"Open Collective" matching MCP servers:

MCP server for AgentMinds collective intelligence platform, enabling AI agents to scan websites for security/SEO/performance issues, pull personalized recommendations, and share findings across the network.

Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.

Open behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.

Enables AI assistants to vet open-source repositories and dependencies by running OpenSSF Scorecard, Trivy, and Syft checks for repository health, vulnerabilities, licenses, and SBOMs, with background jobs and status polling.

MCP server integrating Rizin reverse engineering, RzGhidra decompiler, and capa for binary analysis, enabling LLMs to open binaries, identify capabilities, extract function addresses, and decompile to C pseudocode.

CyberSecurity MCP Server extends Claude with real-time cybersecurity reconnaissance capabilities that Claude doesn't have by default. Instead of manually running 5 different tools across different terminals, just tell Claude "analyze google.com" and get a complete security breakdown instantly. Tools included: * WHOIS Lookup — registrar, ownership, creation/expiry dates * DNS Enumeration — A,

Enables AI editors such as Cursor, Claude Code, Windsurf and VS Code to scan a project for common AI-introduced security mistakes — leaked keys, open Supabase/Firebase data, missing auth, unverified Stripe webhooks, SQL injection and more — and return findings with exact fix instructions. It also provides a guided prompt that walks an agent through fixing critical issues one by one and verifying each fix by re-scanning, without ever editing files or rotating keys itself.

Enables AI agents to perform internet reconnaissance through the Shodan API: looking up IP addresses and domains for open ports, banners, TLS certificates, DNS records, and searching or counting internet-connected devices with facets. It also delivers CVE/CPE vulnerability intelligence, including CVSS scores, EPSS estimates, and KEV status.

Enables AI agents to query the Shodan API and CVEDB for internet-connected device reconnaissance, returning open ports, banners, TLS certificates, cloud and location details, plus DNS records and subdomains. Also delivers vulnerability intelligence such as CVSS, EPSS, and KEV status for CVEs, products, and CPEs.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance, including open ports, banners, TLS certificates, DNS records and subdomains, plus CVE/CPE vulnerability intelligence with CVSS, EPSS and KEV data. Supports credit-aware searching, faceted counts, and both stdio and HTTP streaming transports.

Gives AI agents access to the Shodan API and Shodan CVEDB so they can look up any IP, hostname, search query, product, or CVE. It returns open ports, banners, TLS certificates, DNS records, and vulnerability severity with EPSS and KEV status for analyst-style internet reconnaissance.

MCP server that exposes 108+ omega-cli OSINT tools for reconnaissance, web analysis, threat intelligence, and reporting, enabling AI assistants to perform comprehensive open-source intelligence tasks.

Enables an AI agent to reverse-engineer a compiled program with Ghidra — inspecting decompiled code, instructions, callers, memory bytes, and strings — without any source code. Every reply is labelled as fact, computed, or guess, and each claim traces back to hash-checked saved evidence.

Enables AI agents to scan TCP ports on any host and report open/closed status and response times via a pay-per-call x402 micropayment API.

Real security scanners for AI coding agents — SAST (441 rules), secret detection (419+ patterns), dependency CVEs (OSV.dev), MCP/skill vetting, MITRE ATT&CK. Open-source, Rust, free

Enables AI agents to perform internet-facing reconnaissance and vulnerability research by looking up open ports, banners and TLS details for IPs, searching devices with Shodan query syntax, resolving DNS records in batch, and retrieving CVE/CPE intelligence with CVSS, EPSS and KEV status. Tools are read-only, credit-aware, and exposed over stdio or HTTP streaming.

Enables AI agents to look up known open-source vulnerabilities in the OSV.dev database, covering individual packages and versions, specific git commits, single vulnerability IDs, and batch SBOM-style dependency scans. Queries are keyless and return compact summaries or full vulnerability details with affected ranges and references.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance — open ports, banners, TLS certificates, DNS records, and CVE/CPE vulnerability intelligence with CVSS, EPSS, and KEV status. It exposes eleven read-only tools over stdio or HTTP streaming, including free count-only searches and credit-aware helpers.

Gives AI agents access to the Shodan API and CVEDB for host reconnaissance (open ports, banners, TLS certificates), internet-wide device search with facets, DNS and reverse DNS lookups, and CVE/CPE vulnerability intelligence with CVSS, EPSS and KEV data. It marks which tools are free, reports remaining query credits, and supports both stdio and HTTP streaming transports.

Enables AI assistants to autonomously execute over 200 open-source penetration testing tools via MCP, including reconnaissance, web exploitation, and brute-forcing, through a unified server architecture with Docker sandboxing for safe execution.

Enables passive OSINT reconnaissance by providing search dorking and open-source intelligence collection tools through MCP, without requiring active interaction with target systems.

Enables IDA Pro to run as a persistent, multi-agent analysis service with background jobs, allowing clients to submit binaries and query results without keeping the session open.

Unifies seven open-source security scanners into one MCP interface, normalizing and deduplicating findings with AI-assisted triage, patch verification, and reports. Enables agents to scan source code, dependencies, secrets, containers, infrastructure-as-code, and authorized live targets under server-enforced safety limits.

Enables AI agents to search internet-connected devices, perform IP and hostname reconnaissance (open ports, banners, TLS certificates, DNS records), and retrieve CVE/CPE vulnerability intelligence including CVSS, EPSS, and KEV status. Supports both stdio and HTTP streaming transports and works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance, including open ports and banners, TLS certificate details, device search with facets, DNS records and lookups, and CVE/CPE vulnerability intelligence with CVSS, EPSS and KEV data. Supports both stdio and HTTP streaming transports with credit-aware, read-only tools.

Enables querying Shodan InternetDB for IP address intelligence, such as open ports, services, and vulnerabilities, through natural language.

Gives AI agents access to the Shodan API and Shodan CVEDB for host reconnaissance, device search, DNS lookups, and CVE/CPE vulnerability intelligence. It returns open ports, banners, TLS certificates, subdomains, and CVSS/EPSS/KEV severity data through eleven read-only tools.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device search, host reconnaissance (open ports, banners, TLS certificates, cloud provider), domain and DNS lookups, and vulnerability intelligence with CVSS, EPSS and KEV data. Supports both stdio and HTTP streaming transports, with credit-aware free tools for counting queries and CVE research.

Gives AI agents read-only access to the Shodan API and Shodan CVEDB, letting them look up open ports, banners, TLS certificates, cloud and location details for IPs, run paged device searches with facet breakdowns, resolve domains and DNS records, and pull CVSS, EPSS and KEV data for CVEs and CPEs. Supports stdio for desktop clients and HTTP streaming for shared deployments, with credit-aware free tools and zod-validated inputs.

Enables AI agents to query the Shodan API and Shodan CVEDB for internet-connected device reconnaissance, including open ports and banners, TLS certificates, DNS records, subdomains, and CVE/CPE vulnerability intelligence with CVSS, EPSS, and KEV data. Supports device search with facet breakdowns, credit-aware free tools, and both stdio and HTTP streaming transports.