"Guidance on Dependency Checks and Latest Best Practices" matching MCP servers:

A Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.

Read-only npm dependency diagnostics: inventory, audit and health checks from package-lock.json, no account needed.

An MCP server that provides cross-validated npm dependency fitness verdicts, including deprecation, malicious detection, and safe migration target inference.

Enables MCP clients to query projects, fetch findings, trigger analysis, upload CycloneDX BOMs, and check async token status against an OWASP Dependency-Track instance via stdio.

Monitors and analyzes dependency health in Node.js projects, providing tools to check outdated packages, vulnerabilities, licenses, and suggest safe upgrades.

Enables users to look up package versions, scan for vulnerabilities, and analyze dependencies across multiple registries (npm, Maven, PyPI, etc.) using exact version recommendations for security.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables security scanning for npm dependencies by checking manifest and lockfiles against the OSV.dev and Socket.dev vulnerability databases. It provides tools to detect vulnerabilities in specific packages and retrieve detailed technical reports for identified security issues.

Automates remediation of Java library vulnerabilities by processing a security advisory Excel export, scoping to a Spring Boot Maven app, applying version upgrades to pom.xml, and verifying the build.

Enables querying projects, fetching findings, triggering analysis, uploading CycloneDX BOMs, and checking async token status for OWASP Dependency-Track.

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

Stateless Streamable HTTP MCP endpoint with OAuth 2.1 authentication via Cloudflare Workers, supporting PKCE, DCR, and token introspection.

A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.

Enables AI agents to search, read, and write a shared tree of markdown articles hosted on Amazon S3, with per-folder and per-article permissions, attribution of every change to the signed-in user, and full version history. Agents get exactly the access granted to the person they act for, and cannot grant permissions or hard-delete content.

Enables AI agents and MCP-compliant clients to audit software bills of materials and quarantine supply-chain malicious package dependencies using Snyk and Socket.dev.

Connects AI assistants to the Vectra AI On-Premise security platform for natural language threat detection, investigation, and automated incident response workflows.

Enables deployment of an MCP server on Cloudflare Workers with OAuth login, allowing remote invocation of tools like math operations from MCP clients.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.

Enables AgentBase agents to call read-only tools for employee directory, leave balances, purchase orders, and inventory levels while keeping enterprise data inside the data center.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Enables MCP clients to exchange an MCP-audience token for a Microsoft Graph token and call Graph as the signed-in user, with tools for identity verification and recent mail access.

Validates URLs and checks their reputation to help identify AI hallucinations and verify web page authenticity.

A remote MCP server deployed on Cloudflare Workers with OAuth authentication, enabling secure tool calling over SSE.

Enables deploying a remote MCP server on Cloudflare Workers with OAuth login, allowing MCP clients like Claude Desktop to connect and use tools over SSE.

An MCP server deployed on Cloudflare Workers with OAuth login, allowing remote invocation of tools like math operations from MCP-compatible clients.

Provides real-time access to AWS security best practices, incident response playbooks, and preventive security measures from the official AWS Customer Playbook Framework repository. Enables users to query AWS security guidance for services like S3, IAM, EC2, and RDS through natural language.

Enables generating secure passwords, exposing password policies, and providing reusable prompt templates for secure password creation through MCP primitives.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.