MCP Server Directory

PYRESEC - AI Code Security Auditing io.github.renaat-s/pyresec-agent

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

guide-registry guide.militaryleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

CERT-FR Security Advisories — buy per-query in-session (certfrwatch) com.a2awire/data-cert-fr-advisory-national-cert-alert

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

Degenscan Intel io.github.tradewr333-lgtm/degenscan-intel

Cross-asset market event intelligence for AI trading agents. Pay per call (USDC/x402) or API key.

Trent ai.trent/trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

WebStartHub services com.webstarthub/services

Public services, guide/FAQ search and estimates. Inquiry drafts require scoped authentication.

guide-registry guide.officeleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

guide-registry guide.marketingleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Free local micro-APIs: markdown cleaner, JSON validator, CSV-to-JSON, agent-config secret auditor.

Pay-per-call x402 services from SWARM: repo scans, web research. USDC on Base.

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

Xtracticle com.xtracticle/xtracticle

Read public X (Twitter) posts, threads and X Articles as clean Markdown. Read-only, no auth.

Authorizes MCP tool calls against a session policy, not one call at a time.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

FindWeedNY com.findweedny/findweedny

Licensed NY cannabis dispensaries, brands, deals, license checks and lab-anchored reviews. No auth.

Scans agent code for untrusted input poisoning persistent cross-session memory

A local, permissioned MCP agent for authorized developer workstations.

BrickTrack au.bricktrack/portfolio

Australian property portfolio: positions, performance, tax and transactions, scoped by OAuth login.

Brain Scanner io.github.kevin-lozada-santos/brain-scanner

Recover project context, review recorded decisions, and steer queued work across AI coding agents.

GitHub Actions Security Audit io.github.tylerscomic-lab/github-actions-audit-mcp

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

CVE Risk Check app.openkrill/cve

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Commerce preflights, agent run mandates, D365 authorization, and offer checks; no external writes.