MCP Server Directory

Guardian layer for AI agents: identity, secrets, audit via MCP.

AI agent security via MCP: C3 firewall, C4 immune system, C5 action guard, self-evolving prompts.

Hail io.github.hail-hq/hail-mcp

Phone, SMS & email for AI agents — one remote MCP endpoint, OAuth login, zero install.

Google Calendar for AI agents — list/create/delete events and free-busy via OAuth token.

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

Scan websites for security vulnerabilities, headers, TLS, and email security.

hush com.royashbrook/hush

A secret store for AI agents: the agent never sees the plaintext.

Zhiji Signal — Market Phase Detection com.run402.zhiji-signal/mcp

A-share HS300 phase signals via Landau-Ginzburg framework. No auth required.

Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

sectora io.github.megabrainee/sectora

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Secret and credential management MCP — securely store, retrieve, manage API keys and tokens

auth-token-service io.github.mikerawsonnz/auth-token-service

Hash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP.

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

Bright Security io.github.NeuraLegion/mcp

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Author, validate, debug, and explain OPA Rego policies through any MCP-compatible client.

Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.

Pact 5 tooling: REPL test runs, trap scanning, gas estimation, interface diff, format checks.

Breach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.

PageLens AI io.github.PageLens-AI/pagelensai-mcp-server

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

Scrape social data from TikTok, Instagram, YouTube, X, LinkedIn, Reddit, and ad libraries.

Zero-auth research MCP: web, academic, finance, news, weather, macro, social, SEC. No keys.

TomeVault io.github.olijboyd/tomevault

Check AI instruction files, look up a company's record, and keep a dated record of your own.

Custosa Tools com.custosa/tools

Scans schema metadata to classify PHI, score HIPAA readiness, and generate compliant migrations.