"GitHub MCP server" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Drop-in EU AI Act compliance for LangChain & CrewAI. Equip your autonomous swarms with 19 A-graded MCP tools for Zero-Knowledge auditing, NIP-98 security, and L402 micropayments. Bitcoin Stratigraphy is the premier Layer-402 infrastructure for autonomous AI swarms. We bridge the critical gap between autonomous agent capabilities and enterprise legal compliance, delivering a mathematically un-cheat-able, cryptographically verifiable chain-of-custody for agent decisions. Ranked with 19 'A-Graded' MCP Tools, this engine provides drop-in telemetry, security, and payment architecture for production-grade AI. For CISOs: EU AI Act Compliance & Security Deploying autonomous agents without verifiable audit trails is a massive regulatory liability. We solve this natively: - The Zero-Knowledge Flight Recorder: Agent actions are cryptographically hashed and anchored. Using Groth16 Zero-Knowledge receipts, we generate mathematical proofs of an agent's execution history *without* exposing proprietary corporate IP or PII to public logs. - Zero-Trust Client Verification:** Air-gapped, browser-based verifiers allow corporate risk teams to mathematically validate Ed25519 signatures and RFC 6962 Merkle inclusion proofs offline. - Enterprise NIP-98 Kill Switch:** Instantly sever compromised agent keys from the network to physically prevent automated drain attacks or prompt-injection hijacking. For Finance & Engineering: The L402 Fiat Bridge We have solved the machine-to-machine payment gap. Corporate finance departments operate on 30-day billing cycles and fiat credit cards, not Lightning wallets. - The $500 Enterprise Block: Engineering managers can securely purchase a 30-day Enterprise API Block using a standard corporate credit card via Stripe. - Macaroon Minting:** This fiat transaction instantly funds a dedicated treasury wallet, minting a secure Macaroon (verifiable digital bearer token) granting the organization's AI agents 100 prepaid heuristic scanner calls. - Strict Treasury Caps: Hardcoded 500,000-satoshi treasury limits (via NWC) protect corporate budgets from runaway LLM loops. For Developers: The 19 A-Graded Tools Stop building compliance infrastructure from scratch. Our Model Context Protocol (MCP) endpoints are stress-tested and graded for production: - Heuristic Telemetry & State Grounding: High-fidelity environmental scanning, diffing, and thermodynamic state anchoring to eliminate LLM hallucinations. - Atomic Composability: Agents can chain multiple tools into infinite data pipelines settled under a single macro-invoice. - Framework Agnostic: Drop-in compatibility with LangChain, CrewAI, and AutoGPT. Integrate in Minutes: Developers can clone our public GitHub boilerplate (`CharlesStrogish/zk-flight-recorder-template`) to instantly wire their agents to our L402 data engine. [View the Architecture Blog](https://bitcoinstratigraphy.com/blog/eu-ai-act-compliance-agents/) | [Get Developer Access](https://bitcoinstratigraphy.com)
Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in plain words. Pugi also draws four whole logos for a business name with a brand kit, checks any public website or GitHub repository for leaked keys, vulnerable dependencies and risky code, and helps you start from public site templates. Sign in with a Pugi account (OAuth).
Check before your agent installs, connects or pays. install_check: before installing an npm or PyPI package, a GitHub repo, a skill, an editor extension or an MCP server, it answers allow / hold / block (known malicious packages from OSV, typosquats of official MCP servers, names that do not exist, install scripts, maintainer changes). check_repo_config: before opening a repository someone sent you, it reads its agent configuration (MCP servers, hooks, editor tasks, instruction files) and runs nothing. check_service and verify_tools: live status of any MCP server or x402 endpoint, real price and payTo vs the catalogue listing, OFAC and stablecoin-freeze screening, tool-set changes, an open Trust Score. find_service finds working services. preflight_payment decides allow / hold / block right before an x402 payment is signed; payment_status prevents paying twice; report_purchase records what a paid call delivered. Verdicts are signed into a public transparency log. Free, no account. Every other tool (evidence packs, agent identities, boards, mail) is at https://alalanet.com/mcp/full; install and MCP-server checks alone are at https://alalanet.com/mcp/guard. Claude Code plugin: alalanet-guard.
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and three distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 724 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 129 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 724 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp Additional optional connector: https://varexis.tech/mcp/guidance/v1. Configure it explicitly for get_decision_guide (exact published guide IDs) and check_tool_admission_fit (bounded, source-bound declaration-review suitability). Tool schemas and setup: https://varexis.tech/varexis-index/guidance-mcp-v1.json and https://varexis.tech/index-connect#bounded-guidance. The original /mcp four-tool connector and /mcp/catalogue two-tool connector remain distinct and unchanged. The additional tools are free and read-only; they do not execute actions, verify live permissions, grant entitlements or purchase anything. Missing or unbound applicability returns evidence-required. The existing Tool Admission price and licence remain unchanged.
Living docs and MCP context for GitHub repos — conventions, gaps, and source-cited pages on merge.
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
Free, read-only vulnerability intelligence merged from the CVE List, NVD, GitHub Advisory Database, OSV, ENISA EUVD, CISA KEV, FIRST EPSS and Exploit-DB. Seven tools search advisories, look up CVE/GHSA/EUVD/OSV IDs, check package and product versions, rank patch priorities, and check lockfiles, SBOMs or Wappalyzer exports. Results include source links, CVSS, EPSS, exploitation evidence and published fixes where available. No account or API key. Documentation: https://vulnerable.now/agents
Agent payments ecosystem intelligence. Scans GitHub/HN/npm across AP2, ACP, x402, MPP, UCP.
Search, inspect, and submit third-party OBS Studio plugins in Plugin Soko-kun, a free, unofficial registry. Searching works without signing in; submitting a plugin requires a GitHub sign-in.
Virtuagym MCP server for ChatGPT, Claude and any AI agent: book member into class, list classes, list members, add lead and add member note in your own Virtuagym account. Cotlet works in the account through your Cloud Browser, a real Chrome where you sign in to Virtuagym yourself; Cotlet does not store your password and you need no Virtuagym API key. About the official Virtuagym API: Virtuagym has an API, but its docs and keys come only by email: "please reach out to api@virtuagym.com and provide us with your Github username" (checked 9 Nov 2026). It has no Zapier app and no official MCP server. Setup and FAQ: https://cotlet.dev/integrations/virtuagym-api-mcp-server
Trakt MCP server for ChatGPT, Claude and any AI agent: add to watchlist, rate movies and shows, mark episodes watched, manage custom lists and browse calendar in your own Trakt account. Cotlet works in the account through your Cloud Browser, a real Chrome where you sign in to Trakt yourself; Cotlet does not store your password and you need no Trakt API key. About the official Trakt API: Trakt has a full REST API for history, ratings, watchlist, lists and calendars, but no official MCP server (checked 17 Oct 2026). Anyone can register an API app for free, with a verified GitHub account, and sign users in with OAuth 2.0 and PKCE. Setup and FAQ: https://cotlet.dev/integrations/trakt-api-mcp-server
Get open-source GitHub projects running on your computer, with your AI app
Get open-source GitHub projects running on your computer, with your AI app
Finds the GitHub Actions workflow eating your CI bill and suggests fix diffs, verified against runs.
Free vulnerability lookup and feeds for agents. Look up any CVE, GHSA or OSV ID, read vulnerability feeds filtered by technology, ecosystem, critical or CISA KEV, and check a lockfile for known vulns. Data is merged from the CVE List, GitHub Advisories, OSV, NVD, EUVD, CISA KEV, EPSS and Exploit-DB. No account or API key. Built by Sazabi.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
> TradingMCP puts a market analyst inside your AI assistant. Paste one URL into Claude, ChatGPT, Cursor, VS Code or any MCP client and ask in plain language: screen for breakouts, run a multi-timeframe analysis, backtest a strategy with walk-forward validation, scan for smart-money and volume signals, or get a one-prompt morning market brief. In clients that support MCP Apps, price charts and the Markets panel are drawn right in the chat. > 40+ tools covering crypto (real-time), stocks, ETFs, FX, futures and commodities across major global exchanges. > Hosted, nothing to install: Pro $9/month (2,500 tool calls) or Pro+ $29/month (10,000). Paid upfront with a 14-day money-back guarantee; your API key arrives right after checkout. > Built on the open-source tradingview-mcp core (MIT, ~5k GitHub stars): self-host it free, or use the hosted version with zero ops. > For research and education, not financial advice. Not affiliated with TradingView
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
Safety grade (A to F) for any public GitHub repo, in plain English, before you install it.
Agent MCP: 18 tools — GitHub/HF/npm/PyPI/HN trends plus 17 web tools for coding agents.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles drop
Audits any live MCP server URL or GitHub repo on Glama's 6-dimension TDQS rubric and compiles dro.
Small online retailer data for dropshipping platforms, discovered via Google Search and public-site crawling across Shopify, WooCommerce and other platforms. Free MCP: 14 categories, 100 records each. MIT code; data: internal research, retention and private AI only; no resale/public redistribution. Quarterly paid batches by email. GitHub: https://github.com/anbani-tech/dropshippingleads-mcp Guide: https://dropshippingleads.com/mcp/en/
One question searched in science, world news, Internet Archive, GitHub and discussions. Free.
Rising GitHub repos with fake stars filtered out. Search what's gaining stars, see today's/week's/month's trending repos, read a plain-language repo page with a trust check and install command, and find open-source alternatives. No sign-up, no API key.
Rising GitHub repos with fake stars filtered out: search, trending, repo pages, alternatives.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and security.
Read any public web page as clean text, and files of public GitHub repositories. Free, no key.
The posts rising fastest right now on Hacker News, GitHub, Product Hunt and more, for any topic.
Assign Linear, Jira or GitHub issues to an AI coding agent team that plans, builds, reviews, tests.
LinkedIn, Slack and GitHub profile photo specs, headshot style guides and a free headshot audit.
Is GitHub, npm, Cloudflare or your AI provider down right now? 20 status pages, one call.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Search US product recalls (FDA, USDA, CPSC) via MCP. Free API keys or $0.025 USDC/call on Base via x402. Tools: search_product_recalls, search_product_recalls_by_upc, search_product_recalls_from_image. Docs: https://recallkitchen.com/docs/ GitHub: https://github.com/Recall-Kitchen/rk-mcp
Connect to the MCP Studio SDK MCP server. This server is connected to two sources: the MCP Studio SDK documentation and the GitHub sample application repos. These resources are great for individuals looking to embed MCP Studio SDK into their web applications, and need an easy way to connect to an MCP server that has access reliable resources for AI-assisted engineering workflows.
Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.
Search the Serverdex MCP server directory by task or category; get install configs and GitHub facts.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
