3442 Model Context Protocol servers — searchable, rated, ready to install.
TOTP secret charset, secret discarded
Permission-aware MCP server for Odoo 18/19. OAuth 2.1; each call runs as one named Odoo user.
Cross-asset market event intelligence for AI trading agents. Pay per call (USDC/x402) or API key.
Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.
B2B company and contact data for lead lists, enrichment, research, and outreach. OAuth sign-in.
Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
pump.fun graduation radar for trading bots and AI agents. x402 USDC per scan, no key.
OpenRevenue analytics MCP: projects, stats, visitors, funnels, and goals via API key or OAuth.
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Meaning of HTTP 511.
Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.
Budget, payment and audit controls for AI agent API calls and MCP tool calls.
Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
Scans agent code for untrusted input poisoning persistent cross-session memory
Paid AI utilities for web comparison, code checks, document extraction, security, and research.
Free tools: 2026 API shutdown scanner, small-business website auditor, photo resale estimator.
Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.
Cobalt Intelligence MCP — US Secretary-of-State business registration, UCC liens, and TIN/EIN…
Scan a web page's markup for the WCAG failures ADA demand letters cite most often.
:authority host:port shape, value discarded
Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.
Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
POST /mcp