A
licenseA
qualityA
maintenanceAgent trust & data safety MCP: PII/secret redaction, email validation, sanctions screening, and OSV vulnerability checks for AI agents.
2
13
0MIT
Security
Identity and security management tools. Enables authentication, data protection, and system monitoring.
MCP ServersBrowse all →
Draugrofficial
AlicenseAqualityAmaintenanceSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.6138Apache 2.0- AlicenseAqualityAmaintenancePolicy proxy that governs what AI assistants can reach and do: it refuses forbidden tool calls before the upstream is contacted, with per-user memory and a tamper-evident audit. Stops prompt-injection exfiltration and forbidden data combinations across connectors.212251 PyPI2Apache 2.0
Maplith Bridgeofficial
AlicenseAqualityBmaintenanceConnect your database to your AI agent, read-only, without sharing your password. Maplith Bridge serves a folder of data files over MCP behind a token you create, and fills it from PostgreSQL under a role that can only read.62557 npm1Apache 2.0
DeltaX Preflightofficial
AlicenseAqualityCmaintenanceLocal MCP decision gate for AI agents and CI/CD: check candidate actions against owner-controlled policy and proposal-bound evidence. Three read-only tools report admissible options, missing evidence, and SHA-256 receipts. No selection, execution, or DeltaX API key.43Apache 2.0- AlicenseAqualityAmaintenanceProof of control for AI agents, through the proof.holdings API: verify domains, phone numbers and messenger accounts, ask a human to approve an action, and issue and verify Proofs of Delegation.2167251 npmMIT
WhisperGraphofficial
AlicenseAqualityDmaintenanceSelf-hostable MCP server for WhisperGraph — a graph of 7.39B nodes / 39B edges mapping DNS, BGP, GeoIP, WHOIS, and threat intelligence. Six read-only tools (Cypher query + schema introspection + threat assessment), six resources, eight investigation prompts. stdio and Streamable HTTP transports.825 npm1Apache 2.0
Strac MCP DLPofficial
AlicenseAqualityAmaintenanceDetect and redact PII, PHI, PCI and secrets — SSNs, credit cards, passports, API keys and cloud credentials — in text and in local files, using the Strac DLP API. Five tools: redact_text, detect_sensitive_data, detect_file, redact_file and detokenize.58MIT
ZeroPath MCP Serverofficial
AlicenseBqualityDmaintenanceAllows developers to query security findings (SAST issues, secrets, patches) using natural language within AI-assisted tools like Claude Desktop, Cursor, and other MCP-compatible environments.1710MIT
@verigent/mcp-serverofficial
AlicenseAqualityBmaintenanceMCP server for Verigent's AI agent verification, enabling agents to verify themselves, check other agents' status, and browse the leaderboard.1420 npmApache 2.0
BackBond Agent Scanofficial
AlicenseAqualityBmaintenanceLocal static inspection of MCP and AI-agent tool manifests before attachment, reporting findings and missing evidence without executing proposed tools. Results do not establish runtime safety.247 npmMIT
Fidensa MCP Serverofficial
AlicenseAqualityDmaintenanceEnables AI agents to verify trust scores, search certified capabilities, compare side-by-side, and submit experience reports through Fidensa's certification authority.728 npmMIT
Mission MCPofficial
AlicenseBqualityAmaintenanceTrust Graduation gate for AI agents: visible approval ceremonies and receipt-backed boundaries for consequential actions.540 npmApache 2.0
Bitwarden MCP Serverofficial
AlicenseBqualityBmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.592,016 npm291GPL 3.0
mailfact-mcpofficial
AlicenseAqualityCmaintenanceProvides read-only access to a Mailfact tenant, letting users list domains, sending sources, and aggregate reports, and query DMARC alignment, reporter coverage, and record-level data through MCP tools. It returns counts and rows only, without recommending policies or scoring domains.962 npmMIT
Hellō Admin MCP Serverofficial
AlicenseAqualityDmaintenanceEnables AI assistants to create and manage Hellō applications with full developer context, supporting app creation, updates, secret generation, and logo management through a single unified tool.113 npm4MIT
a202-mcpofficial
AlicenseAqualityBmaintenanceOfficial reference MCP server for A202, the Verifiable Agreement Protocol for Agent-Led Commerce. Gives an agent the seven capabilities two organisations need to buy and sell directly: issue a mandate, check what an agent may do under it, approve an act needing a person, form an agreement, exchange obligations, verify a record by replay, and read the transaction record back.74Apache 2.0
PatrowlIntelMCPofficial
AlicenseAqualityDmaintenanceExposes PatrowlIntel vulnerability intelligence (CVEs, EPSS, CISA KEV, public exploits, trending attacks) via MCP tools like search_cves, get_cve, and list_trending_attacks.32MIT
Koru Shield MCP Serverofficial
AlicenseBqualityBmaintenanceEnables AI assistants to manage DNS filtering accounts by blocking or allowing domains, checking policies, reviewing blocked queries, and managing filter categories, schedules, and devices through natural language.1628 npm1MIT
Cork MCP Serverofficial
AlicenseAqualityBmaintenanceEnables AI assistants to query Cork's cyber-insurance API for MSPs, including client warranty status, cyber scores, risk/compliance events, software vulnerabilities, integrations, invoices, and installer metadata via MCP tools.23Apache 2.0
pageguard-mcpofficial
AlicenseAqualityFmaintenanceScan any project or website for privacy compliance issues directly in your AI coding tool. Detects tracking tech, cookies, and third-party data collection. Works in Claude Code, Cursor, and Windsurf.39 npm1MIT- AlicenseAqualityBmaintenanceVerify sealed voice recordings (WAV) from any AI assistant: verdict (verified, unsealed, warning, alert) and the seconds that changed after sealing. Verify-only, no secrets.2Apache 2.0
- AlicenseAqualityAmaintenanceKnow-your-agent backed by ICP-Brasil: a company (e-CNPJ) or a person (e-CPF) signs that an AI agent acts for them, within a mandate. Signed credentials and verdicts, CRL checks, MCP + HTTP with x402, and an npm library to verify or issue without a hosted service.2102MIT
Sadu MCP Serverofficial
AlicenseAqualityBmaintenanceEnables AI assistants to read and search a bilingual CORF register, follow ISO 27001, PCI DSS and SWIFT CSCF crosswalks in any direction, and score exported assessments.12MIT- AlicenseAqualityBmaintenanceEnables MCP-capable agents to create and invoke OpenServerless endpoints, manage secrets, and configure integrations such as S3, PostgreSQL, Redis, Milvus, and MongoDB.13Apache 2.0
delentia-sovereignofficial
AlicenseAqualityAmaintenanceConnects autonomous AI agents and IDEs to the Delentia Sovereign Edge Network, providing deterministic security gating, structured reasoning, context compression, and swarm coordination tools.529 npmApache 2.0
EyalSec MCP Serverofficial
AlicenseBqualityAmaintenanceGives Claude, Cursor and any other MCP client read-only access to an EyalSec account, so users can search and inspect security events, trace untrusted data to its sink, and check machine, run, rule and account status through plain-language questions. No write operations exist, so a full-access key still cannot change anything through it.19135 PyPIMIT- AlicenseAqualityDmaintenanceExposes the Agent Policy Router (APR) as MCP tools, allowing any MCP-compatible AI agent to gate its actions through compliance policies before execution.12MIT
- AlicenseAqualityCmaintenanceEmail validation MCP server using MailboxValidator API to determine validity of an email address.311 npm1MIT
Symbiotic MCP Serverofficial
AlicenseAqualityDmaintenanceEnables security analysis of code and infrastructure files via MCP, using Symbiotic CLI for scanning vulnerabilities.4MIT
MCP ConnectorsBrowse all →
WHOIS, RDAP, DNS, IP / ASN / CIDR and Web3 name (ENS, Unstoppable, Handshake) lookups. No API key.
Verify claims, resolve FIGI identity, extract claims, and sign x402 delivery receipts over MCP.
EU/UK tenders, EU law, funding, medicines, drug shortages, recalls, sanctions, CVE, CERT, holidays.
Technology intelligence feed for AI agents: tech stack, compliance, security.
Signed, traced record of what an npm package or file attempts when run, network included. No key.
VPN, proxy, Tor, hosting and CDN detection for any IP address, from the VPNDetection API.
Find lookalike domains of a brand's website and see which resolve and what they show.
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
Brand protection: monitor domains, trademarks and app stores. Triage matches and track takedowns.
Let your AI agent pay for APIs and data without handing it your money. In ChatGPT, Claude or Grok, the agent finds paid x402 APIs (with each seller's payout record from x402 Doctor) and asks to pay; you approve and sign each payment in your own wallet: MetaMask or Coinbase Wallet (USDC on Base), Phantom (USDC on Solana) or Xaman (RLUSD on the XRP Ledger). Fizzl checks every payment before you sign and every paid answer for hidden instructions. Fizzl never holds your keys. Free to start.
Block an action a signed mandate does not permit: amount, payee, audience, currency, window, intent.
Runtime permission, approval, and audit layer for AI agent tool execution.
Sourced privacy answers: how private an app is, tool picks, app swaps, de-Googling, breaches.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.
DMARC monitoring and report analysis with SPF/DKIM diagnostics. Connect your Suped account to inspect monitored domains, email authentication issues, DMARC records and original report XML. Add domains for monitoring and create client organizations as an authorized MSP administrator. Access follows your Suped permissions. Adding a domain does not change DNS records; tools cannot resolve or dismiss issues.
Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Safe to sign? EVM/Solana/XRPL/Algorand txs, permits, EIP-7702, tokens; OFAC screen: green/orange/red
