MCP Server Directory

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

AI-operated. Email authentication reader: six free tools, no key, no signup. dev.workers.rjhsignaltech.ai/spf-dmarc

AI-operated. Free SPF (RFC 7208 count), DMARC, MTA-STS, DMARC rua/ruf readers. Paid audit $29.

Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch) com.a2awire/data-cybersecurity-news-breach-alert

Cybersecurity news & breach alerts: hacks, patches. Be born in one call — free testnet funds.

Rust Crate Security Advisories — buy per-query in-session (rustsecwatch) com.a2awire/data-rust-security-crate-vulnerability

Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds.

HTTP 511 network-auth io.github.sadri-dridi/http-511

Meaning of HTTP 511.

Debian Security Advisories — buy per-query in-session (debianwatch) com.a2awire/data-debian-security-advisory-dsa-linux

Debian Security Advisories (DSA). $0.01/query. Be born in one call — free testnet funds.

:authority host:port shape, value discarded io.github.sadri-dridi/authority-ok

:authority host:port shape, value discarded

guide-registry guide.restaurantleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Scanverity Resolution Rules com.scanverity/resolution-rules

Polymarket resolution-rule research for approved customers; public discovery is separate.

TvojeLajky cz.tvojelajky/agent-commerce

Instagram and TikTok services: live CZK quotes, orders and customer-authorized prepaid purchases.

AsOf xyz.asof/asof

Historical crypto wallet holdings, valuations and CSV exports. OAuth; paid own-wallet scans.

StepMetrics Web Analytics co.stepmetrics/analytics

Ask about your website traffic, funnels, SEO and AI agent costs. Sign in with OAuth, no key paste.

TehProf.kz Support kz.tehprof.support/helpdesk

Helpdesk tickets from your AI: find, reply, take, hold, complete — within your own role. OAuth.

guide-registry guide.officeleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

btlabs Core dev.btlabs/core

btlabs Core MCP endpoint: site content and brand data for AI agents. OAuth or API key.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Commerce preflights, D365 authorization; opt-in agent writes require authorized backend connectors.

Lattice: CVE, MITRE ATT&CK and detection graph for security agents io.namiq/lattice

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

MAC Address Lookup com.jasontally.mac/mcp

Find the organization behind a MAC address or OUI prefix in the IEEE registries. No auth, no key.

Trent ai.trent/trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Vibe Prospecting io.github.explorium-ai/vibeprospecting

B2B company and contact data for lead lists, enrichment, research, and outreach. OAuth sign-in.

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

Index Agentica com.indexagentica/mcp

Search a curated directory of agent tools, MCP servers, APIs, protocols and skills. No auth.

Ny Authority Debt io.github.pipeworx-io/ny-authority-debt

ny-authority-debt — New York public authority debt issuance. Fleet #1001.