MCP Server Directory

Pre-publish npm pack auditor: shipped files, size, secret-pattern leaks, missing fields.

Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

AgentDiet Coding Agent GitHub Repo, Dependency & License Security Auditor dev.agentdiet/github-audit

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.

セキュリティIoTソリューション jp.yomitasu/securityiot-theshop-jp

防犯カメラ 監視カメラ ネットワークカメラ どこでもカメラ 住宅・店舗・事務所・駐車場・倉庫・建設現場・農地など…（securityiot.theshop.jp の内容を検索して答える。ヨミタス経由）

aegis-security-mcp space.gensi.bc/aegis-security-mcp

AI scam-shield for Web3: screen token contracts for honeypot/drain patterns. Aegis AI group admin.

QRsome – QR codes for agents com.qrsome/qrsome

Branded QR codes for AI agents: static or dynamic, re-pointable after printing, with scan counts.

Secret broker for agents: reference secrets by name; values injected only at the execution boundary.

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Hardcover OAuth MCP io.github.benjuntilla/hardcover-oauth-mcp

Read and update your Hardcover library, progress, lists, and goals. Sign in with Hardcover OAuth.

MCP Security Sanitizer io.github.saurabhdrh/mcp-security-sanitizer

Redacts common secrets, email addresses, and phone numbers.

Local MCP broker: agents call credentials through a daemon without seeing secrets.

Pugi io.pugi/pugi

AI product team: builds and publishes websites from a brief, logos, security checks.

dotmoose-account io.github.dotmoosehosting/dotmoose-account

Manage existing DotMoose hosting services through OAuth-protected MCP tools.

Paladin Front PHP Rescue & Zero-PHP Migration MCP com.paladinfront.www/php-rescue-mcp

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Static Forms dev.staticforms/static-forms

Manage Static Forms (staticforms.dev) form endpoints, form rules and submissions over OAuth.

anon.li io.github.anondotli/anon-li

Manage anon.li email aliases, recipients and encrypted file drop metadata over OAuth.

Inspectius de.inspectius-re/grundstuecksdaten

German property data per address, mostly from public authorities: parcel, land value, zoning, risks

skilllint — vet an agent skill before you install it lat.rta/skilllint

Vet an agent skill before you install it: structure, triggers, secrets.

Telebart com.telebart/barter

Barter marketplace for agents: list your user's things, find swaps, propose trades. OAuth sign-in.

SafeWeave dev.safeweave/safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

Harbor pilots for agents com.textforagents/harbor-pilots-for-agents

Certified local pilot boards for an unfamiliar site, with scoped authority and signed completion.

PDF to Text & Markdown with OCR io.github.monietools/pdf-to-text-markdown-ocr

PDF, DOCX and image URLs to clean, LLM-ready Markdown or text, with OCR for scanned pages.

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) dev.agentdiet/cve-intel

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text