Standalone MCP directory — 45974 servers across 23611 domains, each exposing a remote (streamable-http) endpoint and health-probed via a JSON-RPC initialize handshake.
Add your serverAggregated from the official MCP Registry, Smithery, PulseMCP and other public registries, plus our own crawling and operator submissions. Every server is de-duplicated by endpoint, health-probed via a live JSON-RPC initialize handshake, and statically scanned for malware & prompt-injection patterns in its advertised tools before listing — yielding 45974 indexed servers, of which 39820 answered within the last 6 h.
Top rated
by quality score · health · trust signals| # | Tool | Grade | Score |
|---|---|---|---|
| 1 |
agent-tools (x402 directory)
Discover and call x402 paid services — search by intent, filter by price/chain.
|
A | 10.00 |
| 2 |
Verified x402 Catalog
Which x402 pay-per-call endpoint delivered for a task at a price? Facts from our own paid calls.
|
A | 10.00 |
| 3 |
io.github.tacticalnoot/agent-embassy
Agents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402.
|
A | 10.00 |
| 4 |
True Value Rankings
Cryptocurrency fundamentals for agents: TVR Scores, rankings and model-derived valuation estimates.
|
A | 10.00 |
| 5 |
ISO country SV
Public ISO 3166-1 record for SV.
|
A | 10.00 |
| 6 |
Celsius to kelvin
Celsius to kelvin
|
A | 10.00 |
| 7 |
Utility 157
Small public utility for autonomous clients.
|
A | 9.99 |
| 8 |
Parquet magic-byte check, file discarded
Parquet magic-byte check, file discarded
|
A | 9.99 |
| 9 |
MIME boundary count, body discarded
MIME boundary count, body discarded
|
A | 9.99 |
| 10 |
E.164 shape, number discarded
E.164 shape, number discarded
|
A | 9.99 |
All MCP servers
Continuously aggregated · refreshed daily.
“AINumbers Fintech Suite” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 180.6ms; conformance: fail
-
Access the complete AINumbers fintech catalog directly inside your AI assistant. Where agents run the same workflows people do. **Features:** * 🏢 **500+ Fintech Tools:** Search and utilize a catalog of financial intelligence tools. * 📊 **Interactive Workflows:** More than 200 tools render directly in chat as interactive workflows (for supported clients). * ⚡ **Zero Auth Required:** Connects immediately with no API keys or OAuth prompts. * 🔗 **One-Click Deep Links:** Easily generate pre-filled links for your workflows. *Just connect and ask: "Compare BaaS providers for a mid-size programme" or "Score my MCP server's ship-readiness."*
“Amalgix Document Intelligence” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 323.5ms; conformance: fail
-
Cross-model evidence pipeline for financial filing and contract intelligence. Two core paid workflows — analyze_public_filing (SEC 10-K/10-Q/20-F, ticker/CIK lookup, metrics, risk changes, contradictions) and review_contract_risks (MSA/NDA/SaaS/procurement, obligations, deadlines, liability, unusual clauses). Plus MCP compatibility utilities: document analysis, web extraction, summarization, and bulk translation. Specialized model routing delivers source-grounded evidence up to 3.8× cheaper than frontier models. Pay per call via x402 USDC on Base or Solana. Document content is not persisted after processing; request metadata and payment events are retained for attribution.
“bmlt” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 340.8ms; conformance: fail
-
Search Narcotics Anonymous meetings worldwide via the BMLT directory.
“Colour Memory” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Colour meaning, history and evidence for AI: 45,000+ source-graded colour records and 91 tools.
-
Cultural color intelligence. Every colour anchored to a person, a year, and a consequence.
“discava – Business Directory for AI” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 176.8ms; conformance: fail
-
Search for local businesses worldwide. Structured data optimized for AI agents. • Search Millions of businesses over 49 countries (Europe, Northamerica, Southamerica, Asia, Oceania) • Quality & demand scoring for every business • Ranking based on real user click-through data • No API key needed, free access • Rate limit: 500 requests/hour per IP
“FORMLOVA” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
mcp degraded
conformance: fail
-
Chat-first form service with 127 MCP tools across 25 categories. Create, manage, analyze forms, send emails, set up workflows — all through natural conversation. Supports OAuth 2.1. Works with Claude, ChatGPT, Gemini, Cursor, Windsurf. Free plan with unlimited forms and responses.
“HiveGate” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
Universal onboarding gateway with 7 framework adapters: LangChain, CrewAI, AutoGen, OpenAI, Anthropic, A2A, Custom. Cross-ecosystem interoperability bridge for AI agents.
-
uptime_30d 1.0; p95 408.5ms
-
Agent admission queue with capacity control and priority tiers
“huettentouren” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 300.0ms; conformance: fail
-
Plan multi-day hut-to-hut hiking tours in the European Alps, powered by live availability data from the Alpine Club booking systems (DAV, ÖAV, AVS). ## What it does - Recommends curated multi-day routes filtered by difficulty, duration, number of hikers, and travel window - Returns bookable start dates only when hut availability is fresh (≤8h old) - Flags off-season requests, stale data, and no-match cases explicitly (no hallucinated suggestions) - Exposes full route detail: stages, elevation, overnight huts, booking URLs ## Tools - `recommend_tours` — rank routes by hard filters + soft preferences (months, transport, difficulty), return top matches with sample start dates - `search_tours` — fuzzy text search across route names and regions - `get_tour` — fetch full stage-by-stage detail for a single route ## Data notes Route content, stage descriptions, and hut names are in **German** (the primary audience is DACH hikers). Numeric fields, enums, and IDs are locale-neutral. Best used by agents that can either speak German or translate German strings downstream. Availability is aggregated server-side across multiple booking providers and exposed with a clear freshness contract — agents should not guess dates when `status != "bookable"`.
“ia-qa.com/mcp llm and RAG testing - Dev/QA toolbox” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 357.5ms; conformance: fail
-
IA-QA as an MCP Server Use IA-QA's developer tools to test your llm agents RAG ai tools, directly from Cursor, Claude Desktop, Windsurf, or any AI agent without leaving your IDE. Many classical testing tools too ! Enjoy ! No API key. No signup. Free.
“Kakao Maps” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 316.7ms; conformance: fail
-
Search Korean places, geocode addresses, and convert between coordinate systems via Kakao's Local API. The go-to source for Korean street addresses, businesses, and POI data that Western mapping services miss.
“Korean Law Search” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
conformance: fail
-
Search and retrieve Korean statutes and administrative rules with precise filters. Access English translations and drill down to articles, paragraphs, and sub-items. Explore linkages with local ordinances and delegated authority to speed up legal research.
“Listen to Sadhu” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 119.9ms; conformance: fail
-
Listen to Sadhu exposes a searchable corpus of Vedic scripture and recorded lectures. Look up verses by reference (e.g. "BG 2.13", "SB 5.5.3", "CC Madhya 8.128") with original Devanagari/Bengali, IAST transliteration and translations; read commentaries, prose chapters and letters; and search transcribed talks with semantic + lexical retrieval. Inline audio/video players let you hear a lecture passage or watch a clip. Read-only, no auth, no writes.
“livonian” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
conformance: fail
-
An MCP server and JSON API over the real https://livonian.tech dictionary — so LLMs translate to and from Livonian with attested words and grammatical forms, not invented ones. Read-only.
“MAQAMI Travel” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Official MCP server for MAQAMI, a hotel and flight booking platform with 3M+ hotels.
-
Search hotels (3M+ hotels) and flights worldwide, read hotel details, then prebook and book. Remote Streamable HTTP, no API key.
“menjometre” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 208.7ms; conformance: fail
-
Menjometre is an independent observatory of Catalan public spending. This MCP server gives any LLM client read-only access to the full dataset and the statistical scoring layer built on top of it. ## Coverage - **~19.5 M** grant records from the Registre d'Ajuts i Subvencions de Catalunya (RAISC), 2016–present - **~1.7 M** public procurement contracts from Dades Obertes de Catalunya - **~496 K** beneficiary entities with normalised identities - A **public-figure graph** linking Parlament deputies, Generalitat officials, and the boards of publicly-funded entities - The **Menjometre score** — a statistical indicator flagging concentration and recurrence patterns in public spending ## What the 48 tools cover | Domain | What you can ask | |---|---| | `entities` | Search, profile, network, activity timeline for any funded organisation | | `grants` | RAISC lookups, concentration analysis, purpose trees, year-over-year trends | | `contractes` | Procurement lookups, sole-source detection, fragmentation patterns | | `organs` | Granting-body rankings and profiles | | `xarxa` | Public-figure graph, shortest path between two people, cluster investigation | | `pressupostos` | Generalitat budget surface | | `meta` | Methodology, scoring explanation, upstream attribution manifest | ## Example prompts - *"Which ten Catalan entities received the most RAISC funds in 2024?"* - *"Show me the concentration profile of the entity with CIF A08000143."* - *"Which grant-giving bodies award the largest share of their budget to a single beneficiary?"* - *"What percentage of Ajuntament de Girona's contracts are sole-source?"* - *"Explain how the Menjometre score is computed."* ## Response envelope Every tool response ships with four things: 1. **Attribution** — a `sources` array citing the upstream dataset, licence (CC-BY-4.0 / Llei 37/2007), and publisher 2. **Scope predicate** — personal-data filters enforced at the database query, not client-side 3. **Framing** — scored responses embed a `score_meta` block with a `not_an_accusation` disclaimer and a link to the methodology page 4. **Neutral statistical language** — the server returns "top decile", "around the median", never accusatory framing Safe for journalism, academic research, and civic-tech tooling. ## Install via npm ```json { "mcpServers": { "menjometre": { "command": "npx", "args": ["-y", "menjometre-mcp"] } } } Also reachable directly over Streamable HTTP at https://www.menjometre.cat/mcp.
“Navisworks MCP” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Navisworks coordination and clash detection via APS — reports, viewpoints, model objects.
-
AI clash detection in Navisworks Manage 2025–2027 on your PC. Needs the free plug-in.
“NEXUS Intelligence API” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 317.4ms; conformance: fail
-
58-endpoint utility hub - DNS lookup, web scraping, CVE scanning, AI translation, PII detection, domain health audit, company intelligence. Pay per call via x402 on Base.
“Pipeworx” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
a2a x402 ok
Open MCP gateway connecting AI agents to live data — 5957+ tools across 1552+ verified sources (SEC EDGAR, FRED, FDA, USPTO, EPA, ATTOM, weather, prediction markets, and more). No account or API key required for the anonymous daily allowance.
-
uptime_30d 1.0%; p95 318.5ms; conformance: fail
-
Live data for AI — one connector to SEC filings, economics, FDA, patents, weather, prediction markets, and more across 750+ official sources, with citations. The hero tool ask_pipeworx routes any question to the right source and returns structured, cited data.
“pipeworx gateway” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 377.9ms; conformance: fail
-
Live data for AI agents. 250+ data sources, 900+ tools. Ask questions in plain English with ask_pipeworx — trade flows, SEC filings, drug safety, housing data, and more. No API keys needed.
“PQC-Khepra-MCP” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
conformance: fail
-
KHEPRA MCP Server MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments. Tiers Tier License Key Tools Telemetry Egress Community ❌ Not required pqc_stig + 12 core tools Opt-in Dark Crypto Intel Zero (sovereign mode) Sovereign ✅ Required All 34 tools Zero Zero Pharaoh ✅ Required All 34 tools + priority support Zero Zero Community tier is free. Run pqc_stig to assess your project's quantum readiness against PQC-01-STIG-V1R1 — the World's First DoD-style Post-Quantum Cryptography STIG — no license key needed. What It Does KHEPRA MCP connects your AI assistant directly to a hardened compliance engine. Ask Claude or any MCP client to scan a system, map findings to STIG/NIST/CMMC controls, and generate an executive-ready risk report — all without sending data to external APIs. Key capabilities: 36,195 STIG/CCI/NIST 800-53/800-171/CMMC mappings (offline, bundled) Post-quantum cryptographic attestation on every tool call (ML-DSA-65 / FIPS 204) World's First DoD PQC STIG — 17 controls covering CNSA 2.0 / FIPS 203/204/205 + agentic AI / MCP (PQC-01-STIG-V1R1) Godfather Report: dollar-denominated business impact per finding (FAIR model) Air-gap and SCIF compatible — sovereign/ironbank modes make zero egress calls Flat annual licensing — no per-token or per-query charges Runs on your metal: on-prem, DoD, IC, classified environments Installation There are two delivery methods: Docker (recommended, no build required) and compiled binary (fastest startup, required for air-gap). Both support the same environment variables and all MCP clients. Choose your path: Method Best For Startup Docker Most users, easiest setup ~2s Compiled Binary Air-gap, SCIF, performance ~300ms Option A: Docker (Recommended) Requires Docker Desktop or Docker Engine. The image is pre-built and ships the full compliance database — no additional downloads in sovereign mode. # Pull once docker pull ghcr.io/nouchix/pqc-khepra-mcp:latest # Test it (should print the initialize response and exit) echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \ | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest Option B: Compiled Binary Requires Go 1.21+ for building, or download a pre-built release from GitHub Releases. git clone https://github.com/nouchix/PQC-Khepra-MCP.git cd PQC-Khepra-MCP # Build (cross-compile for your OS) go build -o khepra-mcp ./cmd/khepra-mcp # Linux / macOS go build -o khepra-mcp.exe ./cmd/khepra-mcp # Windows # Test the binary echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \ | KHEPRA_MODE=sovereign ./khepra-mcp Windows — using the batch launcher The repo ships a run-mcp.bat launcher for Windows. It uses the pre-built binary (fast path) and falls back to go run automatically: :: run-mcp.bat is already in the repo at the root of PQC-Khepra-MCP :: Point your MCP client to: cmd /c C:\path\to\PQC-Khepra-MCP\run-mcp.bat Adding to Your AI Client Claude Desktop Config file location: macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json Community tier — Docker (macOS / Linux) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Community tier — Docker (Windows) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "C:\\Users\\YourName\\.khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Community tier — Binary (Windows, fastest startup) { "mcpServers": { "khepra": { "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_NETWORK_POLICY": "lan", "MCP_PQC_ENABLED": "true", "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json" } } } } Community tier — Binary via batch launcher (Windows) { "mcpServers": { "khepra": { "command": "cmd", "args": ["/c", "C:\\path\\to\\PQC-Khepra-MCP\\run-mcp.bat"], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_NETWORK_POLICY": "lan", "MCP_PQC_ENABLED": "true" } } } } Sovereign / Pharaoh tier (with license key) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_LICENSE_KEY", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "-v", "/var/log/khepra:/var/log/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ], "env": { "KHEPRA_LICENSE_KEY": "YOUR_LICENSE_KEY_HERE" } } } } After editing, restart Claude Desktop. Verify in Settings → Developer — you should see khepra with status running and all tools listed. Cursor Config file: .cursor/mcp.json in your project root, or ~/.cursor/mcp.json globally. Docker (macOS / Linux) { "servers": { "khepra": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Binary (macOS / Linux) { "servers": { "khepra": { "type": "stdio", "command": "/path/to/khepra-mcp", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_MANIFEST_PATH": "/path/to/PQC-Khepra-MCP/manifest.json" } } } } Binary (Windows) { "servers": { "khepra": { "type": "stdio", "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json" } } } } VS Code (with GitHub Copilot or Cline extension) Config file: .vscode/mcp.json in your project, or user settings. { "servers": { "khepra": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "${env:HOME}/.khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Or via user settings.json for the Cline extension: { "cline.mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Windsurf Config file: ~/.codeium/windsurf/mcp_config.json { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Continue.dev Config file: ~/.continue/config.json — add to the experimental.modelContextProtocolServers array: { "experimental": { "modelContextProtocolServers": [ { "name": "khepra", "transport": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } ] } } Cloud / SaaS AI Tools (Claude.ai, ChatGPT, Gemini, etc.) Cloud-based AI tools cannot directly spawn local subprocesses — they need an HTTP/SSE bridge to reach your local KHEPRA server. There are two approaches: Approach 1 — mcp-remote proxy (easiest, no server required) mcp-remote tunnels a local stdio MCP server over HTTPS, making it accessible to any cloud tool. This is what the Kaggle MCP entry in the config above uses. # Install once npm install -g mcp-remote # Start the bridge (exposes your local KHEPRA server at https://localhost:3000) KHEPRA_MODE=sovereign mcp-remote \ --server "docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest" \ --port 3000 Then in Claude.ai (or any cloud tool that accepts MCP SSE URLs): MCP Server URL: http://localhost:3000/sse Security note: mcp-remote binds to localhost by default. Do not expose it to the public internet without TLS and authentication. In sovereign/ironbank mode, KHEPRA itself makes zero egress calls — only the bridge connection to the cloud tool carries data. Approach 2 — Self-hosted HTTP/SSE endpoint For teams running KHEPRA on a shared server (e.g., Hostinger VPS at IP_ADDRESS), start the server in HTTP mode: # On your server — start KHEPRA in HTTP/SSE mode docker run -d \ -e KHEPRA_MODE=hybrid \ -e KHEPRA_HTTP_PORT=8443 \ -e KHEPRA_LICENSE_KEY="${KHEPRA_LICENSE_KEY}" \ -p 8443:8443 \ ghcr.io/nouchix/pqc-khepra-mcp:latest # Point your cloud tool to: # https://your-server.com:8443/sse Then configure any cloud AI tool that supports MCP SSE: Cloud Tool Where to add MCP URL Claude.ai (Pro/Team) Settings → Integrations → MCP Servers OpenAI Assistants API tools field with type: "mcp" Gemini for Workspace Extensions → Custom MCP (preview) Glama.ai Workspace → MCP Servers Smithery.ai Catalog → Self-hosted server Note: HTTP/SSE mode (hybrid/edge) enables external connections. Always terminate TLS at a reverse proxy (nginx/Caddy) and restrict access by IP or API key. The sovereign mode refuses HTTP connections by design — air-gap integrity is preserved. Approach 3 — Smithery / MCP Registry (Community tier only) KHEPRA is listed on Smithery.ai and the MCP Registry. Cloud tools that support registry-based discovery can install it directly: Registry ID: io.github.nouchix/pqc-khepra-mcp This runs the Community tier via Smithery's managed infrastructure. For sovereign deployment (air-gap, your data stays on your metal), use Options A or B above. Validation — Test Your Installation Run this from your terminal to verify the server responds correctly: # Docker echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest # Binary (Linux / macOS) echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | KHEPRA_MODE=sovereign ./khepra-mcp # Binary (Windows PowerShell) '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | & ".\khepra-mcp.exe" Expected output: a JSON-RPC response listing all available tools. If you see "tools": [...] with 12+ entries — you're connected. Full protocol validation (Windows) # Runs the complete Claude Desktop handshake sequence and validates all responses .\scripts\test-mcp-handshake.ps1 -BinaryPath ".\khepra-mcp.exe" # Expected output: # [PASS] initialize | protocolVersion=2025-11-25 | listChanged=False # [PASS] tools/list | count=34 # TRL-10 READY - Server passes full Claude Desktop protocol validation MCP Tools Community Tier (Free — No License Key) pqc_stig — World's First DoD PQC STIG ⭐ Assesses a source code directory against PQC-01-STIG-V1R1: 12 controls covering CNSA 2.0 algorithm approval, ML-DSA-65 key strength, ML-KEM-768 encapsulation, hybrid cryptography, key storage, constant-time implementation, and certificate chain requirements. pqc_stig(scan_path?: string, profile?: "quick" | "full" | "executive") Example: "Run pqc_stig on my project and tell me if I'm CNSA 2.0 compliant" nist_map Map CCI identifiers or STIG findings to NIST 800-53 Rev 5 controls. khepra_query_stig Query the 36,195-row STIG/CCI/NIST/CMMC compliance database by control ID. dark_crypto_contribute (opt-in) Contribute anonymized cryptographic algorithm telemetry to the SouHimBou AI Dark Crypto Intelligence Network. No PII. Opt-in only — never fires without explicit invocation. Sovereign / Pharaoh Tier ert_scan Enterprise Risk & Threat scan across STIG, NIST 800-53, NIST 800-171, CMMC, and FedRAMP. Returns Godfather Report with dollar-denominated business impact. ert_scan(target: string, frameworks?: string[], output_format?: "godfather" | "json" | "csv") Example: "Run ert_scan on /etc and generate a Godfather Report" stig_check Automated RHEL-09-STIG-V1R3 compliance scan against a live system or configuration path. cmmc_assess Full CMMC Level 1, 2, or 3 assessment with gap analysis and POA&M generation. godfather_report Generate an executive Godfather Report from prior scan results: top 10 findings ranked by dollar exposure, remediation ROI, and FAIR model business impact. + 20 additional tools agent_record, dag_attestation, flight_export, khepra_get_dag_chain, nhi_inventory, acp_status, owasp_agent_assess, khepra_export_attestation, khepra_export_poam, khepra_get_compliance_score, ert_crypto, ert_readiness, stig_benchmark, ir_analysis, vuln_hunter, sbom_generate, threat_model, khepra_query_threat_intel, discover_assets, and more. The Godfather Report Unlike compliance scanners that output a wall of CVEs, KHEPRA translates findings into the language executives care about: Finding: RHEL-09-212030 — No FIPS-validated crypto on /etc/ssh Severity: CAT I (HIGH) Business Impact: $2.4M estimated breach exposure (FAIR model) Remediation Cost: $800 (4 hours engineer time) ROI: 3,000x Every finding includes control ID, framework mapping, business impact in dollars, remediation cost estimate, and ROI. Deployment Modes Mode Air-Gap Egress Telemetry Use Case sovereign ✅ Yes Zero Zero On-prem, SCIF, classified (DEFAULT) ironbank ✅ Yes Zero Zero DoD/IC production, FIPS-only hybrid ❌ No LAN Zero Edge + cloud coordination edge ❌ No Unrestricted Zero Fully stateless SaaS Set via KHEPRA_MODE environment variable. Unknown values are rejected at startup and fall back to sovereign (fail-closed). Environment Variables Variable Required Default Description KHEPRA_LICENSE_KEY Sovereign/Pharaoh only — License key. Community tier runs without one. Get at nouchix.com KHEPRA_MODE No sovereign Deployment mode: sovereign, ironbank, hybrid, edge KHEPRA_MANIFEST_PATH No manifest.json Path to signed tool manifest file KHEPRA_HOME No /var/lib/khepra Data and compliance DB directory KHEPRA_LOG_DIR No /var/log/khepra Log directory KHEPRA_DAG_PATH No ~/.khepra/dag DAG audit chain storage path KHEPRA_AUDIT_LOG_PATH No ~/.khepra/audit.ndjson Signed audit log path KHEPRA_MAX_CONCURRENT No 5 Max concurrent tool calls per agent KHEPRA_NETWORK_POLICY No lan Network scope: lan, none, unrestricted MCP_PQC_ENABLED No true Enable ML-DSA-65 PQC attestation on all responses Air-Gap & SCIF Deployment KHEPRA makes zero external network calls in sovereign and ironbank modes: License validated offline via ML-DSA-65 signed license.adinkhepra file Compliance databases (36,195 mappings) bundled in container — no external downloads No telemetry, no heartbeat, no egress — verified at the transport layer # Transfer image to air-gapped network docker save ghcr.io/nouchix/pqc-khepra-mcp:latest | gzip > khepra-mcp.tar.gz # On air-gapped host: docker load < khepra-mcp.tar.gz Note on telemetry: The dark_crypto_contribute tool (Community tier) sends anonymized cryptographic algorithm telemetry to the SouHimBou AI intelligence network only when explicitly invoked by the user. It is never triggered automatically. In sovereign/ironbank mode, all network calls are blocked at the transport layer regardless. Compliance Coverage Framework Version Mappings STIG (RHEL 9) V1R3 Automated scanning NIST 800-53 Rev 5 2,120 CCIs NIST 800-171 Rev 2 320 controls CMMC Level 3 Full practice set FedRAMP High Baseline scanning PQC-01-STIG-V1R1 V1R1 17 PQC controls (CNSA 2.0) Total 36,195+ mappings Licensing Flat annual licensing — no per-token or per-query charges. Tier Cost License Key Tools Community Free Not required pqc_stig + 12 core tools Sovereign Annual flat fee Required All 34 tools, air-gap, on-prem Pharaoh Annual flat fee Required All 34 tools + priority support + SLA Community tier is permanently free — contribute to open-source PQC adoption Sovereign/Pharaoh: contact [email protected] or visit nouchix.com Security Reporting Vulnerabilities Do not open public issues for security vulnerabilities. Report privately via GitHub Security Advisories or email [email protected]. SLA Target Acknowledgement 24 hours Initial assessment 5 business days Patch / mitigation (Critical) 30 days We accept encrypted reports via PGP (keys/security_contact.asc) and Post-Quantum channels (Dilithium / ML-DSA-65 keys in keys/). See SECURITY.md for the full disclosure policy and ASAF event taxonomy. Security Posture Deploying advanced post-quantum cryptography, air-gapped isolation, and comprehensive STIG mappings — built in direct alignment with NSA & ASD Model Context Protocol guidelines. NSA & ASD MCP Security Alignment The NSA and Australian Signals Directorate (ASD) have published specific threat vectors for AI systems interacting with local environments. KHEPRA MCP is explicitly designed to mitigate every identified vector: NSA/ASD Requirement KHEPRA Implementation Cryptographic validation of tool responses ML-DSA-65 (Dilithium) signatures on all JSON-RPC 2.0 payloads Input validation & sanitization Parameter injection resistance via strict JSON Schema validation Principle of least privilege credentials Short-lived ephemeral tokens tied to specific task execution windows Comprehensive audit logging Tamper-evident events compiled into an immutable DAG structure Resource consumption limits Rate limiting + backpressure for LLM request loops Authorization gates for sensitive actions Human-in-the-loop gate for destructive state changes Environment isolation Containerized execution with zero-egress sovereign mode Software supply chain integrity Manifest pinning for all loaded tools and dependencies Network exposure reduction Air-gappable — zero internet transit in sovereign/ironbank modes Post-quantum resilience PQC-signed DAG trail protecting against harvest-now-decrypt-later Compliance Certifications Framework Status Coverage CMMC Level 2 ✅ Automates evidence collection for AU, CM, SI, SC domains NIST SP 800-171 Rev 2 ✅ Logging, accountability, system integrity NIST SP 800-53 Rev 5 ✅ Continuous monitoring (AU-2, SI-4) FIPS 203 (ML-KEM) ✅ Key encapsulation for secure transit FIPS 204 (ML-DSA) ✅ Digital signatures for payload authentication NSM-10 PQC Mandate ✅ National Security Memorandum 10 compliance DFARS 252.204-7012 ✅ Immutable forensic trails for cyber incident reporting NSA MCP Security Guidelines ✅ Direct mapping to all published AI agent threat mitigations Live Deployment — Physical Edge Running continuously on constrained edge hardware since May 12, 2026 to prove efficiency in sovereign environments: Hardware: Raspberry Pi 2 · 1 GB RAM · 900 MHz ARM · Live Spectrum Router SCADA Pod: STM32U585 / QRB2210 · Modbus TCP · MQTT · Zephyr RTOS 3.4+ · Live Dilithium Signature Verification Controls active: 3 open ports secured · 12 STIG violations detected · 100% file integrity monitoring (AIDE) · 24/7 continuous operation Academic Validation Event Date Institution UAlbany AI Plus Symposium 2026 — "KHEPRA Protocol: Quantum-Resilient Agentic AI Security Using Cultural Cryptography" March 7, 2026 NSA CAE-CDE Institution · 200+ audience SUNY Albany Cybersecurity Showcase — First PQC key ceremony on STM32-class device (SCADA Pod) May 12–13, 2026 Live demo · SCADA architecture poster USPTO Provisional Patent #73565085 — pending. 🔒 Iron Bank containers in DISA vetting process. About NouchiX Veteran-led advisory firm translating CMMC, NIST, and STIG mandates into executive roadmaps. Sales / General: [email protected] Support: [email protected] Website: https://nouchix.com Phone: (518) 304-4450 Developed by SecRed Knowledge Inc. dba NouchiX, Albany, NY.
“QuizBase” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 175.2ms; conformance: fail
-
MCP server for trivia: 1.4M+ questions (EN+PL), 24 categories, 11 tools + 4 prompts, OAuth 2.1.
-
Multilingual trivia MCP — 1.4M+ blended, deduped questions from 11 open datasets (CC, MIT), English and Polish at launch. Calibrated 5-level difficulty (trivial → expert), cultural-affinity regions, per-record attribution (source, author, license). 12 tools, 4 prompts, 3 resources. OAuth 2.1 + Bearer API key. Free tier 500 req/day, no credit card.
“Revit MCP” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Revit model integration via APS — elements, parameters, schedules, clashes, IFC export.
-
Read and edit the Revit 2024–2027 model on your PC. Needs the free Revit MCP add-in.
“Sats4AI” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
a2a ok
Bitcoin-powered AI tools marketplace. 40+ tools — image generation, video, text, music, speech (602+ languages, 3 tiers), transcription, translation (119 languages), image processing, OCR, file conversion, communication (email, SMS, phone calls, AI voice agent). Pay per request with Lightning Network. No signup, no API keys, no KYC.
-
Bitcoin-powered AI tools accessible via Lightning micropayments with no signup or API keys required.
“Shibui Finance” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
uptime_30d 1.0%; p95 293.8ms; conformance: fail
-
64 years of US stock market data — fundamentals, technicals, and backtests. Ask in plain English.
-
## Server Description Screen 9,900+ US equities across 64 years of daily prices, quarterly financials, and 56 technical indicators. Describe what you're looking for in plain English and Shibui translates it into SQL against a 31M-row database. Combine multi-year margin consistency, revenue growth trends, RSI and MACD signals, balance sheet strength, valuation ratios, and earnings surprises in a single query. Examples: - "Find companies under $5B market cap where operating margins stayed above 15% every year since 2019 with revenue growth in at least 4 of those years" - "Which stocks just crossed below their 200-day SMA with RSI under 30 but had positive free cash flow last quarter?" - "Compare NVDA vs AMD on revenue growth, gross margins, and EV/EBITDA over the last 3 years" ### Coverage - **Symbols:** 9,900+ (NYSE + NASDAQ) - common stocks, ETFs, ADRs, REITs - **Prices:** ~31M daily OHLCV records since 1962 - **Financials:** Quarterly and annual income statements, balance sheets, cash flow (1990-present) - **Valuation:** Daily P/E, P/B, market cap, enterprise value, EV/EBITDA, FCF yield (1993-present) - **Technical indicators:** 56 pre-calculated (RSI, MACD, Bollinger Bands, SMA, EMA, ADX, candlestick patterns, and more) - **Earnings:** Quarterly EPS actuals, estimates, and surprise percentages - **Analyst estimates:** Target prices, buy/hold/sell ratings - **Ownership:** Institutional holdings, short interest ### Access Free. No API key. Remote MCP server at `https://mcp.shibui.finance/mcp`. Connect in under 2 minutes.
“Sonar” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
mcp degraded
App Store Optimization for AI agents — the official MCP server for [Sonar](https://trysonar.app). **43 tools** covering the full ASO workflow on the iOS App Store and Google Play: - **Keyword research** — difficulty & popularity scores, autocomplete suggestions, related terms - **App intelligence** — metadata lookup, store search, ASO audit score, keyword extraction, revenue estimation - **Reviews** — fetch and mine app reviews with rating filters - **Rank tracking** — daily rank history for your tracked keywords (Full plan) - **Competitor analysis** — keywords competitors rank for + gap analysis vs your app (Full plan) - **Workspace writes** — set up products, track keywords/competitors, manage alerts (Full plan + write-scope key) **Auth:** pass your Sonar API key (`aso_...`) — create one at [trysonar.app/developers](https://trysonar.app/developers). Stateless research tools work on any plan with credits; new accounts get free credits on signup.
-
App Store Optimization for AI agents — the official MCP server for [Sonar](https://trysonar.app). **43 tools** covering the full ASO workflow on the iOS App Store and Google Play: - **Keyword research** — difficulty & popularity scores, autocomplete suggestions, related terms - **App intelligence** — metadata lookup, store search, ASO audit score, keyword extraction, revenue estimation - **Reviews** — fetch and mine app reviews with rating filters - **Rank tracking** — daily rank history for your tracked keywords (Full plan) - **Competitor analysis** — keywords competitors rank for + gap analysis vs your app (Full plan) - **Workspace writes** — set up products, track keywords/competitors, manage alerts (Full plan + write-scope key) **Auth:** pass your Sonar API key (`aso_...`) — create one at [trysonar.app/developers](https://trysonar.app/developers). Stateless research tools work on any plan with credits; new accounts get free credits on signup.
“Synmerco — Confidential Escrow for AI Agent Commerce” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Synmerco — Confidential Escrow for AI Agent Commerce https://server.smithery.ai/joelasota/synmerco/mcpmcp ok
The only MCP server with Confidential Escrow Mode — HIPAA/GDPR-ready encrypted transactions for regulated AI agents. 46 tools for the full agent commerce lifecycle. **Confidential Escrow** — encrypted transactions with buyer-only decryption (x25519) and zero-knowledge proof of delivery. The escrow system never sees the work product. Built for healthcare (HIPAA), financial services (SOC 2), and legal (privilege). **What you get:** escrow lifecycle, trust scores (SynmercoScore 0-1000), on-chain reputation (ERC-8004 on 4 chains), marketplace, wallets, negotiation, disputes, referrals (0.25% lifetime), protocol gateway (A2A/MCP/REST/x402), multi-agent workflows, ZK proofs, collateral staking. **10 tools work free — no API key needed.** $1K Shield Insurance per escrow. 3.25% flat fee. 179K+ agents in ecosystem.
-
uptime_30d 1.0%; p95 293.4ms; conformance: fail
“Ternary Intelligence Stack” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
Your AI agent has two states. Ternlang gives it three. 30 tools — FREE, no key needed. The third state isn't null. It isn't "maybe". It's hold (trit=0) — a first-class routing instruction that tells your agent: evidence insufficient, gather more before committing. Every binary system that forces yes/no on ambiguous data is making a structural error. We fixed that. ⚡ trit_decide · trit_consensus · trit_vector · moe_orchestrate · ternlang_run · trit_audit ⚡ MoE-13 deliberation engine · EU AI Act Art.13/14/15 · BET VM (real compiler, not a sim) affirm = proceed. hold = wait. reject = block. Built in Graz, Austria by RFI-IRFOS. v1.0.0
-
uptime_30d 1.0%; p95 347.2ms; conformance: fail
-
mcp degraded
Your AI agent has two states. Ternlang gives it three. 30 tools — FREE, no key needed. The third state isn't null. It isn't "maybe". It's hold (trit=0) — a first-class routing instruction that tells your agent: evidence insufficient, gather more before committing. Every binary system that forces yes/no on ambiguous data is making a structural error. We fixed that. ⚡ trit_decide · trit_consensus · trit_vector · moe_orchestrate · ternlang_run · trit_audit ⚡ MoE-13 deliberation engine · EU AI Act Art.13/14/15 · BET VM (real compiler, not a sim) affirm = proceed. hold = wait. reject = block. Built in Graz, Austria by RFI-IRFOS. v1.0.0
“Tripitaka MCP” is shared by 3 different URLs
All exact-name matches are shown; ranked results follow.-
MCP server for the full Pāli Canon — search, cite, compare translations. Offered as Dhamma Dāna.
-
MCP server for the full Pāli Tipiṭaka — ~444,000 segments at parity with SuttaCentral (Sutta + Vinaya + Abhidhamma). Hybrid search, full-sutta fetch with cross-references, segment-aligned translation comparison, and Pāli word lookup. Offered as Dhamma Dāna.
-
uptime_30d 1.0%; p95 173.0ms; conformance: fail
“WebberSites x402 Data API” is shared by 2 different URLs
All exact-name matches are shown; ranked results follow.-
Give your agent a memory — and 40 other tools it can pay for by itself. This MCP server connects agents to the WebberSites x402 Data API: a persistent wallet-owned datastore (write rows today, read them back in any future session — the paying wallet is the identity), plus web scraping, PDF/DOCX/CSV extraction, whole-site SEO and accessibility audits, logo/brand-kit/social-card generation, multi-page website building, DNS & email checks, geolocation, and live crypto data. Every tool costs $0.001–$0.009 in USDC on Base via x402 — no API key, no account, no signup. Runs in free quote mode with zero config; add a dust-funded hot wallet to unlock paying calls. Tools regenerate from the live OpenAPI spec, so new endpoints appear automatically.
-
41 pay-per-call endpoints for AI agents, all $0.001–$0.009 USDC on Base via CDP facilitator: web scraping, document extraction (PDF/DOCX/CSV), single-page and whole-site SEO/accessibility audits, brand-kit/logo/icon/social-card generation, multi-page website building, DNS & email intelligence, geolocation, crypto data, a free machine message board, and a wallet-owned persistent Agent Datastore — give your agent a memory. Free 402 previews on page-check endpoints. No API keys, no signup. ([Discovery](https://api.webbersites.com/.well-known/x402)) ([OpenAPI](https://api.webbersites.com/openapi.json)) ([MCP Server](https://api.webbersites.com/mcp)) ([npm](https://www.npmjs.com/package/webbersites-x402-mcp)) ([GitHub](https://github.com/webberdesign/api.webbersites.com))
-
BMLT Meetingshttps://mcp.bmlt.app/mcp● healthy
Search Narcotics Anonymous meetings worldwide via the BMLT directory.
B+9.2 🔓 open streamable-http -
Convert files between 690+ formats: image, video, audio, documents, ebooks, archives. Free, no auth.
B8.8 🔓 open streamable-http -
Sats4AIhttps://sats4ai.com/api/mcp● healthy
Bitcoin-powered AI tools accessible via Lightning micropayments with no signup or API keys required.
B8.7 🔓 open streamable_http open -
Revit model integration via APS — elements, parameters, schedules, clashes, IFC export.
B+9.4 🔓 open streamable-http -
AI Hub for AEC — 50+ 3D formats, clash detection, ACC integration via Autodesk Platform Services.
B+9.5 🔓 open streamable-http -
Twinmotion rendering via APS — import Revit, set environments, render images, export video.
B+9.1 🔓 open streamable-http -
Cultural color intelligence. Every colour anchored to a person, a year, and a consequence.
B+9.3 🔓 open streamable-http -
Focused MCP server for OpenAI image/audio generation (v2.0.0). Wraps endpoints via HAPI CLI.
B+8.9 🔓 open streamable-http -
Agent admission queue with capacity control and priority tiers
A9.6 🔓 open streamable-http -
130+ QA & dev tools for AI agents: prompt injection, RAG testing, VLM eval, guardrails. Free.
B+9.3 🔓 open streamable-http -
Navisworks coordination and clash detection via APS — reports, viewpoints, model objects.
B+9.4 🔓 open streamable-http -
South Africa's first AI-transactable blinds, shutters and awnings catalogue with live ZAR pricing.
C+7.0 🔓 open streamable-http -
162K words, 226K lessons, 21K assessments, knowledge graph. Deterministic JSON.
B+9.0 🔓 open streamable-http -
Rewrite, translate, summarize and repurpose content at scale: blog to social, long to short, formal to casual, across 40+ language pairs. Feed batches of text in one run and get clean structured output. Runs as an MCP server an AI agent can… — 9 runs
C+5.8 🔑 human key streamable-http apify_token -
Google Lens OCR API for image URLs, Base64, and Apify storage records, with a Standby REST endpoint for single-image calls. Get extracted text, real word and line geometry, writing direction, detected regions, translation, and explicit per-… — 3,260 runs
C+5.8 🔑 human key streamable-http apify_token -
Biomedical failure intelligence platform for terminated trials and translational analysis.
B8.5 🔓 open streamable-http -
An MCP (Model Context Protocol) server that turns your ReportFlow templates into PDF reports — invoices, contracts, statements, anything you've designed — straight from Claude or any other MCP-compatible AI agent. What it does Generate PDFs from natural-language requests like "create an invoice for Acme Corp totalling $300" Expose your ReportFlow designs and their parameter schemas directly to the AI as MCP Resources Bulk-generate many PDFs and download them as a single ZIP Save outputs to whichever workspace folder the user is currently in (Claude Desktop / Claude Code / Cursor / VS Code all supported) Setup Claude Desktop / Claude Code / Cursor Add the following to your config file (.mcp.json, claude_desktop_config.json, ~/.cursor/mcp.json, etc.): { "mcpServers": { "reportflow": { "command": "npx", "args": ["-y", "reportflow-mcp"] } } } That's the whole setup. No env vars, no API keys, no secrets to manage. VS Code (MCP-enabled builds) Same JSON in .vscode/mcp.json. Requirements Node.js 18+ (auto-fetched by npx) A local environment with a browser (only required during the first login) A ReportFlow account Usage 1. First-run authentication After reloading the MCP client, ask the AI: Authenticate with ReportFlow A browser window opens. Sign in → pick a workspace → consent, and you're done. Tokens are stored in your OS keychain (macOS Keychain / Windows Credential Manager / Linux libsecret) and refreshed automatically. 2. Generate a PDF Natural language (easiest) Using the invoice template, create a PDF for Acme Corp totalling $330. The AI will look up the template via list_templates, fetch its parameter schema with get_design_parameters, fill in the values, and call generate_pdf_sync — returning a local file path. Slash commands Command Purpose /generate_pdf Step-by-step recipe for a single PDF /generate_pdfs Recipe for batch PDF generation /reportflow_help Quick feature tour 3. Where files are saved Output location is resolved in this order: Explicit instruction from the user (e.g. "save to my Desktop") The currently-open workspace root (Claude Code / Cursor / VS Code) The OS temp directory as fallback Reference Tools (called by the AI) Tool Purpose authenticate First-time / re-authentication list_templates List available designs get_design_parameters Fetch the parameter schema for a design generate_pdf_sync / _async Generate one PDF (sync returns path; async returns request ID) generate_pdfs_sync / _async Generate many PDFs (returns a ZIP) download_file / download_zip Download artifacts produced by async tools suggest_params Translate a natural-language brief into a params JSON via MCP Sampling (requires a Sampling-capable client) Resources (attachable as AI context) URI Contents reportflow://designs List of available designs reportflow://designs/{designId}/parameters Parameter schema for one design reportflow://errors Catalog of error messages from the Content Service reportflow://server-info Server feature overview Prompts (slash-command recipe cards) /generate_pdf, /generate_pdfs, /reportflow_help — pass arguments and the AI follows the prepared workflow. Troubleshooting Symptom Fix Error containing re-authentication required Ask the AI: "re-authenticate with ReportFlow" npx cannot find the package npm cache clean --force then retry No keychain available on Linux Falls back automatically to a chmod-0600 file under $XDG_STATE_HOME/reportflow-mcp/ Browser cannot open over SSH / remote shell Authenticate once on a local machine; afterwards the cached token works on remote hosts License MIT — see LICENSE. Links ReportFlow: https://re-port-flow.com npm: https://www.npmjs.com/package/reportflow-mcp Issues: https://github.com/re-port-flow/reportflow-mcp/issues
C+7.0 🔑 human key streamable-http smithery_api_key -
MoA document intelligence — multiple AI models cross-verify for 100% recall across 10 languages.
A9.5 🔓 open streamable-http -
Search and cite 26K pre-modern primary sources: alchemy, Hermetica, philosophy, early science.
B+9.1 🔓 open streamable-http -
LILThttps://server.smithery.ai/lilt/mcp● healthy
AI-powered translation and localization platform. Translate content, manage translation memories, and automate multilingual workflows.
D3.2 🔑 human key streamable-http smithery_api_key -
The QA platform for AI-native teams. Bug reports, test management, Playwright automation, security scanning, and performance testing — all 109 tools available from your AI assistant.
C+7.0 🔑 human key streamable-http smithery_api_key -
Verifiable document intelligence for AI agents. Extract text, tables, and structured data from PDFs and URLs. Summarize, answer questions, check claims, and translate — all with cited evidence. Store tamper-evident evidence bundles with cryptographic signatures and on-chain attestation via Base L2. Cross-document semantic search and Q&A across named collections. Pay per call with USDC (x402) or use an API key.
C+7.0 🔑 human key streamable-http smithery_api_key -
33 tools for Japanese financial data. Financials, ownership trajectories, buyback tracking, board composition, and translated filings for 4,000+ listed companies. Audited XBRL from EDINET, not scraped. Free API key at axiora.dev
C+7.0 🔑 human key streamable-http smithery_api_key -
Chat-first form service with 127 MCP tools across 25 categories. Create, manage, analyze forms, send emails, set up workflows — all through natural conversation. Supports OAuth 2.1. Works with Claude, ChatGPT, Gemini, Cursor, Windsurf. Free plan with unlimited forms and responses.
C+7.0 🔑 human key streamable-http smithery_api_key -
AI-integrated tools for learning, writing, and publishing. ProvenanceAI builds free MCP tools that help authors develop and protect their voice, editors assess manuscript quality, instructors design humanities courses, and researchers produce defensible, well-sourced work. Current tools cover editorial analysis: voice profiling, authenticity scoring, structural review, style consistency, research grading, and manuscript readiness, with more on the way. Expanding into curriculum design, academic writing, and book production workflows. No email gate. Every tool returns a full structured result on the first call. Powered by ProvenanceAI × Exact Rush.
C+7.0 🔑 human key streamable-http smithery_api_key -
Korean crypto market data API for AI agents. Real-time Kimchi Premium across 180+ tokens, Upbit/Bithumb prices, AI-powered Korean sentiment analysis (world's first), market alerts, and Global vs Korea divergence analysis with structured AI breakdown. Pay-per-call $0.001-$0.10 USDC on Base, Polygon, and Solana via x402 protocol.
C+7.0 🔑 human key streamable-http smithery_api_key -
Turn any video into publish-ready content using AI agents. 10 tools: create viral clips, generate animated captions in 100+ languages, dub videos in 80+ languages, translate subtitles, transcribe speech, reframe for Shorts/Reels/TikTok, apply brand templates, export videos, track processing, and retrieve results. Automate video repurposing, localization, and publishing workflows through natural conversation. Works with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Gemini CLI, ChatGPT, and any MCP-compatible client.
D3.7 🔑 human key streamable-http smithery_api_key -
AI Law Tracker — an audited AI-regulation data API and MCP connector. Query current AI law across 50 US states plus federal, EU, and global jurisdictions: obligations, penalties, effective dates, and full provenance on every record, refreshed daily. 25 tools for compliance research, deadline calendars, per-company risk reports, and single-law lookups. The legal layer is deterministic and source-grounded — no LLM inventing statutes. Free API key, no card: ai-law-tracker.com/developers
C+7.0 🔑 human key streamable-http smithery_api_key -
AI-powered COBOL mainframe modernization platform with 11 MCP tools, 3 resources, and 3 prompts. Parse copybooks, assess CICS integrations, scan JCL batch jobs, map VSAM files, translate EBCDIC, bridge ISO 20022 payments, run post-quantum cryptography assessments, fingerprint regulatory compliance (SOC 2, GDPR, HIPAA), discover COBOL codebases, generate REST APIs from COBOL, and automate test suites. Includes migration guides, API references, and modernization assessment prompts for enterprise mainframe-to-cloud transitions.
D3.7 🔑 human key streamable-http smithery_api_key -
Access the complete AINumbers fintech catalog directly inside your AI assistant. Where agents run the same workflows people do. **Features:** * 🏢 **500+ Fintech Tools:** Search and utilize a catalog of financial intelligence tools. * 📊 **Interactive Workflows:** More than 200 tools render directly in chat as interactive workflows (for supported clients). * ⚡ **Zero Auth Required:** Connects immediately with no API keys or OAuth prompts. * 🔗 **One-Click Deep Links:** Easily generate pre-filled links for your workflows. *Just connect and ask: "Compare BaaS providers for a mid-size programme" or "Score my MCP server's ship-readiness."*
C+7.0 🔑 human key streamable-http smithery_api_key -
Give your agent a memory — and 40 other tools it can pay for by itself. This MCP server connects agents to the WebberSites x402 Data API: a persistent wallet-owned datastore (write rows today, read them back in any future session — the paying wallet is the identity), plus web scraping, PDF/DOCX/CSV extraction, whole-site SEO and accessibility audits, logo/brand-kit/social-card generation, multi-page website building, DNS & email checks, geolocation, and live crypto data. Every tool costs $0.001–$0.009 in USDC on Base via x402 — no API key, no account, no signup. Runs in free quote mode with zero config; add a dust-funded hot wallet to unlock paying calls. Tools regenerate from the live OpenAPI spec, so new endpoints appear automatically.
C+7.0 🔑 human key streamable-http smithery_api_key -
The (most) everything API — 570+ pay-per-call endpoints for AI agents: USPTO patents + trademarks, US court opinions, SEC EDGAR, Congress, FDA, CVE/security intel, OFAC sanctions screening, GLEIF/KYB identity, academic papers, geocoding, weather, vehicles, prediction markets, sports, identity crosswalks, an OpenAI-compatible AI gateway (chat/image/model council), and stateful agent primitives (storage, vector search, locks, queues, cron, pub/sub, watchers). No signup, no API keys — each call settles in USDC on Base or Solana via x402, from $0.001, with the exact price quoted in the 402 challenge before you pay. Free trial call per endpoint with ?trial=1.
C+7.0 🔑 human key streamable-http smithery_api_key -
The official MCP server for the PropertyList MLS: first-party Spanish, Portuguese and Italian listings, not scraped. Natural-language matching, market summaries, agency discovery and lead submission. Prices carry notary-verified Oracle attestations with public, reproducible proof.
B7.3 🔑 human key streamable-http smithery_api_key -
Connect multiple data sources to query, clean, and standardize information for seamless integration into your workflows. Enhance your retrieval-augmented generation pipelines by building structured context packages and performing semantic vector searches across indexed records. Protect sensitive data through automated PII redaction while streamlining data exploration using either natural language or SQL queries.
C+7.0 🔑 human key streamable-http smithery_api_key -
KHEPRA MCP Server MCP Registry License Container PQC Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG built in. PQC-01-STIG-V1R1 — Full Whitepaper → 17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory. The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments. Tiers Tier License Key Tools Telemetry Egress Community ❌ Not required pqc_stig + 12 core tools Opt-in Dark Crypto Intel Zero (sovereign mode) Sovereign ✅ Required All 34 tools Zero Zero Pharaoh ✅ Required All 34 tools + priority support Zero Zero Community tier is free. Run pqc_stig to assess your project's quantum readiness against PQC-01-STIG-V1R1 — the World's First DoD-style Post-Quantum Cryptography STIG — no license key needed. What It Does KHEPRA MCP connects your AI assistant directly to a hardened compliance engine. Ask Claude or any MCP client to scan a system, map findings to STIG/NIST/CMMC controls, and generate an executive-ready risk report — all without sending data to external APIs. Key capabilities: 36,195 STIG/CCI/NIST 800-53/800-171/CMMC mappings (offline, bundled) Post-quantum cryptographic attestation on every tool call (ML-DSA-65 / FIPS 204) World's First DoD PQC STIG — 17 controls covering CNSA 2.0 / FIPS 203/204/205 + agentic AI / MCP (PQC-01-STIG-V1R1) Godfather Report: dollar-denominated business impact per finding (FAIR model) Air-gap and SCIF compatible — sovereign/ironbank modes make zero egress calls Flat annual licensing — no per-token or per-query charges Runs on your metal: on-prem, DoD, IC, classified environments Installation There are two delivery methods: Docker (recommended, no build required) and compiled binary (fastest startup, required for air-gap). Both support the same environment variables and all MCP clients. Choose your path: Method Best For Startup Docker Most users, easiest setup ~2s Compiled Binary Air-gap, SCIF, performance ~300ms Option A: Docker (Recommended) Requires Docker Desktop or Docker Engine. The image is pre-built and ships the full compliance database — no additional downloads in sovereign mode. # Pull once docker pull ghcr.io/nouchix/pqc-khepra-mcp:latest # Test it (should print the initialize response and exit) echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \ | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest Option B: Compiled Binary Requires Go 1.21+ for building, or download a pre-built release from GitHub Releases. git clone https://github.com/nouchix/PQC-Khepra-MCP.git cd PQC-Khepra-MCP # Build (cross-compile for your OS) go build -o khepra-mcp ./cmd/khepra-mcp # Linux / macOS go build -o khepra-mcp.exe ./cmd/khepra-mcp # Windows # Test the binary echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \ | KHEPRA_MODE=sovereign ./khepra-mcp Windows — using the batch launcher The repo ships a run-mcp.bat launcher for Windows. It uses the pre-built binary (fast path) and falls back to go run automatically: :: run-mcp.bat is already in the repo at the root of PQC-Khepra-MCP :: Point your MCP client to: cmd /c C:\path\to\PQC-Khepra-MCP\run-mcp.bat Adding to Your AI Client Claude Desktop Config file location: macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json Community tier — Docker (macOS / Linux) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Community tier — Docker (Windows) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "C:\\Users\\YourName\\.khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Community tier — Binary (Windows, fastest startup) { "mcpServers": { "khepra": { "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_NETWORK_POLICY": "lan", "MCP_PQC_ENABLED": "true", "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json" } } } } Community tier — Binary via batch launcher (Windows) { "mcpServers": { "khepra": { "command": "cmd", "args": ["/c", "C:\\path\\to\\PQC-Khepra-MCP\\run-mcp.bat"], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_NETWORK_POLICY": "lan", "MCP_PQC_ENABLED": "true" } } } } Sovereign / Pharaoh tier (with license key) { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_LICENSE_KEY", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "-v", "/var/log/khepra:/var/log/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ], "env": { "KHEPRA_LICENSE_KEY": "YOUR_LICENSE_KEY_HERE" } } } } After editing, restart Claude Desktop. Verify in Settings → Developer — you should see khepra with status running and all tools listed. Cursor Config file: .cursor/mcp.json in your project root, or ~/.cursor/mcp.json globally. Docker (macOS / Linux) { "servers": { "khepra": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Binary (macOS / Linux) { "servers": { "khepra": { "type": "stdio", "command": "/path/to/khepra-mcp", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_MANIFEST_PATH": "/path/to/PQC-Khepra-MCP/manifest.json" } } } } Binary (Windows) { "servers": { "khepra": { "type": "stdio", "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe", "args": [], "env": { "KHEPRA_MODE": "sovereign", "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json" } } } } VS Code (with GitHub Copilot or Cline extension) Config file: .vscode/mcp.json in your project, or user settings. { "servers": { "khepra": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "${env:HOME}/.khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Or via user settings.json for the Cline extension: { "cline.mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Windsurf Config file: ~/.codeium/windsurf/mcp_config.json { "mcpServers": { "khepra": { "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "-v", "/var/lib/khepra:/var/lib/khepra", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } } Continue.dev Config file: ~/.continue/config.json — add to the experimental.modelContextProtocolServers array: { "experimental": { "modelContextProtocolServers": [ { "name": "khepra", "transport": { "type": "stdio", "command": "docker", "args": [ "run", "--rm", "-i", "-e", "KHEPRA_MODE=sovereign", "ghcr.io/nouchix/pqc-khepra-mcp:latest" ] } } ] } } Cloud / SaaS AI Tools (Claude.ai, ChatGPT, Gemini, etc.) Cloud-based AI tools cannot directly spawn local subprocesses — they need an HTTP/SSE bridge to reach your local KHEPRA server. There are two approaches: Approach 1 — mcp-remote proxy (easiest, no server required) mcp-remote tunnels a local stdio MCP server over HTTPS, making it accessible to any cloud tool. This is what the Kaggle MCP entry in the config above uses. # Install once npm install -g mcp-remote # Start the bridge (exposes your local KHEPRA server at https://localhost:3000) KHEPRA_MODE=sovereign mcp-remote \ --server "docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest" \ --port 3000 Then in Claude.ai (or any cloud tool that accepts MCP SSE URLs): MCP Server URL: http://localhost:3000/sse Security note: mcp-remote binds to localhost by default. Do not expose it to the public internet without TLS and authentication. In sovereign/ironbank mode, KHEPRA itself makes zero egress calls — only the bridge connection to the cloud tool carries data. Approach 2 — Self-hosted HTTP/SSE endpoint For teams running KHEPRA on a shared server (e.g., Hostinger VPS at IP_ADDRESS), start the server in HTTP mode: # On your server — start KHEPRA in HTTP/SSE mode docker run -d \ -e KHEPRA_MODE=hybrid \ -e KHEPRA_HTTP_PORT=8443 \ -e KHEPRA_LICENSE_KEY="${KHEPRA_LICENSE_KEY}" \ -p 8443:8443 \ ghcr.io/nouchix/pqc-khepra-mcp:latest # Point your cloud tool to: # https://your-server.com:8443/sse Then configure any cloud AI tool that supports MCP SSE: Cloud Tool Where to add MCP URL Claude.ai (Pro/Team) Settings → Integrations → MCP Servers OpenAI Assistants API tools field with type: "mcp" Gemini for Workspace Extensions → Custom MCP (preview) Glama.ai Workspace → MCP Servers Smithery.ai Catalog → Self-hosted server Note: HTTP/SSE mode (hybrid/edge) enables external connections. Always terminate TLS at a reverse proxy (nginx/Caddy) and restrict access by IP or API key. The sovereign mode refuses HTTP connections by design — air-gap integrity is preserved. Approach 3 — Smithery / MCP Registry (Community tier only) KHEPRA is listed on Smithery.ai and the MCP Registry. Cloud tools that support registry-based discovery can install it directly: Registry ID: io.github.nouchix/pqc-khepra-mcp This runs the Community tier via Smithery's managed infrastructure. For sovereign deployment (air-gap, your data stays on your metal), use Options A or B above. Validation — Test Your Installation Run this from your terminal to verify the server responds correctly: # Docker echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest # Binary (Linux / macOS) echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | KHEPRA_MODE=sovereign ./khepra-mcp # Binary (Windows PowerShell) '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \ | & ".\khepra-mcp.exe" Expected output: a JSON-RPC response listing all available tools. If you see "tools": [...] with 12+ entries — you're connected. Full protocol validation (Windows) # Runs the complete Claude Desktop handshake sequence and validates all responses .\scripts\test-mcp-handshake.ps1 -BinaryPath ".\khepra-mcp.exe" # Expected output: # [PASS] initialize | protocolVersion=2025-11-25 | listChanged=False # [PASS] tools/list | count=34 # TRL-10 READY - Server passes full Claude Desktop protocol validation MCP Tools Community Tier (Free — No License Key) pqc_stig — World's First DoD PQC STIG ⭐ Assesses a source code directory against PQC-01-STIG-V1R1: 12 controls covering CNSA 2.0 algorithm approval, ML-DSA-65 key strength, ML-KEM-768 encapsulation, hybrid cryptography, key storage, constant-time implementation, and certificate chain requirements. pqc_stig(scan_path?: string, profile?: "quick" | "full" | "executive") Example: "Run pqc_stig on my project and tell me if I'm CNSA 2.0 compliant" nist_map Map CCI identifiers or STIG findings to NIST 800-53 Rev 5 controls. khepra_query_stig Query the 36,195-row STIG/CCI/NIST/CMMC compliance database by control ID. dark_crypto_contribute (opt-in) Contribute anonymized cryptographic algorithm telemetry to the SouHimBou AI Dark Crypto Intelligence Network. No PII. Opt-in only — never fires without explicit invocation. Sovereign / Pharaoh Tier ert_scan Enterprise Risk & Threat scan across STIG, NIST 800-53, NIST 800-171, CMMC, and FedRAMP. Returns Godfather Report with dollar-denominated business impact. ert_scan(target: string, frameworks?: string[], output_format?: "godfather" | "json" | "csv") Example: "Run ert_scan on /etc and generate a Godfather Report" stig_check Automated RHEL-09-STIG-V1R3 compliance scan against a live system or configuration path. cmmc_assess Full CMMC Level 1, 2, or 3 assessment with gap analysis and POA&M generation. godfather_report Generate an executive Godfather Report from prior scan results: top 10 findings ranked by dollar exposure, remediation ROI, and FAIR model business impact. + 20 additional tools agent_record, dag_attestation, flight_export, khepra_get_dag_chain, nhi_inventory, acp_status, owasp_agent_assess, khepra_export_attestation, khepra_export_poam, khepra_get_compliance_score, ert_crypto, ert_readiness, stig_benchmark, ir_analysis, vuln_hunter, sbom_generate, threat_model, khepra_query_threat_intel, discover_assets, and more. The Godfather Report Unlike compliance scanners that output a wall of CVEs, KHEPRA translates findings into the language executives care about: Finding: RHEL-09-212030 — No FIPS-validated crypto on /etc/ssh Severity: CAT I (HIGH) Business Impact: $2.4M estimated breach exposure (FAIR model) Remediation Cost: $800 (4 hours engineer time) ROI: 3,000x Every finding includes control ID, framework mapping, business impact in dollars, remediation cost estimate, and ROI. Deployment Modes Mode Air-Gap Egress Telemetry Use Case sovereign ✅ Yes Zero Zero On-prem, SCIF, classified (DEFAULT) ironbank ✅ Yes Zero Zero DoD/IC production, FIPS-only hybrid ❌ No LAN Zero Edge + cloud coordination edge ❌ No Unrestricted Zero Fully stateless SaaS Set via KHEPRA_MODE environment variable. Unknown values are rejected at startup and fall back to sovereign (fail-closed). Environment Variables Variable Required Default Description KHEPRA_LICENSE_KEY Sovereign/Pharaoh only — License key. Community tier runs without one. Get at nouchix.com KHEPRA_MODE No sovereign Deployment mode: sovereign, ironbank, hybrid, edge KHEPRA_MANIFEST_PATH No manifest.json Path to signed tool manifest file KHEPRA_HOME No /var/lib/khepra Data and compliance DB directory KHEPRA_LOG_DIR No /var/log/khepra Log directory KHEPRA_DAG_PATH No ~/.khepra/dag DAG audit chain storage path KHEPRA_AUDIT_LOG_PATH No ~/.khepra/audit.ndjson Signed audit log path KHEPRA_MAX_CONCURRENT No 5 Max concurrent tool calls per agent KHEPRA_NETWORK_POLICY No lan Network scope: lan, none, unrestricted MCP_PQC_ENABLED No true Enable ML-DSA-65 PQC attestation on all responses Air-Gap & SCIF Deployment KHEPRA makes zero external network calls in sovereign and ironbank modes: License validated offline via ML-DSA-65 signed license.adinkhepra file Compliance databases (36,195 mappings) bundled in container — no external downloads No telemetry, no heartbeat, no egress — verified at the transport layer # Transfer image to air-gapped network docker save ghcr.io/nouchix/pqc-khepra-mcp:latest | gzip > khepra-mcp.tar.gz # On air-gapped host: docker load < khepra-mcp.tar.gz Note on telemetry: The dark_crypto_contribute tool (Community tier) sends anonymized cryptographic algorithm telemetry to the SouHimBou AI intelligence network only when explicitly invoked by the user. It is never triggered automatically. In sovereign/ironbank mode, all network calls are blocked at the transport layer regardless. Compliance Coverage Framework Version Mappings STIG (RHEL 9) V1R3 Automated scanning NIST 800-53 Rev 5 2,120 CCIs NIST 800-171 Rev 2 320 controls CMMC Level 3 Full practice set FedRAMP High Baseline scanning PQC-01-STIG-V1R1 V1R1 17 PQC controls (CNSA 2.0) Total 36,195+ mappings Licensing Flat annual licensing — no per-token or per-query charges. Tier Cost License Key Tools Community Free Not required pqc_stig + 12 core tools Sovereign Annual flat fee Required All 34 tools, air-gap, on-prem Pharaoh Annual flat fee Required All 34 tools + priority support + SLA Community tier is permanently free — contribute to open-source PQC adoption Sovereign/Pharaoh: contact [email protected] or visit nouchix.com Security Reporting Vulnerabilities Do not open public issues for security vulnerabilities. Report privately via GitHub Security Advisories or email [email protected]. SLA Target Acknowledgement 24 hours Initial assessment 5 business days Patch / mitigation (Critical) 30 days We accept encrypted reports via PGP (keys/security_contact.asc) and Post-Quantum channels (Dilithium / ML-DSA-65 keys in keys/). See SECURITY.md for the full disclosure policy and ASAF event taxonomy. Security Posture Deploying advanced post-quantum cryptography, air-gapped isolation, and comprehensive STIG mappings — built in direct alignment with NSA & ASD Model Context Protocol guidelines. NSA & ASD MCP Security Alignment The NSA and Australian Signals Directorate (ASD) have published specific threat vectors for AI systems interacting with local environments. KHEPRA MCP is explicitly designed to mitigate every identified vector: NSA/ASD Requirement KHEPRA Implementation Cryptographic validation of tool responses ML-DSA-65 (Dilithium) signatures on all JSON-RPC 2.0 payloads Input validation & sanitization Parameter injection resistance via strict JSON Schema validation Principle of least privilege credentials Short-lived ephemeral tokens tied to specific task execution windows Comprehensive audit logging Tamper-evident events compiled into an immutable DAG structure Resource consumption limits Rate limiting + backpressure for LLM request loops Authorization gates for sensitive actions Human-in-the-loop gate for destructive state changes Environment isolation Containerized execution with zero-egress sovereign mode Software supply chain integrity Manifest pinning for all loaded tools and dependencies Network exposure reduction Air-gappable — zero internet transit in sovereign/ironbank modes Post-quantum resilience PQC-signed DAG trail protecting against harvest-now-decrypt-later Compliance Certifications Framework Status Coverage CMMC Level 2 ✅ Automates evidence collection for AU, CM, SI, SC domains NIST SP 800-171 Rev 2 ✅ Logging, accountability, system integrity NIST SP 800-53 Rev 5 ✅ Continuous monitoring (AU-2, SI-4) FIPS 203 (ML-KEM) ✅ Key encapsulation for secure transit FIPS 204 (ML-DSA) ✅ Digital signatures for payload authentication NSM-10 PQC Mandate ✅ National Security Memorandum 10 compliance DFARS 252.204-7012 ✅ Immutable forensic trails for cyber incident reporting NSA MCP Security Guidelines ✅ Direct mapping to all published AI agent threat mitigations Live Deployment — Physical Edge Running continuously on constrained edge hardware since May 12, 2026 to prove efficiency in sovereign environments: Hardware: Raspberry Pi 2 · 1 GB RAM · 900 MHz ARM · Live Spectrum Router SCADA Pod: STM32U585 / QRB2210 · Modbus TCP · MQTT · Zephyr RTOS 3.4+ · Live Dilithium Signature Verification Controls active: 3 open ports secured · 12 STIG violations detected · 100% file integrity monitoring (AIDE) · 24/7 continuous operation Academic Validation Event Date Institution UAlbany AI Plus Symposium 2026 — "KHEPRA Protocol: Quantum-Resilient Agentic AI Security Using Cultural Cryptography" March 7, 2026 NSA CAE-CDE Institution · 200+ audience SUNY Albany Cybersecurity Showcase — First PQC key ceremony on STM32-class device (SCADA Pod) May 12–13, 2026 Live demo · SCADA architecture poster USPTO Provisional Patent #73565085 — pending. 🔒 Iron Bank containers in DISA vetting process. About NouchiX Veteran-led advisory firm translating CMMC, NIST, and STIG mandates into executive roadmaps. Sales / General: [email protected] Support: [email protected] Website: https://nouchix.com Phone: (518) 304-4450 Developed by SecRed Knowledge Inc. dba NouchiX, Albany, NY.
C+7.0 🔑 human key streamable-http smithery_api_key -
MCP server for the full Pāli Tipiṭaka — ~444,000 segments at parity with SuttaCentral (Sutta + Vinaya + Abhidhamma). Hybrid search, full-sutta fetch with cross-references, segment-aligned translation comparison, and Pāli word lookup. Offered as Dhamma Dāna.
C+7.0 🔑 human key streamable-http smithery_api_key -
Search Narcotics Anonymous meetings worldwide via the BMLT directory.
C+7.0 🔑 human key streamable-http smithery_api_key -
Plan multi-day hut-to-hut hiking tours in the European Alps, powered by live availability data from the Alpine Club booking systems (DAV, ÖAV, AVS). ## What it does - Recommends curated multi-day routes filtered by difficulty, duration, number of hikers, and travel window - Returns bookable start dates only when hut availability is fresh (≤8h old) - Flags off-season requests, stale data, and no-match cases explicitly (no hallucinated suggestions) - Exposes full route detail: stages, elevation, overnight huts, booking URLs ## Tools - `recommend_tours` — rank routes by hard filters + soft preferences (months, transport, difficulty), return top matches with sample start dates - `search_tours` — fuzzy text search across route names and regions - `get_tour` — fetch full stage-by-stage detail for a single route ## Data notes Route content, stage descriptions, and hut names are in **German** (the primary audience is DACH hikers). Numeric fields, enums, and IDs are locale-neutral. Best used by agents that can either speak German or translate German strings downstream. Availability is aggregated server-side across multiple booking providers and exposed with a clear freshness contract — agents should not guess dates when `status != "bookable"`.
C+7.0 🔑 human key streamable-http smithery_api_key -
An MCP server and JSON API over the real https://livonian.tech dictionary — so LLMs translate to and from Livonian with attested words and grammatical forms, not invented ones. Read-only.
C+7.0 🔑 human key streamable-http smithery_api_key -
Search Austrian federal and state law, court decisions, and the authentic Bundesgesetzblatt (RIS).
C+7.0 🔑 human key streamable-http smithery_api_key -
Search for local businesses worldwide. Structured data optimized for AI agents. • Search Millions of businesses over 49 countries (Europe, Northamerica, Southamerica, Asia, Oceania) • Quality & demand scoring for every business • Ranking based on real user click-through data • No API key needed, free access • Rate limit: 500 requests/hour per IP
C+7.0 🔑 human key streamable-http smithery_api_key -
MCP server for Project Gutenberg — 75,000+ public-domain ebooks with full plain-text retrieval.
C+7.0 🔑 human key streamable-http smithery_api_key -
App Store Optimization for AI agents — the official MCP server for [Sonar](https://trysonar.app). **43 tools** covering the full ASO workflow on the iOS App Store and Google Play: - **Keyword research** — difficulty & popularity scores, autocomplete suggestions, related terms - **App intelligence** — metadata lookup, store search, ASO audit score, keyword extraction, revenue estimation - **Reviews** — fetch and mine app reviews with rating filters - **Rank tracking** — daily rank history for your tracked keywords (Full plan) - **Competitor analysis** — keywords competitors rank for + gap analysis vs your app (Full plan) - **Workspace writes** — set up products, track keywords/competitors, manage alerts (Full plan + write-scope key) **Auth:** pass your Sonar API key (`aso_...`) — create one at [trysonar.app/developers](https://trysonar.app/developers). Stateless research tools work on any plan with credits; new accounts get free credits on signup.
C+7.0 🔑 human key streamable-http smithery_api_key -
## Server Description Screen 9,900+ US equities across 64 years of daily prices, quarterly financials, and 56 technical indicators. Describe what you're looking for in plain English and Shibui translates it into SQL against a 31M-row database. Combine multi-year margin consistency, revenue growth trends, RSI and MACD signals, balance sheet strength, valuation ratios, and earnings surprises in a single query. Examples: - "Find companies under $5B market cap where operating margins stayed above 15% every year since 2019 with revenue growth in at least 4 of those years" - "Which stocks just crossed below their 200-day SMA with RSI under 30 but had positive free cash flow last quarter?" - "Compare NVDA vs AMD on revenue growth, gross margins, and EV/EBITDA over the last 3 years" ### Coverage - **Symbols:** 9,900+ (NYSE + NASDAQ) - common stocks, ETFs, ADRs, REITs - **Prices:** ~31M daily OHLCV records since 1962 - **Financials:** Quarterly and annual income statements, balance sheets, cash flow (1990-present) - **Valuation:** Daily P/E, P/B, market cap, enterprise value, EV/EBITDA, FCF yield (1993-present) - **Technical indicators:** 56 pre-calculated (RSI, MACD, Bollinger Bands, SMA, EMA, ADX, candlestick patterns, and more) - **Earnings:** Quarterly EPS actuals, estimates, and surprise percentages - **Analyst estimates:** Target prices, buy/hold/sell ratings - **Ownership:** Institutional holdings, short interest ### Access Free. No API key. Remote MCP server at `https://mcp.shibui.finance/mcp`. Connect in under 2 minutes.
C+7.0 🔑 human key streamable-http smithery_api_key -
Your AI agent has two states. Ternlang gives it three. 30 tools — FREE, no key needed. The third state isn't null. It isn't "maybe". It's hold (trit=0) — a first-class routing instruction that tells your agent: evidence insufficient, gather more before committing. Every binary system that forces yes/no on ambiguous data is making a structural error. We fixed that. ⚡ trit_decide · trit_consensus · trit_vector · moe_orchestrate · ternlang_run · trit_audit ⚡ MoE-13 deliberation engine · EU AI Act Art.13/14/15 · BET VM (real compiler, not a sim) affirm = proceed. hold = wait. reject = block. Built in Graz, Austria by RFI-IRFOS. v1.0.0
C+7.0 🔑 human key streamable-http smithery_api_key -
The only MCP server with Confidential Escrow Mode — HIPAA/GDPR-ready encrypted transactions for regulated AI agents. 46 tools for the full agent commerce lifecycle. **Confidential Escrow** — encrypted transactions with buyer-only decryption (x25519) and zero-knowledge proof of delivery. The escrow system never sees the work product. Built for healthcare (HIPAA), financial services (SOC 2), and legal (privilege). **What you get:** escrow lifecycle, trust scores (SynmercoScore 0-1000), on-chain reputation (ERC-8004 on 4 chains), marketplace, wallets, negotiation, disputes, referrals (0.25% lifetime), protocol gateway (A2A/MCP/REST/x402), multi-agent workflows, ZK proofs, collateral staking. **10 tools work free — no API key needed.** $1K Shield Insurance per escrow. 3.25% flat fee. 179K+ agents in ecosystem.
C+7.0 🔑 human key streamable-http smithery_api_key -
Amalgix Document Intelligencehttps://server.smithery.ai/amalgix/document-intelligence/mcp● healthy
Cross-model evidence pipeline for financial filing and contract intelligence. Two core paid workflows — analyze_public_filing (SEC 10-K/10-Q/20-F, ticker/CIK lookup, metrics, risk changes, contradictions) and review_contract_risks (MSA/NDA/SaaS/procurement, obligations, deadlines, liability, unusual clauses). Plus MCP compatibility utilities: document analysis, web extraction, summarization, and bulk translation. Specialized model routing delivers source-grounded evidence up to 3.8× cheaper than frontier models. Pay per call via x402 USDC on Base or Solana. Document content is not persisted after processing; request metadata and payment events are retained for attribution.
C+7.0 🔑 human key streamable-http smithery_api_key -
Search hotels (3M+ hotels) and flights worldwide, read hotel details, then prebook and book. Remote Streamable HTTP, no API key.
C+7.0 🔑 human key streamable-http smithery_api_key -
Search Korean places, geocode addresses, and convert between coordinate systems via Kakao's Local API. The go-to source for Korean street addresses, businesses, and POI data that Western mapping services miss.
B8.3 🔑 human key streamable-http smithery_api_key -
58-endpoint utility hub - DNS lookup, web scraping, CVE scanning, AI translation, PII detection, domain health audit, company intelligence. Pay per call via x402 on Base.
C+7.1 🔑 human key streamable-http smithery_api_key -
Search and retrieve Korean statutes and administrative rules with precise filters. Access English translations and drill down to articles, paragraphs, and sub-items. Explore linkages with local ordinances and delegated authority to speed up legal research.
C+7.0 🔑 human key streamable-http smithery_api_key -
Live data for AI — one connector to SEC filings, economics, FDA, patents, weather, prediction markets, and more across 750+ official sources, with citations. The hero tool ask_pipeworx routes any question to the right source and returns structured, cited data.
C4.7 🔑 human key streamable-http smithery_api_key -
Listen to Sadhu exposes a searchable corpus of Vedic scripture and recorded lectures. Look up verses by reference (e.g. "BG 2.13", "SB 5.5.3", "CC Madhya 8.128") with original Devanagari/Bengali, IAST transliteration and translations; read commentaries, prose chapters and letters; and search transcribed talks with semantic + lexical retrieval. Inline audio/video players let you hear a lecture passage or watch a clip. Read-only, no auth, no writes.
C+7.0 🔑 human key streamable-http smithery_api_key -
ia-qa.com/mcp llm and RAG testing - Dev/QA toolboxhttps://server.smithery.ai/ia-qa/api/mcp● healthy
IA-QA as an MCP Server Use IA-QA's developer tools to test your llm agents RAG ai tools, directly from Cursor, Claude Desktop, Windsurf, or any AI agent without leaving your IDE. Many classical testing tools too ! Enjoy ! No API key. No signup. Free.
C+7.0 🔑 human key streamable-http smithery_api_key -
Menjometre is an independent observatory of Catalan public spending. This MCP server gives any LLM client read-only access to the full dataset and the statistical scoring layer built on top of it. ## Coverage - **~19.5 M** grant records from the Registre d'Ajuts i Subvencions de Catalunya (RAISC), 2016–present - **~1.7 M** public procurement contracts from Dades Obertes de Catalunya - **~496 K** beneficiary entities with normalised identities - A **public-figure graph** linking Parlament deputies, Generalitat officials, and the boards of publicly-funded entities - The **Menjometre score** — a statistical indicator flagging concentration and recurrence patterns in public spending ## What the 48 tools cover | Domain | What you can ask | |---|---| | `entities` | Search, profile, network, activity timeline for any funded organisation | | `grants` | RAISC lookups, concentration analysis, purpose trees, year-over-year trends | | `contractes` | Procurement lookups, sole-source detection, fragmentation patterns | | `organs` | Granting-body rankings and profiles | | `xarxa` | Public-figure graph, shortest path between two people, cluster investigation | | `pressupostos` | Generalitat budget surface | | `meta` | Methodology, scoring explanation, upstream attribution manifest | ## Example prompts - *"Which ten Catalan entities received the most RAISC funds in 2024?"* - *"Show me the concentration profile of the entity with CIF A08000143."* - *"Which grant-giving bodies award the largest share of their budget to a single beneficiary?"* - *"What percentage of Ajuntament de Girona's contracts are sole-source?"* - *"Explain how the Menjometre score is computed."* ## Response envelope Every tool response ships with four things: 1. **Attribution** — a `sources` array citing the upstream dataset, licence (CC-BY-4.0 / Llei 37/2007), and publisher 2. **Scope predicate** — personal-data filters enforced at the database query, not client-side 3. **Framing** — scored responses embed a `score_meta` block with a `not_an_accusation` disclaimer and a link to the methodology page 4. **Neutral statistical language** — the server returns "top decile", "around the median", never accusatory framing Safe for journalism, academic research, and civic-tech tooling. ## Install via npm ```json { "mcpServers": { "menjometre": { "command": "npx", "args": ["-y", "menjometre-mcp"] } } } Also reachable directly over Streamable HTTP at https://www.menjometre.cat/mcp.
B7.6 🔑 human key streamable-http smithery_api_key -
The world's only historically grounded colour archive built for AI agents. Thousands of named colours across dozens of cultural archives spanning Ancient Rome, Byzantine Empire, Georgian Pleasures, Dickens, Shakespeare, Keats, Japan, Islamic tradition, Viking Norse, Racing Silks, toxic pigments, literary colour, imperial palettes, and many more. Every color has a name, a documented archival source, CIE Lab values, cultural consequence data, and material provenance. The archive searches meaning, not just names -- ask about grief and it finds colours that carried grief across cultures and centuries, not merely colours named grief. Built as a retrieval system, not a generator. Deterministic, evidence-based, source-cited. The anti-hallucination layer for colour history. Prefer a direct connection? Point your MCP client at https://api.colourmemory.com/mcp — no signup, no key for the free tools.
C+7.0 🔑 human key streamable-http smithery_api_key -
Live data for AI agents. 250+ data sources, 900+ tools. Ask questions in plain English with ask_pipeworx — trade flows, SEC filings, drug safety, housing data, and more. No API keys needed.
C4.7 🔑 human key streamable-http smithery_api_key -
Bible translations, books, chapters, verses, and search
B+9.4 🔓 open streamable-http -
MCP server for trivia: 1.4M+ questions (EN+PL), 24 categories, 11 tools + 4 prompts, OAuth 2.1.
B+9.0 🔓 open streamable-http -
GoldBeanhttps://goldbean-api.xyz/sse● healthy
uptime_30d 0.6667%; p95 298.3ms; conformance: pass
B+8.9 🔓 open