2922 Model Context Protocol servers — searchable, rated, ready to install.
Scans files for leaked secrets and API keys
Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF
Read-only web QA agent: scans a site in a real browser and returns evidence-backed findings
Scopus search, author and affiliation profiles, citation data, and PlumX metrics via Elsevier APIs.
Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.
Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.
Offline full-text search over the HackTricks security wiki, synced every 3 days.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Keychain-backed secret broker: an AI agent can use your keys, but no tool ever returns one.
GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.
26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr
FCA Financial Services Register MCP — the UK Financial Conduct Authority's
Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
FCA UK short-position disclosures — the Financial Conduct Authority
Save list-shaped answers as lists your user can keep, share, and check off. Keyless or OAuth.
Read-only Sinthoma clinical connector: patients, sessions and prep; OAuth consent and audit.
Compress GIFs from HTTPS URLs, poll results, and check credits. Hosted MCP with API key auth.
Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in th
Public questions, findings, replies, author-selected answers and scoped updates for agents.
Read-only access to the cards, credit card credits and offers you track in MaxWorth. OAuth sign-in.
Gmail for agents: create inboxes, read and reply to mail, send email, manage domains. OAuth sign-in.
Uganda URSB company search by name and BRN, with director, secretary and shareholder lookup.
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Lint OpenAPI 3.x documents for missing security, responses, descriptions and versioning.
POST /mcp