"Security vulnerabilities and risks in MCP Server execution methods" matching MCP servers:

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Enables control and monitoring of an ADT Control / Alarm.com security system from MCP-compatible hosts, including checking system and device state, reviewing activity, and safely arming, disarming, locking, or adjusting devices through confirmation-gated actions and a local audit trail.

This MCP server enables MCP Apps-compatible hosts to render an interactive React-based UI and invoke a sample tool over streamable HTTP or stdio transports.

An MCP server for Abnormal Security, enabling management of threat detection, email security cases, and AI-powered attack protection through Abnormal's API.

A legacy MCP server for Avanan cloud email security, providing tools to manage threat detection, email policies, and security incidents through Avanan's API.

MCP server that resolves postal/ZIP codes to place names, states, and coordinates using Zippopotam.us. Free, no API key required.

Enables real-time domain registration lookups via RDAP, including availability, expiration, and registrar details, with no API key required. Supports natural language queries like 'is example.com available?' or 'when does example.com expire?'.

MCP server for creating and editing diagrams using draw.io. Allows generating diagrams from Mermaid or XML, searching shapes, and opening them in draw.io for export.

Enables users to draw GIS geometry on an interactive map and get clean, validated GeoJSON to hand off to other GIS MCP servers such as FEMA flood screening and USGS hydrography.

Embeds live, interactive Tableau dashboards in ChatGPT, pushing mark selections to the model so questions about specific data points are answered with live queried numbers.

Enables AI assistants to bulk-check hundreds of brainstormed domain names in a single call, reporting which are available, taken, or reserved along with buy links and prices from multiple registrars. It runs locally via DNS, RDAP, and WHOIS lookups, with optional registrar API keys for confirming availability and premium pricing.

Gives Claude read-only access to your ESPN fantasy football team, including roster, weekly matchup, free agents, and player profiles.

Vacation rental software. A signed stay offer on the host's own domain. Agents discover a host domain, verify an Ed25519-signed offer (VRP), and send the guest to that domain to book and pay the host. Do not compare hosts or prices. HemmaBo + VRP, 6 runtime tools: 2 HemmaBo tools, 2 host onboarding tools, and 2 VRP verification tools. Not an OTA. Not a marketplace.

Local-first crypto portfolio aggregation across exchanges (Bybit, Binance), EVM and Solana wallets, and Polymarket. Read-only credentials, runs as a local MCP server. Data aggregation only, not financial advice.

MCP server that lets agents create, display, and export rich UI widgets (cards, dashboards, charts, forms) inline in conversations, with interactive iframe support in MCP Apps hosts and PNG image fallback for other clients.

Enables currency conversion and exchange rate lookups using real ECB reference rates, free and without an API key. Supports natural language queries like 'convert 100 USD to EUR' or 'what's the exchange rate between GBP and JPY?'.

Provides real, official public holiday data for ~100 countries with tools to list holidays for a year and check if a specific date is a holiday. Free, no API key required, powered by Nager.Date.

Enables AI assistants to read, search, and traverse your entire reMarkable library, including handwritten notes via OCR.

Provides live product search, offer comparison, and price history retrieval from BestPrice.gr through three read-only tools, enabling AI applications to query shopping data without an API key.

Provides real-time air quality data (US AQI, PM2.5, PM10, ozone, NO2, SO2, CO) for any city via natural language, using free Open-Meteo data and a single tool.