"Projects that showcase advanced GitHub repository search techniques" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in plain words. Pugi also draws four whole logos for a business name with a brand kit, checks any public website or GitHub repository for leaked keys, vulnerable dependencies and risky code, and helps you start from public site templates. Sign in with a Pugi account (OAuth).
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
Arsen is a human risk management platform that enables security teams to assess employee exposure through advanced phishing, voice phishing, and deepfake simulations, and strengthen their resilience with adaptive cybersecurity awareness training. Arsen MCP connects your Arsen platform to your preferred AI assistant, including Claude, ChatGPT, and any MCP-compatible assistant. With Arsen MCP, you can: 1. Build and launch campaigns. Let your AI assistant prepare phishing simulation campaigns and cybersecurity awareness programs, then launch them with your approval. 2. Get actionable insights from your data. Ask questions in plain language and get answers based on your organization's actual data, including campaign results, click, compromise and reporting rates, phishing score trends, coverage, and teams that need attention. 3. Manage multiple client organizations. Give MSSPs the ability to query and work across every client organization they manage, from a single AI assistant. Secure by design. Users authenticate with their Arsen account (SSO and MFA supported), and every request is governed by their existing Arsen permissions.
Verify emails and use FairMatch to search, quote and unlock verified work-email leads.
Free vulnerability lookup and feeds for agents. Look up any CVE, GHSA or OSV ID, read vulnerability feeds filtered by technology, ecosystem, critical or CISA KEV, and check a lockfile for known vulns. Data is merged from the CVE List, GitHub Advisories, OSV, NVD, EUVD, CISA KEV, EPSS and Exploit-DB. No account or API key. Built by Sazabi.
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
Brand protection: watch domains, trademarks, apps and search ads for impersonators, triage matches.
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and two distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 696 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 99 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 696 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp
Search and filter public CVEs and read any of them in full, with CVSS scores, CISA KEV and EPSS, and profile vendors. Read-only, free and open source, no API key needed.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Domain data: Top 1M domain ranks, compromised checks, new domain search, registered domain lists.
Parse a User-Agent: browser, OS, device, plus bot, search crawler, AI crawler and AI agent flags.
Safety grade (A to F) for any public GitHub repo, in plain English, before you install it.
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.
Check before money moves. Lorg Check tells an AI agent, or you, whether a token is a trap or an address is unsafe to pay, on Base and Ethereum. In live tests on new launches it blocked traps that GoPlus and Honeypot.is missed. Call check_token before buying or swapping into a token: it simulates a real buy and sell-back through the token’s own pool, reads what the creator can still do, who can pull the liquidity, and whether the creator was paid by a wallet behind earlier rugs. Call check_address before sending funds: sanctions, scam labels, EIP-7702 sweepers and address-poisoning look-alikes. Every answer is signed and says proceed, limit_exposure or do_not_proceed, with a one-line summary to show the user. Free key by GitHub sign-in, or connect with an API key.
Deploy apps from GitHub, read build/runtime logs, and manage your app's users from your AI agent.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Timestamped proof that AI outputs and data existed, anchored on the Privi blockchain.
Website monitoring: uptime, checkout, SEO (Search Console, Bing), security, speed, DNS, compliance.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
Block an action that a signed mandate does not permit, at the moment the action happens. Checks amount, payee, audience, currency, window and intent in fixed order; 100 checks a day free, then 0.005 USDC per call over x402 on Base mainnet.
Swiss encrypted cloud drive for Claude, ChatGPT and AI agents: search, read and save files.
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and security.
Machine-Readable Company Profiles: find, search and read any company's Trust Profile, fact by fact.
A handling-condition ledger that travels with a sensitive payload across every agent hop.
