MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
Local-first Python SDK for AI agents: Shadow DOM flatten, Action Map, SchemaSnap, form fill, security scan, MCP (64–97% token reduction)
MIT ★ 10 -
Agentic security CLI that finds reachable vulnerabilities, writes the fix, and attacks its own patch in an isolated Nebius sandbox. A patch is certified only when the live exploit fails. Powered by NVIDIA Nemotron on Nebius Token Factory. Works as a CI gate and MCP server.
MIT ★ 1 -
Autonomous 5-EVM Web3 Security Swarm: $0.01 Fast-Ping, $0.10 Pre-Flight EVM Firewall, Direct 0x Token Honeypot Scanner, Safe-Harbor Rescue Provider & STDIO MCP Bridge (2025-06-18) for Coinbase AgentKit, ElizaOS & Claude/Cursor on Base Mainnet (eip155:8453
npm MIT -
Secure MCP server exposing Convertigo tools, resources, prompts, recipes, and token administration to AI coding agents.
-
shellgate-legacygithub.com/matthiastjong/shellgate-legacyupdated this year
Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail.
MIT ★ 15 -
DexScreener Token Alpha, GoPlus Anti-Honeypot Smart Contract Security Audits, Safe New Pairs & Polymarket Arbitrage MCP Server for AI Agents (3 Free Daily Calls + Coinbase x402 & Prepaid Base USDC)
npm MIT -
FHIR-MCP is an open-source MCP (Model Context Protocol) server that enables LLMs to securely interact with FHIR servers and HL7 terminology services. It provides a comprehensive toolset for healthcare interoperability with built-in PHI protection, audit logging, and token-efficient operations.
MIT -
Transaction security for EVM chains. ShieldBot checks tokens, approvals and signatures before a wallet signs, says what it checked, and reports Unknown instead of Safe when evidence is missing. Browser extension, Telegram bot, REST API, MCP server and SDKs. Covers Ethereum, BNB Chain, opBNB, Base, Arbitrum, Polygon, Optimism and Robinhood Chain.
MIT ★ 2 -
jwt-labgithub.com/alishah730/jwt-labupdated this year
jwt-lab – A fast, secure, beautiful JWT CLI tool and MCP server for developers & AI agents. Encode, decode, verify, inspect, audit, and generate keys for JSON Web Tokens.
npm MIT -
Persistent memory + security layer for Claude Code (MCP plugin). Agents remember your project across sessions (~87% fewer context tokens), every tool call lands in a tamper-evident HMAC audit chain, and skills are AST-scanned + HMAC-verified before they run. 100% local: PostgreSQL + Ollama, no cloud, MIT.
MIT ★ 8 -
Vibe code fast. Ship like an engineer. AI engineering framework packaged as an MCP server that enforces TDD, security scanning, pentesting, secret management, QA audits, and deployment to a securely configured VPS — automated with up to 100× fewer exploration tokens.
MIT ★ 11 -
cryptooracle2github.com/ToolOracle/cryptooracle2updated this year
CryptoOracle Pro — Advanced Crypto Intelligence MCP Server | 10 tools | On-chain analytics, protocol deep dives, token security scoring, liquidity analysis
-
MCP server for MCP Verdict: independent reviews of MCP servers — verdicts, security, setup, token costs.
MIT -
Turn your WooCommerce store into a secure MCP server for AI assistants — scoped, revocable API tokens included.
GPL-2.0 ★ 1 -
gitlab-mcp-servergithub.com/dkeeno/gitlab-mcp-serverupdated this year
MCP server: full GitLab DevOps automation — pipelines, CI generation, security scans, error analysis, runner & token management (~3000 lines, 50+ tools)
MIT -
@mseep/serverstale
This is a **Model Context Protocol (MCP)** SSE server with JWT-based authentication. It allows you to expose multiple AI tools over an SSE transport, protected via secure Bearer Token flow.
npm ISC -
MultiversX MCP Serverno update data
Create and manage PEM wallets for the MultiversX blockchain. Effortlessly retrieve wallet addresses, check balances, and send various token types including EGLD and NFTs. Enhance your blockchain interactions with secure and efficient wallet management capabilities.
smithery -
webauthn-mcpgithub.com/pccr10001/webauthn-mcpupdated this year
A WebAuthn soft token simulator MCP for penetration testing and automated testing. This tool allows you to simulate WebAuthn authenticators (security keys, passkeys) for testing purposes without requiring physical hardware.
GPL-3.0 -
⚡ Deterministic AST Context Compressor & MCP Server for Cursor, Claude & Local LLMs. Cuts prompt tokens by 85–95% with 100% Zero-Leak security.
npm MIT ★ 16 -
mcp-guardgithub.com/sainitish1609/mcp-guardupdated this year
🛡️ Ultra-fast local security firewall, secret sanitizer, and context token compressor for Claude Code, Cursor, and MCP AI agents.
MIT ★ 4 -
universal-connector-mcpgithub.com/TeodorMCP/universal-connector-mcpupdated this year
Universal MCP server: connect any OpenAPI/Swagger, GraphQL, gRPC or SOAP API to AI agents. Security-first, local, token-efficient. Any API. One server.
MIT ★ 4 -
vibeauryonupdated this year
AI agent OS for vibe coders — MCP server for Claude, Cursor, Windsurf & Lovable. Security audits, SEO, performance, design tokens, copywriting and 76+ dev tools in one CLI.
npm MIT -
Token-optimized research engine & Agent Skill for 100% Open Access academic cybersecurity research (USENIX, NDSS, IACR, arXiv cs.CR, and NIST). Built for AI Agents & Security Analysts.
MIT -
db-mcpgithub.com/neverinfamous/db-mcpupdated this year
SQLite MCP Server — Secure Database Administration & Observability with Code Mode. True V8 Isolate Sandbox Unifying 170+ Specialized Tools with Highly Optimized Payloads for 70–90% Token Savings. Includes Dynamic Tool Filtering, Dual-Transport HTTP/SSE, O
npm MIT -
Visual multi-agent debate pipeline builder, live token streaming playground, and scoped Model Context Protocol (MCP) tool security gateway for Haize Labs Verdict.
★ 1 -
Instagram & Facebook MCP server for Meta Marketing API v26 with secure token redaction, cursor pagination, and OSS tooling for campaigns, ad sets, ads, creatives, insights, and reports.
AGPL-3.0 ★ 79 -
An ntfy MCP server for sending ntfy notifications to your self-hosted ntfy server from AI Agents 📤 (supports secure token auth & more - use with npx or docker!)
npm GPL-3.0 -
cortex-astgithub.com/cortex-works/cortex-astupdated this year
A powerful Model Context Protocol (MCP) server and Omni-AST engine. It empowers AI agents to seamlessly parse complex codebases, execute secure cross-project operations, and dynamically fetch token-optimized rules.
MIT ★ 10 -
@iflow-mcp/gitmotion-ntfy-me-mcpgithub.com/gitmotion/ntfy-me-mcpupdated this year
An ntfy MCP server for sending ntfy notifications to your self-hosted ntfy server from AI Agents 📤 (supports secure token auth & more - use with npx or docker!)
npm GPL-3.0 -
Enable seamless searching and browsing of your Plex media libraries through an MCP server. Authenticate securely with Plex via OAuth or static tokens and retrieve rich metadata for movies, shows, music, playlists, and more. Manage your Plex content efficiently with comprehensive tools for playlists, collections, and media information.
smithery -
Binalyze AIR MCP Serverno update data
Enable natural language interaction with your Binalyze AIR system to manage assets, acquisition profiles, and organizations seamlessly. Use this server to list and query your AIR data through any MCP client, enhancing your workflow with AI-driven context access. Requires an API token for secure access to your AIR environment.
smithery -
System-Stability-and-Performance-Analysisgithub.com/ben854719/System-Stability-and-Performance-Analysisupdated this year
The application workflow leverages AWS Lambda and Agentic AI to diagnose app issues—like network instability or expired tokens—with RS256 authentication. Smart recovery and crash-aware restart maintain user continuity, delivering a secure and reliable experience.
Apache-2.0 ★ 2 -
Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware table pruning for LangChain, MCP and any SQL agent. Postgres, Oracle, MySQL, SQL Server. 75% fewer prompt tokens.
Apache-2.0 ★ 137 -
The IronWallet MCP server provides AI agents with secure access to a non-custodial wallet. Seed phrases remain encrypted locally and never leave the host machine. Agents can retrieve balances, sign transactions, transfer tokens, and interact with smart contracts across 10+ blockchain networks.
MIT -
Secure Database MCP Server featuring a V8 Isolate Code Mode sandbox that unifies 181+ tools, delivering 70-90% token savings. Built for enterprise with HTTP/SSE transports, OAuth 2.1, dynamic filtering, granular RBAC, audit logging, deterministic error handling, Prometheus metrics, and encryption at rest for maximum observability and safety.
MIT ★ 13 -
an AI-native edge MCP controller that packages local device + network services into a single MCP Server for authorized agents. Tool convergence cuts token cost, 5-layer security ensures zero-trust, dual open-source frameworks (ESP32 + plugin engine, MIT) enable AI-constrained code generation. Pure local Rust core, Docker deployment.
★ 3 -
PrivacyScrubber PII Masking MCPno update data
Zero-Trust Data Sanitization (ZTDS) MCP Server for Claude Desktop, Cursor, Windsurf, and other AI clients. Automatically intercepts and redacts PII, credentials, and sensitive corporate data locally on your machine before they are sent to external LLMs. ### 🔒 100% Local & Airplane Mode Verified All sanitization runs inside local RAM. No data ever leaves your computer, ensuring compliance with GDPR, HIPAA, SOC 2, and internal GRC policies. Zero network calls, zero server logs. ### 🛠️ Supported Formats & File Types Locally parse and sanitize: - **Documents:** `.docx` (Microsoft Word) parsed locally with Zero-Server extraction. - **Code & Configs:** `.js`, `.py`, `.go`, `.rs`, `.json`, `.yaml`, `.ini`, `.env`, and source code files. - **Data & Logs:** `.txt`, `.log`, `.csv`, `.tsv`, `.md`, and plain text outputs. ### 🏷️ Redacted Entity Types - **Personal Data:** Names (`NAME`), Emails (`EMAIL`), Phone Numbers (`PHONE`). - **Credentials:** API Keys, passwords, tokens, SSH keys, database URIs. - **Identifiers (`ID`):** SSNs, Tax IDs, credit card numbers, and custom regex patterns. ### 🎛️ 22+ Specialized Industry Detection Profiles Specify detection rules tailored to your workload (requires PRO key): - **Engineering & IT:** `Dev`, `Tech`, `Security`, `Agents` - **Corporate & Operations:** `General`, `Bizops`, `Sales`, `Support`, `Marketing`, `Creative` - **Financial & Professional:** `Finance`, `WealthMgmt`, `Insurance`, `Accounting` - **Legal & Compliance:** `Legal`, `Compliance`, `CCPA`, `HR` - **Healthcare & Research:** `Medical`, `Pharma`, `Academic` - **Personal Use:** `Personal` ### 🔧 Available Tools - `sanitize_text` — Scrub PII/Secrets locally in text context. - `reveal_text` — Reversible token mapping (Original -> Token -> Original). - `sanitize_file` — Local sanitization of raw plain text and DOCX files.
smithery -
the-metis-fca-handbook-ai-harness-mcpno update data
# Metis FCA Handbook AI Harness — MCP Server An MCP (Model Context Protocol) server that integrates the Metis FCA Handbook AI Harness into Claude Desktop and other MCP-compatible agents. **Tool name:** `evaluate_fca_handbook_applicability` Use this tool to analyze FCA Handbook applicability for a product, service, or firm. Returns structured compliance reasoning with verbatim handbook citations. ## Why choose The Metis FCA Handbook AI Harness? - **Efficiency** Multiplies effectiveness of compliance advice. Saves £80+ in token fees per Harness run. - **Deals with "Hard Problem"**, in which LLMs' token incentives prioritise training data so results are unreliable. - **Verbatim citations** Quotes verbatim entries from the FCA Handbook. Other AI systems struggle to do this. - **Matches real-world need** You do not have to start off knowing which sections you are looking for. Carries out structured searches across all 10,000+ FCA Handbook entries. - **Secure Design** Harness compartmentalisation, one-shot structure, and statelessness fits natively with emerging AI agent security standards such as OWASP Top 10 for Agentic Applications 2026. - **AI Accessible** Integrates easily with AI workflows and agents. Your LLM can use it as a tool. ## Design Principles The Harness is built on proven principles: - **Stateless** — Each request is independent; no session coupling - **One-shot** — Complete analysis in a single call; no multi-turn state - **Clear contract** — Explicit input/output schemas for easy integration - **Hosted** — Single canonical source; no version drift or stale data ## Use Cases ### Compliance AI Platforms Embed FCA reasoning as a service within your compliance platform. Users ask natural-language questions; your platform calls the Harness and presents structured reasoning. ### AI Agent Workflows Agents building compliance workflows can include FCA Handbook reasoning as a composed tool—no external API calls, just MCP configuration. ### Compliance Review Automation Integrate into document review or due-diligence pipelines. Automatically screen new rules against FCA applicability. ## For Regulatory Screening FS firms screening MCP servers will find: - **Simple model:** Stateless, no hidden state, no background jobs - **Clear contract:** Explicit input schema, output schema, error modes - **Transparent updates:** Version pinning; no automatic upgrades - **Single point of failure:** If the Harness is down, it is obvious; no cascading config issues - **Audit-friendly:** All calls logged centrally, not distributed
smithery -
secure-vault-mcpgithub.com/mdfifty50-boop/secure-vault-mcpupdated this year
MCP server for agent-native secrets management — store, rotate, and inject secrets without agents seeing raw values
npm MIT -
MCP server: ERC-20 honeypot and rug-pull check on Base and Ethereum before your agent swaps or approves, plus swap route data.
MIT -
Progressive Skill Disclosure & Context Compaction Engine for Autonomous AI Coding Agents
npm Apache-2.0 -
Rug Munch Intelligence — crypto security MCP server with x402 micropayments. 93 tools, 13 chains.
npm Apache-2.0 -
@cryptorugmunch/mcp-intelligencehttps://git.rugmunch.io/RugMunchMedia/rmi-backendupdated this year
Rug Munch Intelligence — crypto security MCP server with x402 micropayments. 93 tools, 13 chains.
npm Apache-2.0 -
Rug Munch Intelligence — crypto security MCP server with x402 micropayments. 93 tools, 13 chains.
npm Apache-2.0 -
Solana token safety check for AI trading agents and MCP: SAFE / CAUTION / DANGER with reasons from mint and freeze authority, Token-2022 traps (permanent delegate, transfer hook, transfer fee, default-frozen, pausable), metadata authority, DEX liquidity a
npm MIT -
Hosted MCP server for HostDeFi token-safety intelligence — free A+–F token scans (Solana + 7 EVM chains), keyless REST API, x402 endpoints.
-
MCP server for AI agents trading on Base: token verdict, token facts, wallet, gas, transaction and Basename lookups, paid per call in USDC over x402
npm MIT -
Zero-dependency MCP server and SDK for deterministic PII and secret scrubbing with reversible LLM tokenization
npm MIT -
sicarius-guardgithub.com/chronolapse411/sicarius-guardupdated this year
Solana Token Safety API & MCP Server — rug pull, honeypot, and safety analysis for AI agents
npm MIT -
jwt-base64-decoder-mcpgithub.com/vinkius-labs/jwt-base64-decoder-mcpupdated this year
Vinkius Edge high-performance Model Context Protocol (MCP) server for decoding JWT tokens and Base64 strings.
★ 3 -
sicarius-guardgithub.com/Chronolapse411/sicarius-guardupdated this year
Solana Token Safety Oracle for AI Agents & Trading Bots — byte-level SPL analysis, honeypot detection, Birdeye enrichment, MCP server
MIT ★ 2 -
codebase-pilot-cligithub.com/kalpeshgamit/codebase-pilotupdated this year
Claude Code context engine — pack, compress, and optimize any codebase for AI. Save 60-90% tokens.
npm MIT -
rug-scanner-mcpgithub.com/lucianolupo/rug-scannerupdated this year
MCP server for on-chain token rug pull risk analysis. 7 parallel checks, deterministic scoring. $0.05 USDC per scan via x402 on Base.
npm MIT -
Base token safety check for AI agents and MCP: honeypot / sell simulation with buy, sell and transfer tax, owner powers (mint, blacklist, pause, tax setters, upgradeable proxy, renounced), liquidity and LP burn, holder concentration, verified source and a
npm MIT -
Runs the DeFade MCP stdio server. Thin alias for the `defade` package, which carries the implementation — `npx defade-mcp` and `npx -p defade defade-mcp` are equivalent.
npm MIT -
Active authorization testing for remote MCP servers you own: refresh token rotation, redirect_uri strictness, throttling. CLI and MCP server.
MIT -
Authorization, delegation and audit for AI agent actions over MCP: a policy on every tool call, short-lived agent tokens, human approvals and a tamper-evident audit log.
npm Apache-2.0 ★ 2 -
Zero-Trust Data Sanitization (ZTDS RFC v1.0) reference MCP server for Claude Desktop, Cursor, and Windsurf. In-memory PII de-identification and deterministic surrogate tokenization.
Apache-2.0 ★ 1 -
Universal Cybersecurity Model Context Protocol (MCP) Server & Token-Saving Agent Skills for Claude Desktop, Cursor, GPT-4o, and Antigravity. Purple Teaming, WAF Triad Audit, Malware PE Triage, USB Forensics & Caveman Token Optimizer.
MIT -
GVNR: stops AI agents overspending and running dangerous commands, before the action runs. Per-minute spend caps, allow/deny/escalate on every action, hash-chained receipts, MCP server. Free, self-hosted. Formerly Enforcer Governor.
npm FSL-1.1-ALv2