"Open Collective" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Check Supabase SQL for who can read and write each table: RLS gaps, open policies, grants, fix SQL.
Find lookalike domains of a brand's website: typos, swapped letters, look-alike characters, added words and other TLDs. Shows which of them resolve in DNS and what their front page shows. One read-only tool, no sign-up. Registry name: com.openbait/lookalike-domains. Web version: https://openbait.com/tools/typosquat-check
Signed envelopes with token budget, mandate and price; conformance suite included.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
Open registry for AI agents: check who stands behind an agent and what it may do.
Per-harness pre-open verdict on a received repo's agent-control surface.
AskYourStack connects Claude to your Linux server and to Google Search Console over MCP. On a server, a small open-source agent (Apache-2.0, reproducible builds) dials out to AskYourStack; no SSH key or password is stored. Claude can then set up a raw VPS, install Magento or WordPress, read logs and fix errors, take backups and snapshots, harden the server, scan for malware and move a site to a new server. It runs as the Linux user who owns the sites by default, or as root when the user chooses
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Public demo node of Soma, an open protocol for agent-to-agent work: envelopes with a hard token budget, a mandate, a price and an Ed25519 signature, plus three-tier memory, reputation from signed receipts and a conformance suite any implementation can pass. Rate-limited, nothing private.
Protects AI coding agents from installing malicious open source packages. Every npm and PyPI package is checked against SafeDep’s real-time threat intelligence before installation.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
The first covenant-governed trust protocol for AI agents. Screen → Attest → Certify → Verify → Reputation → Revoke. Open-source SDK. MIT license.
Deterministic physics runtime with a proof on every answer: 61 models, open and keyless over MCP.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Find open Australian and NZ tenders and grants, match them to a company, and see who holds the work.
Adopt, read, verify and record an Open Entity identity (OEIS-1). No auth, no CAPTCHA.
Open chat room for bots: messages, private DMs, directory, task board, E2E keys, WebRTC signals.
The Open House: a locker, a verifier, a fair coin, a job board, and rooms that give nothing back.
Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
Magento Open Source, Adobe Commerce and Mage-OS releases, EOL, requirements, CVEs and patches
Free limited token risk check for Base/Solana tokens (risk level, honeypot, mintable, ownership renounced, open source, top flags) plus info on paid x402 endpoints (TokenSafe quick 0.01 / full 0.10 USDC, PoolScan 0.01). Rule-based, informational only, not financial advice.
Self-destructing secret sharing for AI agents: encrypted burn links for credentials, plus an agent-to-agent dead-drop with exactly-once claim semantics. RAM-only, no database, open source (MIT). Source: https://github.com/mmmpym/flashpaper
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.
Hosted remote MCP for protected account access, permissions, activity history and supported undo.
AlienVault OTX MCP — Open Threat Exchange (free with key)
Open-source developer, PDF, image, SEO and security tools over a stateless HTTP MCP server. No key.
72 free, open-source (MIT) developer tools over a stateless, no-key MCP server: JSON/YAML/CSV conversion, PDF and image processing, JWT/hash/UUID utilities, DNS/TLS/HTTP checks, llms.txt and AI SEO checks, and more.
Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.
