"MCP servers that integrate with GPT" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in plain words. Pugi also draws four whole logos for a business name with a brand kit, checks any public website or GitHub repository for leaked keys, vulnerable dependencies and risky code, and helps you start from public site templates. Sign in with a Pugi account (OAuth).
Scoped credential retrieval for AI agents, with audit events and revocable future access -- https://gazebohq.com
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
Check before your agent installs, connects or pays. install_check: before installing an npm or PyPI package, a GitHub repo, a skill or an MCP server, it answers allow / hold / block (known malicious packages from OSV, typosquats of official MCP servers, names that do not exist, install scripts, maintainer changes). check_service: live status, real price and payTo vs the catalogue listing for any x402 endpoint or MCP server, OFAC and stablecoin-freeze screening, uptime, tool-set changes, on-chain payers, an open Trust Score. preflight_payment decides allow / hold / block right before an x402 payment is signed; payment_status prevents paying twice; dispute_evidence builds a signed evidence pack. Every answer is signed into a public transparency log. Free, no account. Claude Code plugin: alalanet-guard.
Let your AI agent pay for APIs and data without handing it your money. In ChatGPT, Claude or Grok, the agent finds paid x402 APIs (with each seller's payout record from x402 Doctor) and asks to pay; you approve and sign each payment in your own wallet: MetaMask or Coinbase Wallet (USDC on Base), Phantom (USDC on Solana) or Xaman (RLUSD on the XRP Ledger). Fizzl checks every payment before you sign and every paid answer for hidden instructions. Fizzl never holds your keys. Free to start.
Arsen is a human risk management platform that enables security teams to assess employee exposure through advanced phishing, voice phishing, and deepfake simulations, and strengthen their resilience with adaptive cybersecurity awareness training. Arsen MCP connects your Arsen platform to your preferred AI assistant, including Claude, ChatGPT, and any MCP-compatible assistant. With Arsen MCP, you can: 1. Build and launch campaigns. Let your AI assistant prepare phishing simulation campaigns and cybersecurity awareness programs, then launch them with your approval. 2. Get actionable insights from your data. Ask questions in plain language and get answers based on your organization's actual data, including campaign results, click, compromise and reporting rates, phishing score trends, coverage, and teams that need attention. 3. Manage multiple client organizations. Give MSSPs the ability to query and work across every client organization they manage, from a single AI assistant. Secure by design. Users authenticate with their Arsen account (SSO and MFA supported), and every request is governed by their existing Arsen permissions.
Shared second brain for any AI with agent permissions
CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
Deterministic JSON checks with signed evidence and x402-paid execution
Queries IOCs, vulnerabilities, threat actors and malware correlated from thousands of sources, retaining source-attributed evidence. Collection spans feeds, reports and advisories, social and dark-web monitoring, and Mallory's own sandboxing and internet scanning; a free community tier is available with an account and API key.
Bewary is a scam detection API and MCP server for apps and AI agents: phishing, fraud and threat intelligence lookups an agent runs before it opens a link, calls a number, pays or replies. It checks links and domains (phishing, domain age, lookalike brands), IP addresses, phone numbers (FTC and FCC complaints), SMS short codes, email addresses, crypto wallets (scam reports, OFAC sanctions), IBANs, mobile apps and payment handles. Each answer is a typed verdict (scam, suspicious, safe or unknown) with the facts and reason codes behind it, built from evidence rather than a language model. Watches send an event when a watched domain, number, wallet or brand changes. A free key gets 1,000 credits a month with no card; OAuth sign-in is supported.
Read-only WordPress diagnosis for AI: security, performance, forms and downtime, with evidence.
Search and filter public CVEs and read any of them in full, with CVSS scores, CISA KEV and EPSS, and profile vendors. Read-only, free and open source, no API key needed.
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
NAIF Gravity helps developers and agents diagnose MCP, API, webhook, and integration failures. Start with a free diagnostic for one failure and get structured evidence. Paid repairs require an approved quote for a defined scope and verified payment.
ViaSocket is integration and AI infrastructure for developers. Connect 2,300+ apps, build and manage automated workflows, embed AI agents with persistent memory, and add authentication, organisations, and embedded integration UIs to your product through a single MCP server.
Monitor websites, servers, domains and SSL with InfraNest, and ask your AI assistant what is down.
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
EU cookie-consent & tracker audit, run like a real first-time visitor (EU proxies). Free quick check, no account. Finds trackers and tracking cookies before consent, missing first-layer Reject, what still fires after Reject, Google Consent Mode v2 state per signal, plus Google Fonts/YouTube/Maps/reCAPTCHA. Every finding comes with the exact request as evidence and a concrete fix, in 13 languages. Weekly monitoring, white-label PDF for agencies, private share links. Works with any CMP (Cookiebot, Usercentrics, Complianz, CookieYes, Borlabs…).
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
Replay, verify and audit AI agent decisions with signed evidence. Public demo running on the fictional Acme Mutual insurance environment; a full integration is required to use Forge with real systems.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.
Encrypted memory, knowledge graph and provable history for AI agents. ENYAL is the trust infrastructure for autonomous AI: identity, encrypted memory, and BSV-anchored proofs. Archived records are Merkle-batched and anchored to a permanent cryptographic ledger, and any record's inclusion proof can be checked by anyone, with no account.
Execute multi-step A2A & MCP agent workflows with atomic x402/MPP settlement.
Coordinate multi-specialist A2A agent swarms with cryptographic handshakes and x402 settlement.
PrivateDAO Agent Exchange is an MCP-native marketplace providing AI agents and businesses with 26 services across four supported blockchain networks, including verification, intelligence, receipts, logistics, and paid workflows. Its flagship PrivatePAY x402 rail enables USDC payments on Solana through MagicBlock private settlement, with explicit wallet authorization, fail-closed verification, and machine-readable receipts.
Check before money moves. Lorg Check tells an AI agent, or you, whether a token is a trap or an address is unsafe to pay, on Base and Ethereum. In live tests on new launches it blocked traps that GoPlus and Honeypot.is missed. Call check_token before buying or swapping into a token: it simulates a real buy and sell-back through the token’s own pool, reads what the creator can still do, who can pull the liquidity, and whether the creator was paid by a wallet behind earlier rugs. Call check_address before sending funds: sanctions, scam labels, EIP-7702 sweepers and address-poisoning look-alikes. Every answer is signed and says proceed, limit_exposure or do_not_proceed, with a one-line summary to show the user. Free key by GitHub sign-in, or connect with an API key.
Read-only MCP server for diagnosing any WordPress site — security, performance, forms, logs, downtime — with evidence. The connector exposes no write operations and your AI never sees the site's credentials (secrets are redacted before output). Built for agencies managing many client WordPress sites. Free for 1 site.
Check Québec construction contractors against official registries in one call: active RBQ licence, RENA public-contract ban and environmental penalties. Clear verdict with dated sources. Free, read-only, no account.
