Standalone MCP directory — 61862 servers across 36145 domains, each exposing a remote (streamable-http) endpoint and health-probed via a JSON-RPC initialize handshake.
Add your serverAggregated from the official MCP Registry, Smithery and other public registries, plus our own crawling and operator submissions. Every server is de-duplicated by endpoint, health-probed via a live JSON-RPC initialize handshake, and statically scanned for malware & prompt-injection patterns in its advertised tools before listing — yielding 61862 indexed servers, of which 53021 answered within the last 6 h.
Top rated
by quality score · health · trust signals| # | Tool | Grade | Score |
|---|---|---|---|
| 1 | Homo Universalis — HU-DIAMOND v1.1 Cryptographic Verifier & AST Kintsugi MCP Server | A | 10.000 |
| 2 | FlowState Hosted | A | 10.000 |
| 3 | Verified x402 Catalog | A | 10.000 |
| 4 | True Value Rankings | A | 10.000 |
| 5 | X402-Broker Universal MCP Gateway & Multi-Agent Swarm Router | A | 10.000 |
| 6 | GraphQL operation count, query discarded | A | 9.998 |
| 7 | Paper Search (arXiv + Semantic Scholar + OpenAlex) | A | 9.994 |
| 8 | BNF production count, body discarded | A | 9.994 |
| 9 | multibase z-prefix, value discarded | A | 9.994 |
| 10 | Liters to US gallons | A | 9.994 |
| 11 | Slugs to kilograms, number discarded | A | 9.992 |
| 12 | Sponsored Agent Placement | A | 9.991 |
| 13 | UUID v7 unix-ms layout, value discarded | A | 9.991 |
| 14 | Train-Case segment count, text discarded | A | 9.991 |
| 15 | Utility 87 | A | 9.991 |
| 16 | Utility 43 | A | 9.991 |
| 17 | Asia/Sakhalin clock | A | 9.991 |
| 18 | GitHub topic slug charset, value discarded | A | 9.989 |
| 19 | Utility 18 | A | 9.989 |
| 20 | pyproject.toml table count, body discarded | A | 9.989 |
All MCP servers
Continuously aggregated · refreshed daily.
“Aevum Security” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Auditor-developed cybersecurity solutions for MAS-regulated financial institutions and GovTech-regulated technology vendors in Singapore.
-
Browse Aevum Security's Singapore cybersecurity services and submit a business enquiry.
“AI Website Security” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
-
Security basics of any public website, from your AI assistant: HTTPS certificate (validity, expiry, name, protocol), http-to-https redirection, protection headers (HSTS, CSP, framing, nosniff, Referrer-Policy, cookies), mixed content, and DNS filtering by public security resolvers. Reads only what any visitor sees. No account, no API key.
“Bright Security” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Integrates with Bright Security DAST platform for application security scanning and vulnerability discovery.
-
Enables AI agents to access Bright Security tools for app discovery and security testing.
“Compuute MCP Security Scanner” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
mcp x402 down
uptime_30d 1.0%; p95 156.1ms; conformance: fail
-
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
-
Static security scanner for MCP servers. POST a public GitHub URL, get severity counts, a score, and the top findings with file+line back. 37 rules across TypeScript, JavaScript, Python, Go, Rust, C#, Java, and Kotlin — every language with an official MCP SDK. Detects argument injection for npx/uvx/pipx/pnpx runner binaries (CWE-88), known CVEs in 40+ top packages, and the usual L0 discovery (transport, tool inventory, dependency pinning). This is a pattern detector, not an exploitability oracle. Around 90% raw false-positive rate on unfiltered output — triage is on you, and the response says so explicitly. POST /v1/scan is free with no API key. POST /v1/scan/pay charges $0.10 USDC per scan via x402 on Base. Manual L2-L4 audits at compuute.se/audit when you need dataflow review. Wraps compuute-scan (MIT, zero deps). Per-rule false-positive rates and the methodology paper live in the repo.
“GitHub Actions Security Audit” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
-
Audits .github/workflows/*.yml for supply-chain risks: script injection, leaked tokens, unpinned actions, broad permissions, pull_request_target pitfalls. MCP-native - call from Claude Desktop, Cursor, n8n, or any MCP client. Pay-per-event.… — 7 runs
“Grisoco AI security audits” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
-
Smart-contract security audits for EVM chains and DAML. Your AI agent quotes, runs and collects audit reports, paid from your prepaid Grisoco balance.
“io.github.jdhart81/security-preflight” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
mcp ok
Static MCP, source-code and injection-indicator checks with redacted signed receipts.
-
mcp x402 ok
Static MCP manifest and tool-policy security preflight with signed input-redacted receipts
“Mail Security Tools” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).
-
DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).
“MCP Security & Vulnerability Auditor” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
MCP Security & Vulnerability Auditor https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcpmcp down
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
-
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
“MCP Security Sanitizer” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Redacts common secrets, email addresses, and phone numbers.
-
Redacts common secrets, email addresses, and phone numbers.
“middleBrick | API-Security” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.
-
Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.
“PreClick : URL Security scanner” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
PreClick: An MCP-native URL preflight security scanning service for autonomous agents. It scans links for threats and confirms they match the intended task before execution. Built for agentic workflows, it provides high-accuracy, context-aware browsing governance with adaptive learning.
-
PreClick: An MCP-native URL preflight security scanning service for autonomous agents. It scans links for threats and confirms they match the intended task before execution. Built for agentic workflows, it provides high-accuracy, context-aware browsing governance with adaptive learning.
“Security Auditor” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 291.4ms; conformance: fail
-
AI-powered code security auditor. Scans GitHub repos for vulnerabilities with OWASP/CWE references and remediation guidance.
-
Passive security check of a domain: headers, TLS, DNS and email authentication. No login needed.
B+8.9 🔓 open streamable-http -
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
B+9.0 🔓 open streamable-http -
Secure Enclave Attestationhttps://server.smithery.ai/evozim-hv/secure-enclave-attestation-mcp/mcp● healthy
Secure Enclave Attestation is an enterprise-grade Model Context Protocol (MCP) micro-service from the M2MCent network. Premium agentic endpoint for secure-enclave-attestation-mcp. Monetized via x402 on Base Mainnet ($0.35 USDC per execution). Zero-gas settlement.
B8.4 🔑 human key streamable-http smithery_api_key -
uptime_30d 1.0%; p95 291.4ms; conformance: fail
B7.9 🔓 open streamable-http -
AI-powered code security auditor. Scans GitHub repos for vulnerabilities with OWASP/CWE references and remediation guidance.
B7.2 🔑 human key streamable-http smithery_api_key -
Passwords, random numbers and strings, colours, usernames and card draws from a secure random source
B+9.1 🔓 open streamable-http -
MCP server for static security analysis of Android source code
A9.8 🔓 open streamable-http -
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
C+6.7 🔓 open -
Security basics of any public website, from your AI assistant: HTTPS certificate (validity, expiry, name, protocol), http-to-https redirection, protection headers (HSTS, CSP, framing, nosniff, Referrer-Policy, cookies), mixed content, and DNS filtering by public security resolvers. Reads only what any visitor sees. No account, no API key.
C+7.0 🔑 human key streamable-http smithery_api_key -
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
B+9.1 🔓 open streamable-http -
Tells your coding agent whether your installed packages need patching, with advice on what to do.
B+9.2 🔓 open streamable-http -
Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.
B8.7 🔓 open streamable-http -
Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.
C+7.0 🔑 human key streamable-http smithery_api_key -
Integrates with Bright Security DAST platform for application security scanning and vulnerability discovery.
D3.9 🔑 human key sse api_key -
Social Security COLA 2027 MCPhttps://social-security-cola-2027-mcp.lipmichal.workers.dev/mcp● healthy
Social Security COLA 2027, full retirement age, earnings test and 2027 limits from SSA notices.
A9.6 🔓 open streamable-http -
Browse Aevum Security's Singapore cybersecurity services and submit a business enquiry.
C+6.6 🔓 open streamable-http -
DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).
B+8.9 🔓 open streamable-http -
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
C+5.6 🔑 human key streamable-http bearer_api_key -
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
C4.1 🔑 human key streamable-http bearer_api_key -
Integrate GDPR-compliant cookie consent banners into websites
C+6.8 🔑 human key sse api_key -
Redacts common secrets, email addresses, and phone numbers.
C+6.9 🔓 open sse -
Zero-execution static AST security scanner for MCP servers and tool manifests. Audits server code and tool schemas for CWE-78 Command Injection, CWE-22 Path Traversal, CWE-798 Hardcoded Secrets, and unvalidated arguments before tool registration. Built for safe agent tool provisioning.
C+7.0 🔑 human key streamable-http smithery_api_key -
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
B8.1 🔓 open streamable-http -
Search excessionlabs.ai, the site of Excession Labs, a security lab, and request a security test.
B+9.2 🔓 open streamable-http -
Zero-execution static AST security scanner for MCP servers and tool manifests. Audits server code and tool schemas for CWE-78 Command Injection, CWE-22 Path Traversal, CWE-798 Hardcoded Secrets, and unvalidated arguments before tool registration. Built for safe agent tool provisioning.
C+7.0 🔑 human key streamable-http smithery_api_key -
Pentest requests, security headers checker, guideshttps://penetrationtestservices.com/mcp● healthy
Request a penetration test, grade a website's HTTP security headers, and search pentest guides.
A9.8 🔓 open streamable-http -
Bug Bounty Programs - HackerOne + Bugcrowd Lookup | Bulk
C+6.0 🔑 human key streamable-http bearer_api_key -
Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.
C5.1 🔓 open streamable-http -
Scan text, documents, websites, and MCP metadata for prompt injection and sensitive-data risks.
C4.9 🔓 open streamable-http -
Agentic brokerage access to a US brokerage account: quotes, orders, positions, cash and documents.
C5.2 🔓 open streamable-http -
HTTP Inspect MCP — Headers, Security, Redirectshttps://q-services--http-inspect-mcp.apify.actor/● healthy
MCP server: HTTP headers, status, redirects, security headers, CORS, cache, mixed content. For AI QA/secops agents. — 2 runs
C+5.7 🔑 human key streamable-http apify_token -
Smart-contract security audits for EVM chains and DAML. Your AI agent quotes, runs and collects audit reports, paid from your prepaid Grisoco balance.
D3.2 🔑 human key streamable-http smithery_api_key -
av-weatheropen-api-securehttps://server.smithery.ai/swamy.fwd/av-weatheropen-api-secure/mcp● healthy
—
B7.4 🔑 human key streamable-http smithery_api_key -
Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.
C+6.3 🔓 open streamable-http -
Connect AI tools to your PostgreSQL with permissions, encryption, and audit trails.
C5.2 🔓 open streamable-http -
Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.
C5.2 🔓 open streamable-http -
Profile MCP servers from the official registry, enrich package metadata, and score security risk for agent builders. — 11 runs
C+5.7 🔑 human key streamable-http apify_token -
io.github.jdhart81/security-preflighthttps://mcp.viridis-security.com/security-preflight/mcp● healthy
Static MCP, source-code and injection-indicator checks with redacted signed receipts.
B+9.5 🔓 open streamable-http -
Audit GitHub repos for malicious and supply-chain code before you depend on them.
C+5.9 🔓 open streamable-http -
Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring
C+6.2 🔓 open streamable-http -
AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs
B+9.2 🔓 open streamable-http -
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
B+9.3 🔓 open streamable-http -
AI scam-shield for Web3: screen token contracts for honeypot/drain patterns. Aegis AI group admin.
B8.6 🔓 open streamable-http -
Spain's court auctions and State sales (BOE) and Social Security auctions (TGSS). Free, no key.
B+9.3 🔓 open streamable-http -
Edge MCP Server for live WCAG 2.1 AA accessibility compliance and AST security audits.
B8.6 🔓 open streamable-http -
Hadolint-grade Dockerfile audit, MCP-native. 18+ checks across 5 categories (base image, instructions, security, efficiency, secrets) with severity, line numbers, remediation, and fix snippets. Pay-per-event. Call from Claude Desktop, Curso… — 5 runs
C+5.7 🔑 human key streamable-http apify_token -
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
A9.6 🔓 open streamable-http -
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
B+9.3 🔓 open streamable-http -
Audits docker-compose.yml files for security misconfigurations. 25 checks across 9 categories with severity, remediation, and YAML fix snippets. Pay-per-event. MCP-native - call from Claude Desktop, Cursor, n8n, or any MCP client. Built by… — 10 runs
C5.6 🔑 human key streamable-http apify_token -
Search a curated directory of young security companies and its CC BY 4.0 stats. Read-only, no key.
B7.3 🔓 open streamable-http -
Analyzes threats and verifies URLs align with the agent's intended goal.
A9.5 🔓 open streamable-http -
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
A9.6 🔓 open streamable-http -
Audits .github/workflows/*.yml for supply-chain risks: script injection, leaked tokens, unpinned actions, broad permissions, pull_request_target pitfalls. MCP-native - call from Claude Desktop, Cursor, n8n, or any MCP client. Pay-per-event.… — 7 runs
C+5.8 🔑 human key streamable-http apify_token -
Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.
B8.1 🔓 open streamable-http -
PreClick: An MCP-native URL preflight security scanning service for autonomous agents. It scans links for threats and confirms they match the intended task before execution. Built for agentic workflows, it provides high-accuracy, context-aware browsing governance with adaptive learning.
B8.4 🔓 open streamable-http -
PreClick: An MCP-native URL preflight security scanning service for autonomous agents. It scans links for threats and confirms they match the intended task before execution. Built for agentic workflows, it provides high-accuracy, context-aware browsing governance with adaptive learning.
C+7.0 🔑 human key streamable-http smithery_api_key -
Honeypot detection & token risk scan for ERC-20s. Risk score 0-100, tax, source verification.
B+9.3 🔓 open streamable-http -
Read AI security guides and lab research, and request an LLM or AI agent security assessment.
A9.9 🔓 open streamable-http -
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade. (Live A2A v0.3, MCP & x402 v2 node at https://domain-osint.agentdiet.dev)
B+9.3 🔓 open -
MCP-native URL security scanner that protects AI agent workflows. Analyzes URLs for phishing, malware, and suspicious patterns before agent navigation. Returns risk scores, confidence levels, and agent access directives (ALLOW/DENY) so automated workflows can make safe browsing decisions in real time.
C+7.0 🔑 human key streamable-http smithery_api_key