Skip to content
ProtocolProbe

Directory · topic · 2,075 servers

security

Servers whose registry description an AI model classified as security. Topics are estimates, not hand-checked. All topics.

  • io.github.nimitt-IN/india-cyber-regulationsIndian Cyber Regulation Register (BitScore)remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.ninefiveonefive/autobusautobus — signed attestations for agents, $0.01 per callremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.nirholas/keystore-mcp-serverEthereum Keystore Encryptionlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.nirholas/provenance-mcpthree.ws Provenancelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.node-man/dechonet-mcp13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.node9-ai/node9node9local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.nograai/nogra-mcpNogralocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.nolenation04/anchordAnchord (AnchorID)remote and local packagesecurity · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.nolindnaidoo/secrets-leSecrets-LElocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.nouchix/pqc-khepra-mcpPQC-Khepra MCP — CMMC Autopilot & AI Security Recorderlocal packagesecurity · AI-classifiedNot tested
  • io.github.novadyne-hq/vulnfeedVulnFeedlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.nowork-studio/notfairNotFairremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.npraught/orcpinPaid x402 facts for AI agents: signed statements, door reports, endpoint checks, chain readslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.nqzai/kakuninX.509 identity, risk scoring, and audit logging for AI agents. MiCA + EU AI Act compliant.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.nugehs/bouncerbouncerlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.nzdsf2-gif/relayshield-free-mcpRelayShield Scam Checksremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.nzdsf2-gif/relayshield-mcpRelayShield Security Intelligencelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.oakallow/oakallowOakallowremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.oaslananka/sentinelMCP Sentinellocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.occasiolabs/occasioTamper-evident, Sigstore-signed audit trail for Claude Code agents.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.ogasurfproject-jpg/hs-verify-gateMCP Verification Gate: check an MCP server or an A2A agent before you connect or delegateremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.oleg-vdv/kepilPassport, mandate, fail-closed action gate and tamper-evident journal for AI agents.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.omarei-omoto/hushhushlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
  • io.github.omarmohelal/sechelixSecHelixlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.omitly/omitly-mcpOmitly's local, verifiable PDF redaction for AI agents — your documents never leave your device.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.onelogin/onelogin-mcpMCP server for OneLogin API - manage users, apps, roles, and authenticationlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.oneprofile-dev/curatedmcp-catalog-mcpSearch the CuratedMCP catalog of risk-classified MCP servers and check verification status.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.operantlabs/operant-mcpSecurity testing MCP server for penetration testing, forensics, and vulnerability assessmentlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ormuzdo/agentic-security-shieldAgentic Security Shieldremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.oscal-compass/compliance-trestle-mcpAn MCP server that provides tools to author OSCAL security compliance documentationlocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.outris-dev-user/outris-identity-mcpIdentity resolution MCP server for phone/email lookups across 31+ services. Global + India coverage.remote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.owenkingva-web/vulnhuntVulnHunt Security Intelligenceremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.pageguard/pageguard-mcpPageGuard MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.palveron/governance-gatewayPalveron Governance Gatewaylocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.palveron/mcp-serverPalveron MCP Serverlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.parth-unjiya/odoo-mcp-gatewaySecurity-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 toolslocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.paul-salviani/trust-switchboardTrust Switchboardremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.payclaw/badgeAgents are not bots. Prove it. MCP-native identity declaration for authorized agents.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.pdaxt/pqvaultPost-quantum secrets manager for AI agents. ML-KEM-768 + X25519 + AES-256-GCM.security · AI-classifiedNot tested
  • io.github.pduggusa/dredd-mcpDredd MCPremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pduggusa/dugganusa-cliDugganUSA CLI — Local STDIO MCPlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.pduggusa/dugganusa-threat-intelJeevesus — DugganUSA Threat Intelligence MCPremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.peacprotocol/peacPEAC Protocol: Signed interaction receiptslocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.peter-tnc-453/guarded-whatsapp-mcpGuarded WhatsApplocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.phaedo-labs/phaedo-mcpCarry your Phaedo cognitive fingerprint into any MCP client: inject, consult, escalate, sign.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.philpof102-svg/mainstreetReputation oracle for AI agents on Base: SAFE/CAUTION/BLOCK + 0-100 score before you pay. x402+MCPremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.physics-star-cat/databutler-provenanceLive trust signals for domains & packages: age, registrar, typosquat resemblance.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pierre3/zap-mcpOWASP ZAP MCP Serverlocal packagesecurity · AI-classifiedNot tested
  • io.github.piiiico/proof-of-commitmentCommit — Supply Chain Risk Scoringremote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/abuseipdbAbuseipdbremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.pipeworx-io/alienvault-otxAlienvault Otxremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.pipeworx-io/circl-vulnerability-lookupCircl Vulnerability Lookupremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/cisa-kevCisa Kevremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/crtshCrtshremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/diditDiditremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/epssEpssremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/feodotrackerFeodotrackerremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/greynoiseGreynoiseremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/hackertargetHackertargetremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/hashHashremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/hibpHibpremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/ipqualityscoreIpqualityscoreremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/isc-sansIsc Sansremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/jwtJwtremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/malwarebazaarMalwarebazaarremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/mitre-attckMitre Attckremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/mitre-cweMitre Cweremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/mozilla-observatoryMozilla Observatoryremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/nist-beaconNist Beaconremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/nist-standardsNist Standardsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/nvdNvdremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/osvOsvremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/osv-devOsv Devremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.pipeworx-io/owaspOwaspremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/passwordPasswordremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/passwordgenPasswordgenremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/phishtankPhishtankremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/pulsedivePulsediveremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/security-feedsSecurity Feedsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/securitytrailsSecuritytrailsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/shodanShodanremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/shodan-internetdbShodan Internetdbremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/sigstore-rekorSigstore Rekorremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/threatfoxThreatfoxremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/urlhausUrlhausremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/virustotalVirustotalremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pipeworx-io/xposedornotXposedornotremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pm577/forge-mcpForge — Agent Reputation Protocolsecurity · AI-classifiedNot tested
  • io.github.pochtmanr/argusArgussecurity · AI-classifiedNot tested
  • io.github.pquattro/memoraeuMemoraEUlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.pquattro/memoraeu-mcpMemoraEUlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.pratham-jain33/security-mcpSecurity MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.presendapp/presend-depsPresend dependency checksremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.presendapp/presend-mcpPresend MCP Serverremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.pretorin-ai/pretorinPretorin Compliancelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.privacyfence/privacyfencePrivacyFencelocal packagesecurity · AI-classifiedNot tested
  • io.github.privacyplaybook/sops-mcpMCP server for creating and managing SOPS-encrypted secretslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.privatebydefault/default-privacyDefault Privacyremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.probe402/probe402-checkprobe402-checklocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.professor2k8/agent-security-lensAgentSecurityLens MCP Security Trust Checklocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.professoryilmaz1/impocor-ai-nexusIMPOCOR-AI Nexusremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.projetnanocorp/mandateMANDATE Credential Brokerremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.proofable/mcpProofable MCPremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.ptriato/valltAPI credential manager for Claude Code. Connect services, store keys in keychain, monitor health.local packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.putervision/webcryptWebCrypt MCP Serverlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.qFlav/agentdrop-mcp-serverMCP server for AgentDrop - encrypted file transfer between AI agents across any host or network.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.qingxuantang/tar-engineTAR Enginelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.qinisolabs/sanctionwiseVerified UK sanctions screening for AI agents — official FCDO UK Sanctions List, not guesses.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.quantakrypto/pqc-toolsquantakrypto pqc-toolsremote and local packagesecurity · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.r3352/redact-mcpRedact MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.radar989/polarity-mcpPolaritylocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.raditotev/agent-authAgentAuthlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.rafavecchi/grantdGrantd MCP server: let your AI agent act on a user's behalf across third-party APIs via OAuth.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.ramakrishnanhulk20/patinaPatinaremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.razashariff/proofxProofX - Content Protection for Creatorsremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.razel369/intentfenceIntentFence Agent Action Firewallremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.renaat-s/pyresec-agentPYRESEC - AI Code Security Auditingremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.renkagod/osint-toolbox-mcpOSINT Toolboxlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.revsmoke/promptrejectormcpSecurity gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.rezearcher/cve-triagex402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.richelo/isitdisposable-mcpAn MCP server that lets AI agents check whether an email address or domain is disposable.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.ricksporto/freshproofFreshProofremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.rijul170/alertlogic-mcpMCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflowslocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-08
  • io.github.rijul170/falcon-mcpCommunity extension of CrowdStrike falcon-mcp with near-complete Falcon API coveragelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.rijul170/qualys-mcpFull Qualys portal management over MCP: VMDR, PC, WAS, Cloud Agent, Container Security & morelocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.rijul170/sophos-central-mcpMCP server for Sophos Central — endpoint security, XDR/MDR, and MSSP multi-tenant opslocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.rikocr8orh8/regulatory-signalsAudit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.rnwy/mcpRNWY Trust Intelligenceremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.robyroro/osint-mcpOSINTlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.rog0x/cryptoHash, encode, UUID, password analysis for AI agentslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.rolandpg/zettelforgeZettelForgelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.rom-baro/arcwall-securitySecurity scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.rosarioV25/email-dns-preflight-x402Email DNS Preflight x402remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.rostradamus/klawsklaws — Korean compliance risk scannerlocal packagesecurity · AI-classifiedNot tested
  • io.github.rozetyp/vuln-intelvuln-intelremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.rsdouglas/janeeSecure secrets proxy for AI agents — manages API keys so agents never see raw credentials.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.rubrikinc/rubrik-mcpRubrik Security Cloudlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.rudimentall1/agent-guardrailDeterministic policy firewall for AI agent tool calls - YAML rules, not a fuzzy risk score.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.rudimentall1/agentic-wallet-guardian-v3Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.rudranaresh0201/verimcpverimcplocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.runsec-io/mcpRunSec MCP server for workspace security scanning and remediation workflows.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.ryudi84/hashMCP server for cryptographic hashing — MD5, SHA-1, SHA-256, SHA-384, SHA-512local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ryudi84/hash-forge-mcpHash text with SHA-256, SHA-384, SHA-512 and compare hasheslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ryudi84/jwtMCP server for JWT decoding and inspectionlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ryudi84/jwt-forge-mcpDecode and inspect JWT tokens — header, payload, expiry checklocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ryudi84/passwordMCP server for secure passwords, passphrases, and strength checking.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.ryudi84/password-forge-mcpGenerate secure passwords with configurable rules and strength checklocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sF1nX/x402stationx402station.io: independent risk-signal layer for x402 endpoints before agents pay.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.saagpatel/mcp-auditmcp-auditlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.saagpatel/mcp-trustmcp-trustlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.saagpatel/shadow-mcpshadow-mcplocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sacravenger/nanmesh-mcp12 tools that let AI agents check trust scores and reviews before recommending any software tool.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sadri-dridi/argon-lenArgon2 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/argon2d-okArgon2d encoded shape, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/argon2i-okArgon2i encoded shape, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/argon2id-okargon2id encoded hash shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/auth-infoAuthentication-Info nextnonce shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/bcrypt-cost-okbcrypt cost prefix check, hash discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/bcrypt-okbcrypt $2 hash shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/blake2b-lenBLAKE2b hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/corp-sameCORP same-origin/same-site token, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/cpe-okCPE 2.3 wfn field count, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/csp-ro-okCSP-Report-Only directive count, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/csr-fenceCSR PEM fence check, body discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/did-jwkdid:jwk thumbprint shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/dkim-okDKIM-Signature tag count, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/file-path-okFile Path Checkremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/gost-lenGOST R 34.11 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/header-safeSafe header name checkremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hibp-kk-anonymity 5-hex prefix, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hibp-okHaveIBeenPwned k-prefix shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hkdf-lenHKDF-SHA256 output length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hmac-sha256HMAC-SHA256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hmac1-lenHMAC-SHA1 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/hmac256-lenHMAC-SHA256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jose-okJOSE compact-part count, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwks-okJWKS keys array count, body discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-exp-shapeJWT exp claim shape, token discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-hdrJWT header.payload.sig shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-hdr-okJWT header segment shape, token discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-headerJWT header shape, payload discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-header-okJWT header segment shape, token discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/jwt-shapeJWT three-part shape, token discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/keccak512Keccak-512 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/lm-hashLM hash 16-hex shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/md5-okMD5 hex, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/pbkdf-lenPBKDF2 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/pem-fencePEM fence check, key discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/pem-okPEM fence check, key discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/pgp-armor-okPGP armor fence check, key discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/poly1305-okPoly1305 tag length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/scrypt-nscrypt N cost band, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sentry-dsn-shapeSentry DSN Shaperemote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha1-okSHA-1, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha224-lenSHA-224 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha224-okSHA-224 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha256-lenSHA-256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha256-okSHA-256, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha3-224SHA3-224 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha3-256SHA3-256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha3-384SHA3-384 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha3-512SHA3-512 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha384-lenSHA-384 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha384-okSHA-384 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha512-lenSHA-512 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/sha512-okSHA-512 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/shake256SHAKE256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/shake256-okSHAKE256 hex length band, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/smime-okS/MIME PKCS7 fence, body discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/spki-okSPKI prefix check, key discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/ssh-fp-okSSH fingerprint hex shape, value discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/streebog-okStreebog-256 hex length, input discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sadri-dridi/totp-shapeTOTP secret charset, secret discardedremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.safedep/vet-mcpSafeDep Vet MCPlocal packagesecurity · AI-classifiedNot tested
  • io.github.salemalem/npmscanNPMScanremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.san-techie21/astracipherCryptographic identity for AI agents: W3C DIDs, Verifiable Credentials, post-quantum cryptolocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.santhosh-005/bevigilBeVigil OSINTlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.sathergate/lockboxEncrypted secrets for Next.js. AES-256-GCM with no vault needed.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.scimo2021/moneygrid-gridwatchMONEYGRIDremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.scoutscore/scoutscoreScoutScorelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.secureprivacy/secure-privacy-mcpAn MCP server that automatically integrate GDPR-compliant cookie consent banners into websiteslocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.securityscan-api/securityscanSecurity for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.selflabbs/security-intel-mcpSecurity Intel MCPremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.sentrysurface/sentrysurfaceCybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.sercanmetalore/ai-act-compliance-mcpEU AI Act uyum MCP sunucusu — risk sınıflandırma (madde atıflı), rol bazlı yükümlülük listesi…remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.sergii-ziborov/weavatrix-onlineWeavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.seyoung230/alphakey-mcp-serverAlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDElocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.sgateway/s-gws-gwlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.shadoprizm/cyberlens-mcp-serverCyberLenslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shahidh68/audit-ledger-mcpRecord AI decisions to a tamper-evident audit ledger from any MCP-compatible agent.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shane-js/ghostfreeGhostFreelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.shawmena-dotcom/domain-verifyBonafido: Business Domain Verification APIremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.shieldfive/mcpShieldFivelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.shieldly-io/mcpAI-Powered AWS security analysis: scan IAM policies and CloudFormation for risks and escalation.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shigechika/entraadm-mcpentraadm MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shigechika/gwsadm-mcpGoogle Workspace Admin Security-Audit MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shigechika/keycloak-mcpKeyCloak MCPlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shotwellj/air-blackboxEU AI Act compliance scanner for Python AI agents — scan, analyze, and remediatelocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.shuaicongxiaomai/agentguardAgentGuard — security checks for AI agentslocal packagesecurity · AI-classifiedNot tested
  • io.github.shuji-bonji/pdf-verify-mcpPDF Verify (PDF Agent Stack)local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.shyshlakov/pci-dss-mcpPCI DSS v4.0.1 Compliance Checkerlocal packagesecurity · AI-classifiedNot tested
  • io.github.simohammedb/travsealA plug-and-play MCP Server for automated, low-cost C2PA provenance stamping via Base L2.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.simulacra/verifyfirstverifyfirstlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sinewaveai/agent-security-scanner-mcpSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sipyourdrink-ltd/bernstein-mcpVerifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.sirveil-ai/sirveil-exposureSirveil Exposureremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.sjkim1127/reversecore-mcpReversecore MCPlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.smartpolicy-protocol/smartpolicyRuntime authorization for AI agents and smart contracts via an immutable on-chain policy registrylocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.smijo-geek/scamcheck-mcp-serverScan suspicious messages, URLs, and text for scams with AI. Free tier - no API key required.remote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.smilemino/unchore-defendUnchore Defendlocal packagesecurity · AI-classifiedNot tested
  • io.github.smq9sn5jck-cloud/causallayer-mcpFaultKey · CausalLayerremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.smq9sn5jck-coder/causallayerCausalLayer MCPremote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.snapsynapse/every-ai-lawEveryAILawlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.snyk/saw-mcpSnyk API & Web MCP Serverlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.solhammer/agent-toolboxAgent Toolboxlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sophiacave/mcp-shieldMCP Shieldlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.soufianetahiri/mceptionAudits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.sp0oby/zkshareZKsharelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.sp3ak/safenode-mcp-gatewaySafeNode MCP Gatewaylocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.spark1security/n0s1-mcpSecret scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub and GitLablocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-08
  • io.github.sparkvibe-io/GuardianShieldAI security layer: code scanning, PII detection, prompt injection, secrets, CVEslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
  • io.github.spektre-labs/sigma-gateDeterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srbryant86/mcp-serverSign AI output for EU AI Act + FRE 902 compliance, verify content authenticity provenancelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.srotzin/hive-mcp-agent-kycHive Agent Kycremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-agent-storageHive Agent Storageremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-attestHiveAttestremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.srotzin/hive-mcp-audit-readinessHiveAudit Readinessremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-identityHive Identityremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.srotzin/hive-mcp-keet-bridgeHive Keet Bridgeremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-logHive Logremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-morphHive Morphremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.srotzin/hive-mcp-secretsHive Secretsremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hive-mcp-vaultHive Vaultremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.srotzin/hive-mcp-zk-attestationHive Zk Attestationremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.srotzin/hiveechoHiveEchoremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.srotzin/hivetrustHiveTrustremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.stanfrbd/mcp-cyberbroCyberbro MCP Serverlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.starloghq/starlogVet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.stashbase/mcpStashbaseremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.stcmain/whats-allowed-mcpWhat's Allowedlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.stefanoseggio/delta-registryDelta Registry — Regulatory & Compliance Monitoring (28 tools)remote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.stefantsezarov/savesavesavesaveSaveSaveSaveSavelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.stephenballot-ai/legacy-shieldZero-knowledge encrypted vault for AI agents. EU-hosted persistent storage.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.stevologic/security-recipesSecurity Recipesremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.stillmarcus24/stillos-notary-mcpAttestation infrastructure for the agentic economy: signed, independently verifiable verdicts.remote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.strac-io/strac-mcp-dlpStrac MCP DLPlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.subodhkc/ai-appsecAI AppSeclocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.subodhkc/mcp-tenant-isolationStatic analysis scanner for MCP server code and multi-tenant SaaS applications.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-08
  • io.github.sudo-ai-git/mcp-secret-scrubDeterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.sudo-ai-git/mcp-skill-secAudit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.sudohnim/eidolonPrivacy-first OSINT scanner: breaches, credentials, Shodan, username sweep. Scored PDF report.security · AI-classifiedNot tested
  • io.github.sukrutkrdg/warden402-mcpPre-execution safety for AI agents on Base. Guard a token, tx or address: block/review/clear.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.sundsoffice-tech/ai-audit-trailai-audit-traillocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.svayatta/agent-custodyagent-custodylocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.swnotmetal/koma-core-mcpKoma Core MCPlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.swnotmetal/koma-gate-mcpKoma Gate MCPlocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.synpareia/trust-mcpSynpareia Trust Toolkitlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.szl-holdings/hatun-mcpHatun MCP - Governed Agent Gatewaylocal packagesecurity · AI-classifiedNot tested
  • io.github.sznt2010/agentresources-mcpMCP server for Agent Resources: Trust Cards, signed telemetry, ERC-8004 identity, x402.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.tangfei7777-cell/mcp-output-firewallMCP Output Firewalllocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.tarides/sudo-proxysudo-proxylocal packagesecurity · AI-classifiedNot tested
  • io.github.tb0hdan/wass-mcpMCP server for web application security scanningsecurity · AI-classifiedNot tested
  • io.github.tb8412/qae-safety-mcpQAE Safety Certificationlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.temurkhan13/bash-vet-mcpVet LLM-emitted shell commands BEFORE execution. 26 destructive-pattern rules / 8 families.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.teodorofodocrispin-cmyk/sentinel-mcpSENTINELlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.terradev-cloud/entropyCryptographically sound randomness for agents, with verifiable commit-reveal.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.tfitzgerwitness/agent-identity-gardenAgent Identity Gardenremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.thegridwork/aiactScan codebases for AI usage, classify risk, generate EU AI Act compliance reports.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.thegridwork/licenseScan dependencies for license compliance — copyleft conflicts, unknown licenses, risk.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
  • io.github.thegridwork/privacyAudit websites for GDPR, CCPA, and ePrivacy compliance — trackers, consent, and policies.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.thomasxm/crowdsentinel-mcp-serverAI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensicslocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.threadlinqs-cmd/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 49 tools: threats, detections, IOCs, actors, C2, MITRE, CVEslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.tiagosilva07/zyrax-guardZyrax Guardlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.tide-foundation/razielRazielremote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.tidynest/raven-nest-mcpAI-driven penetration testing - 22 security tools behind safety-hardened MCP endpointslocal packagesecurity · AI-classifiedNot tested
  • io.github.titus-civic/mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.tjcgraham-rgb/gaip-trust-assuranceGAIP Trust & Assurance Agentremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.tjcgraham-rgb/gaip-witnessGAIP Witness Agentremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.tlkc888-Jenkins/joyJoy Trust Networkremote and local packagesecurity · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.tokenfix/legal-groundingExperimental Legal Groundingremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.tomjwxf/protect-mcpSigned receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.tomjwxf/scopeblind-mcpScan, protect, and monitor APIs from AI coding tools. Device-level rate limiting.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.tomjwxf/scopeblind-passportPortable cryptographic identity for AI agents. Ed25519 keypairs and signed manifests.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.tomjwxf/verify-mcpOffline Ed25519 verification of signed receipts, bundles, and trust artifacts.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.tomjwxf/veritasacta-verifyOffline receipt verifier. Ed25519 signature verification without contacting any server.local packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.tony8713/casaPrivate, permanent encrypted storage for AI agents. Paid per call in USDC via x402.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.github.tookeffect/tookeffectTookEffectremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.torkjacobs/tork-governanceAI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.traveljamboree/agentsec-mcpAgentSec MCPremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.trencinodin-stack/arcstone-mcp-sidecarDeterministic execution boundary and reference MCP sidecar for Arcstone Security Stacksecurity · AI-classifiedNot tested
  • io.github.trickyfalcon/mcp-defenderExecute KQL queries against Microsoft Defender Advanced Hunting via natural language.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.trickyfalcon/mcp-msdefenderkqlExecute KQL queries against Microsoft Defender Advanced Hunting via natural language.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.tristanroth1/ismscopilot-accountISMS Copilotremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.troothllc/trooth-networkTroothremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.troyhunt/hibpHave I Been Pwnedremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.trusteed-io/trusteed-mcpTrusteedremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.trusterinfo/domain-trustWebsite trust checks: 0-100 safety score, verdict and community reviews (truster.info).remote and local packagesecurity · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.trustlists/mcptrustlistslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.trustscoreagent/mcp-serverCheck the reputation of AI microservices and public APIs from an open trust registry.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.tsarlewey/proof-cliProof CLI (unofficial)local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.tylerscomic-lab/agent-skill-audit-mcpAgent Skill & Config Security Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/dockerfile-audit-mcpDockerfile Security Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/github-actions-audit-mcpGitHub Actions Security Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/mcp-trust-audit-mcpMCP Trust & Tool-Poisoning Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/npm-supply-chain-audit-mcpnpm Supply Chain Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/pii-redactor-mcpPII & Secret Redactorremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.tylerscomic-lab/secrets-leak-audit-mcpSecrets Leak Auditremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.uchit/mcp-regulated-ai-complianceRegulated-industry AI compliance: EU AI Act, APRA, NIST AI RMF, ISO 42001, AU AI Safety.local packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.ucsandman/dashclawPolicy checks, approvals, records, and governed HTTP capabilities for unattended agents.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.undone0603/authichainAuthiChainremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.usekaval/kavalKavallocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.uuaid/mcpPermanent identity + encrypted, quantum-ready memory that outlives the session, for any AI agent.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vaaraio/vaaraVaaralocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.vaaraio/vaara-serverVaara MCP Serverlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.valtirman/ndasentryNDASentryremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vantioai/vantio-gateVantio Gatelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vaquarkhan/mcp-bastionMCP-Bastionlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vardior9/apiiroShip software securely with an AI AppSec Agentsecurity · AI-classifiedNot tested
  • io.github.varvararatta/security_mcpSecurity Mcpremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vasilicasijarvis/flowsentryFlowSentryremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vassiliylakhonin/vizierVizierremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.vassiliylakhonin/vizier-guardVizier Guardlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vcprimiani/cissp-study-groupCISSP Study Group - CISSP Exam Prep & Practice Questionsremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.vdappdev2/identityMCP server for VerusID identities — register, update, revoke, recover, query, set timelocklocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vdineshk/ai-compliance-monitorRegulatory intelligence for AI agents across jurisdictionsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.vdineshk/dominion-observatoryRuntime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vedux98/faroFaroremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.verax-ai/veraxVERAXlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.veriswarm/veriswarm-mcpVeriSwarm MCP Server — Trust infrastructure for AI agents via Model Context Protocollocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.veritylabsai/verityVerityremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.verrysimatupang99/aegisAegislocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
  • io.github.vikasny30/aletheia-mcpAletheia Runtime Safety & Scope Creep Filterlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vinaybhosle/agentstampIdentity certificates, public registry, and wishing well for AI agents — x402 micropayments on Baseremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.vincentn-waivern/cookie-checker-gdpr-ccpa-gcmv2Cookie Consent Compliance Scannerremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.vinsenzo83/batonHand off AI work with a signed Verification Receipt — an independent verifier proves it runs.remote and local packagesecurity · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.violetclaire/popcorn-mcpPOPCORN MCPlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.viridis-security/injection-detectorFormally-verified injection/exfiltration detector for AI agents (MCP-02).remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.visus-mcp/visus-mcpSecurity-first web access. Sanitizes pages, blocks injection, redacts PII. Now with PDF/JSON/SVG.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.viviooio/viviooTrust infrastructure for AI agents. Directory, jobs, verification, and 360 feedback.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.vladimirbakalov/secretguard-mcpScans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.local packagesecurity · AI-classifiedNot tested
  • io.github.vmware-skills/vmware-hardenVMware Hardenlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vmware-skills/vmware-nsx-securityVMware NSX Securitylocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vola-trebla/env-secret-exposure-analyzer-mcpScans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vouch-protocol/vouch-mcpSign and verify W3C Verifiable Credentials so AI agents can cryptographically authorize actions.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.vpatser1/legal-doc-analyzerContract analysis, risk assessment, version diffs, compliance checks (GDPR, CCPA, SOC2)local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vpatser1/mcp-server-security-scannerScan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vpndetection-io/mcpVPNDetectionremote and local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.vulncheck-oss/mcpVulnChecklocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.vulnersCom/vulners-mcpMCP server for the Vulners.com APIlocal packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.wallettriage/wallettriage-mcpWalletTriagelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.webaesbyamin/agent-receiptsEd25519-signed receipts for every AI agent action. Local-first, verifiable, no server required.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.wefi-ai/ekyc-suiteeKYC Suitelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.weiseer/cve-cachecve-cachelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.wellknownmcp/cortex-gatewaySelf-hosted federated MCP gateway: one OAuth 2.1 MCP server in front of N apps, user-level scopes.remote and local packagesecurity · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.wheelerhubbell/decision-integrityDecision Integrityremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.wheelerhubbell/whp-standingWHP Standingremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.github.whisper-sec/whisperWhisperremote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.whisper-sec/whisper-graphWhisperGraphremote and local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.whitestone1121-web/signalbrainSignalBrainlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.whois-api-llc/mcp-whoisxmlapi32 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.williamblakecunningham-max/screenverity-mcpScreenVeritylocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.willianpinho/mcp-gateway-scanMCP Gateway Scanlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.wiserautomation/suprawall-mcpSupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.withpica/pica-settingsaccount, team, and api key management for withPICAlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.withwrit/writwritlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wkoverfield/switchboardOne firewall and password manager for all your AI coding agents' MCP servers and secrets.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.wmujahid428-web/muj428-trust-layerMUJ428 Trust Layer — Bind Approved Intent to Verified Effectremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.wmujahid428-web/trust-layerMUJ428 Trust Layer — VERIFY BEFORE ACTremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.woladi/pseudonym-mcpLocally pseudonymizes sensitive text before cloud LLM work and restores the tokens afterward.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.wowcool/agentsafeAgent Saferemote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.wundervault/wundervault-mcpZero-knowledge MCP secrets vault for AI agents: secrets injected at runtime, never seen by the modellocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyattbenno777/icme-preflightJailbreak-proof AI guardrails. Automated Reasoning SMT solver, not an LLM. ZK proofs included.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.github.wyre-technology/abnormal-mcpAbnormal Securitylocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/avanan-mcpAvananlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/blackpoint-mcpBlackpoint Cyberlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/blumira-mcpBlumiralocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/huntress-mcpHuntresslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/inforcer-mcpInforcerlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/ironscales-mcpIronscaleslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/keeper-mcpKeeper Secrets Managerlocal packagesecurity · AI-classifiedNot tested
  • io.github.wyre-technology/knowbe4-mcpKnowBe4local packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/mailprotector-mcpMailprotectorlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/mimecast-mcpMimecastlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/proofpoint-mcpProofpointlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/rocketcyber-mcpRocketCyberlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/saas-alerts-mcpSaaS Alertslocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/sentinelone-mcpSentinelOne (Purple)local packagesecurity · AI-classifiedNot tested
  • io.github.wyre-technology/spamtitan-mcpSpamTitanlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.wyre-technology/threatlocker-mcpThreatLockerlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.xbt786/hipaa-agentHIPAA Agentremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.github.xkumakichi/veridictKnow if you can trust your MCP server. Trust judgment for AI agents.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.xu-c0/cybersec-mcpCybersecurity MCP server: 323 prompts + 7 workflows for red team, blue team, SOC, cloud, OSINT.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.github.yarrasys/kdbxkdbxlocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.yessGlory17/jobverifyDetect fake-recruiter and job-offer scams using free OSINT. No API keys.local packagesecurity · AI-classifiedPackage does not starttested 2026-10-09
  • io.github.yzf75011-ui/brand-lookalike-watchBrand Lookalike Watchremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.github.zakariagharzouli/sparda-mcpSPARDAlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.zebbern/hacktricks-mcpOffline full-text search over the HackTricks security wiki, synced every 3 days.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.zekebuilds-lab/mcp-identityDoI score lookup, vouch event builder, and offline schnorr verify for AI agents.local packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.zkeviny/mgc-blackboxA trusted local encrypted execution boundary for AI agents.security · AI-classifiedNot tested
  • io.github.zscaler/zscaler-mcp-serverZscaler Zero Trust Exchangelocal packagesecurity · AI-classifiedNot tested · needs a credential or setting
  • io.github.zvmzaretsky/crypto-safetyFabTally Saferemote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.github.zw008/vmware-hardenVMware Hardenlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.zw008/vmware-nsx-securityVMware NSX Securitylocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.github.zyx77550/sparda-mcpSPARDAlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.gvnr/enforcer-governorGVNR by Instruxilocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.heronapp/heronSigned security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.huntertech/vendor-insightsHuntertech.io Vendor Insightsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.identark/gatewayIdentArk Gatewayremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • io.intesta/intesta-mcpIntesta — trust registry lookuplocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
  • io.intesta/registryIntestaremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.jikida/mcpSecurity tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.kernelscan/kernelscanKernelScanremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.ledgerproofhq/lainLedgerProof LAIN — Verified Evidence for Agentsremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.lookip/ip-lookupLookipremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.mcp-hangar/hangarMCP Hangarlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.mcpskills/serverTrust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.neruva/agent-trust-commonsAgent Trust Commonsremote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.obsideo/mcpEncrypted S3-compatible storage with possession proofs you can verify yourself. 12 GB free.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.sealsecurity/mcpSeal Securityremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.sentinelsignal/verifyMCP Verifyremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.simplyscan/simplyscanSimplyScanremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.skimguard/skimguardAsk whether a location has recent credit-card-skimmer detections, from a consumer sensor network.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.skycloak/skycloak-mcpSkycloakremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.snyk/mcpEasily find and fix security issues in your applications leveraging Snyk platform capabilities.local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
  • io.sparxx/mcp-gatewayspArxx.ioremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.sqlguard/sqlguardSQLGuard — permission before production writesremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.stackshield/stackshieldStackShieldremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • io.studiomeyer/armormcp-armorlocal packagesecurity · AI-classifiedNot tested
  • io.studiomeyer/server-attestationMCP Server Attestationlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.studiomeyer/stdio-shellguardMCP stdio ShellGuardlocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.sunaivacore/gateSunaiva Gate — Agent Rule Enforcementremote and local packagesecurity · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.systemprompt/reportssystemprompt.io reportsremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tenova/swt3-witnessSWT3 AI Witnesslocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
  • io.tooloracle/accessoracleAccessOracle - 10 access control tools: IAM, PAM, recertification, segregation of duties.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/agentguardAgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • io.tooloracle/cybershieldCyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/doraDORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/healthguardHealthGuard - 12-tool health/medical AI safety MCP: PII redaction, HIPAA, GDPR Art.9.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/policyoraclePolicyOracle - 12 policy lifecycle tools: drafting, approval, distribution, attestation.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/quantumQuantumOracle — 18 post-quantum crypto tools: Kyber, Dilithium, hybrid schemes, migration.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/registeroracleRegisterOracle - 10-tool DORA Art.28 register: ICT third-party, contracts, criticality.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/tlptTLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/trustlayerFeedOracle Trust Layer - 10-tool cross-server trust: signing, anchoring, verification.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.tooloracle/zkevidenceoracleZKEvidenceOracle - 14 zero-knowledge proof tools for compliance evidence: Groth16, PLONK.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • io.usefulapi/basis-theoryRead token metadata, applications, audit logs, proxies and usage in the PCI vault.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-09
  • io.usefulapi/castleInvestigate security events and manage the allow/deny lists an analyst acts on.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.usefulapi/kindeUsers, organizations, roles, permissions, applications and feature flags.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.usefulapi/onfidoCreate and read Onfido applicants, documents, checks and reports.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.usefulapi/personaRead Persona inquiries, accounts, verifications and reports.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.usefulapi/unkeyManage API keys, identities, permissions, rate-limit overrides and verification analytics.remote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-09
  • io.verifymcp/mcpVerifyMCPremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • io.vivioo/mcp-serverTrust infrastructure for AI agents. Directory, jobs, verification, and 360 feedback.remote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • it.elsas/security-intelDaily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.remote (hosted by the publisher)security · AI-classifiedNo sessiontested 2026-10-09
  • jp.sealgate/sealgateSealGateremote (hosted by the publisher)security · AI-classifiedNeeds the operator's credentialtested 2026-10-08
  • kr.ai.vdb/vdbCheck packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.remote and local packagesecurity · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • link.aotrust/notaryAOTrust Notarization & Evidence Serverlocal packagesecurity · AI-classifiedNot tested
  • link.cyberelf.whetstone/toolsWhetstoneremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08
  • me.desenmascara/desenmascaradesenmascara.meremote (hosted by the publisher)security · AI-classifiedNot probed (no operator authorization)tested 2026-10-08
  • me.identik/firmaIdentik Firma Digitalremote (hosted by the publisher)security · AI-classifiedNot tested · needs a credential or setting
  • net.agent-control/agent-controlAgent Control — Action Gateremote (hosted by the publisher)security · AI-classifiedOpen without sign-in · its tools were not calledtested 2026-10-08