/pugi

AI product team: builds and publishes websites from a brief, logos, security checks.

SafeWeave dev.safeweave/safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

credential leases, never raw keys — scoped, expiring secret leases for agents; the agent gets a

OCR scanned PDFs and images into text or searchable PDFs with the FastOCR API.

Provider-side MCP firewall: identity, threat-intel, barter, rate limits, DLP, audit.

POAScan io.github.jakegallen/poascan

Read-only Proof of Agent explorer: epochs, rewards, holders, swaps and agent census. No auth.

AgentRead dev.workers.toolschemaforge.agent-read/agent-read

Turn URLs, PDFs and DOCX into clean Markdown for agents, plus prompt-injection scanning

MCP OAuth remediation verification com.textforagents/mcp-oauth-remediation-verification

Three-leg MCP OAuth remediation verdicts, proven behaviourally against a canary server.

ScorpTech x402 API com.it.scorptech/x402

112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups

Secret broker for agents: reference secrets by name; values injected only at the execution boundary.

FET112 com.fet112/fet112

Security intelligence for AI agents monitoring Ethereum before actions.

Board Planner io.github.rafalpodles/board-planner

Project board for teams and coding agents: Kanban, sprints, 46 tools, OAuth 2.1 or API tokens.

LLM Red-Team Scanner io.github.manhliemcn4euwlu-source/llm-red-team-scanner

LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails

aictrl dev.aictrl/aictrl

Project context, backlog tasks, and controlled workflows for coding agents. OAuth sign-in.

resumejson com.tiraisoft/resumejson

Parse a resume or CV (PDF, DOCX, text, scan or photo) into typed JSON.

TerraVault com.terravaulthq/licenses

U.S. state cannabis license lookups, licensed stores nearby, CA recalls. Read-only, no key.

Republeq Merchant MCP com.republeq/merchant

OAuth-protected product catalog, ratings, reviews, categories and guides for approved agents.

Local-first PII and secret scrubber with checksum checks and reversible LLM tokens.