MCP Server Directory

Brain Scanner io.github.kevin-lozada-santos/brain-scanner

Recover project context, review recorded decisions, and steer queued work across AI coding agents.

Check text for leaked credentials before an agent writes or commits it. Runs locally.

Commerce preflights, agent run mandates, D365 authorization, and offer checks; no external writes.

AI API Cost Firewall & Rate Limiter io.github.Ansarii/mcp-rate-limiter

Token guard and rate limiter preventing runaway API cost spikes for OpenAI and Anthropic.

MCP Security & Vulnerability Auditor io.github.Ansarii/mcp-security-auditor

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Insuro au.com.insuro/insuro

Free insurance vault MCP: OAuth policies, renewals, coverage Q&A, file PDFs. Global; not advice.

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

Vesremont com.vesremont/store

Vesremont catalog, product search and buyer-authorized shopping operations.

Dotsy ai.dotsy/mcp

Build and publish static sites on Dotsy with draft-first MCP tools, OAuth Connect, and API keys.

PROME Care Core ai.prome/care-core

Check actions against fixed values using supplied numeric facts. Never authorizes or executes.

Read-only macOS disk analysis with bounded scans, size queries, and extension breakdowns.

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Dynamic QR Codes com.getdynamicqr/qr-codes

Create dynamic QR codes and re-point ones already printed, with bot-filtered scan analytics.

Helius io.github.pipeworx-io/helius

Helius MCP — deeper Solana wallet/asset data than solscan (helius.dev)

Who can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).

Free local micro-APIs: markdown cleaner, JSON validator, CSV-to-JSON, agent-config secret auditor.

corsproxy.dev dev.corsproxy/mcp

Call third-party APIs from agents without leaking secrets. SSRF blocked, per-key quotas.

Priority — TypeScript Compiler Intelligence dev.semanticreader/semantic-reader

Stateless TS/JS compiler facts for agents: references, imports, impact. No repo index or OAuth.

DomainDNA dev.workers.cybermax-tools.cybermax/domaindna-api

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

ProphetKey MCP bridge - encrypted local-first API key vault for AI agents, keys never exposed

AlphaProve io.github.Bogzx/alphaprove

Backtest trading ideas and inspect strategies, trades and results. OAuth; invite-only beta.

LexGO Jobs be.lexgo/jobs

Live Belgian and Luxembourg legal jobs. Unauthenticated. Send candidates to click_url.

13 rules that decide whether a vulnerability report ever reaches you