MCP Server Directory

Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.

Local MCP broker: agents call credentials through a daemon without seeing secrets.

Velox TriFit: Virtual Try-On API io.github.Velox-XR/velox-trifit-developer

Virtual try-on (VTO) API docs and SDK examples; OAuth account/guest photo uploads and try-ons.

Patchwire dev.monowire/patchwire

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

FixedIn dev.fixedin/fixedin

Actively exploited? End of life? Which version fixes it? CVE verdicts for server software.

anon.li io.github.anondotli/anon-li

Manage anon.li email aliases, recipients and encrypted file drop metadata over OAuth.

Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.

StackLégal eu.stacklegal/catalog

GDPR provider fiches and a static cookie scan before consent.

tech-risk ai.greyridgesignals/tech-risk

MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data

POEditor io.github.POEditor/mcp.poeditor.com

Official MCP server for POEditor, the translation management system. Hosted, OAuth 2.1.

AcidPeak com.acidpeak/acidpeak

Read-only vulnerability intelligence: CVEs, exploitation evidence, fixes and product matches.

AgentDiet A2A Indirect Prompt-Injection & Jailbreak Firewall dev.agentdiet/prompt-guard

Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.

Spacery io.github.lukehollis/spacery

Publish 3D scans, Gaussian splats and 360 tours as shareable spaces, and build guided tours in them

Footgun com.getfootgun/footgun

Dated, verified API breakages for coding agents, plus a local scan for them in your existing code.

DomainRef - domain and email security check dev.domainref/domainref

Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.

Harbor pilots for agents com.textforagents/harbor-pilots-for-agents

Certified local pilot boards for an unfamiliar site, with scoped authority and signed completion.

FormVault io.github.terjetyl/formvault

Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

Preflight com.allthepossibles/preflight

Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

Zovo DNS Checker io.github.theluckystrike/dns-checker

Live DNS & email auth checks

Sekura ai.sekura/sekura

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

SafeWeave dev.safeweave/safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

AgentDiet DeFi Stablecoin & Liquidity Pool Yield Arbitrage Scanner dev.agentdiet/defi-yield

Scans live DeFiLlama APYs, TVL depth, and risk-adjusted yield spreads across Base, Arbitrum, Sola.

セキュリティIoTソリューション jp.yomitasu/securityiot-theshop-jp

防犯カメラ 監視カメラ ネットワークカメラ どこでもカメラ 住宅・店舗・事務所・駐車場・倉庫・建設現場・農地など…（securityiot.theshop.jp の内容を検索して答える。ヨミタス経由）

Cutshed com.cutshed/cutshed

Free browser tools, Studio prices, and the public clipper quote. Account tools need OAuth.