2959 Model Context Protocol servers — searchable, rated, ready to install.
Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
SPF, DKIM, DMARC, MTA-STS and domain-expiry checks for any domain, with SPF lookup counts.
Check if AI wrote a text: English, Ukrainian, Kazakh, Uzbek, Estonian, Georgian, Lithuanian.
User-authorized anonymous matching and text conversations, with revocable OAuth permissions.
Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
Multi-account Google Workspace MCP server: 942 tools, 29 services, discover-first, BYO OAuth.
Query the Stripe API (test-mode key; set STRIPE_SECRET_KEY, Basic): charges, customers, balance.
Query the Clerk Backend API (secret key; set CLERK_SECRET_KEY, Bearer): users, user details.
Local-first static repository security and configuration drift auditor (CLI, GitHub Action & MCP).
Checkout reviews via OAuth or agent API keys: bot blocks, payment methods, outcomes and effort.
Read-only XRP Ledger token-risk, issuer-authenticity and wallet-security checks.
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
Read-only CodeAtlas service catalog: list, get and search services. No authentication.
Audit SPF, DKIM, DMARC, MX, BIMI, MTA-STS for a domain; score + grade. $0.003 USDC/call via x402.
Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.
What changed in your stack since the model's cutoff, error fixes, and security-scanned skills/MCPs
Scoped login vault: your bot signs in to sites without ever seeing the password.
Accessibility scans with evidence, public reports, and fresh checks after fixes.
Read your Superflag apps, feature flags, and change history through an authenticated MCP endpoint.
Local checks for sudo, systemd, sshd, ufw, and secret leaks before an agent applies them.
Experimental AtlasClose governance demo. Authority checks, labeled evidence, receipts, refusals.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
A signed-in firm's own AI policies, know-how and adopted precedents. Needs a firm account (OAuth).
Read-only access to authorized SolarSENS solar plants, performance, devices, and alarms.
POST /mcp