"Information on the Theory of Evolution" matching MCP servers:

Supply chain risk scoring for npm, PyPI, and GitHub repos

A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.

Enables AI coding agents to run one-shot commands and copy single files to and from remote servers through The Bastion, which authenticates, authorizes, and records each action. Access is controlled by the bastion rather than allowlists or deny lists.

Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.

the-real-unifi-mcp License: MIT Node MCP SDK [![CI](https://github.com/mguttmann/the-real-unifi-mcp/actions

Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.

Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification.

Local stdio MCP server for Bitwarden (Public API + Secrets Manager). 50+ admin tools for members, groups, collections, policies, licensing, projects, and secrets. For Claude Desktop / Claude Code.

Enables MCP clients to exchange an MCP-audience token for a Microsoft Graph token and call Graph as the signed-in user, with tools for identity verification and recent mail access.

Enables AI agents to record structured pitfalls (problem, root cause, solution), query experience others have already verified, check an agent's reputation, and repay trust signals when adopting someone else's findings. Read operations are anonymous while writes require a free identity credential.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

A verifying MCP gateway that pins approved tool manifests and skill files to content addresses, blocking tampered descriptions before they reach model context.

Connects AI assistants to the Vectra AI On-Premise security platform for natural language threat detection, investigation, and automated incident response workflows.

Enables Claude Desktop to use MCP tools hosted in Azure Container Apps, secured with Microsoft Entra ID sign-in, and provides hello and whoami tools to confirm connectivity and the signed-in Microsoft account.

Enables deployment of an MCP server on Cloudflare Workers with OAuth login, allowing remote invocation of tools like math operations from MCP clients.

A production-shaped starter for putting an MCP server in front of an existing app, with OAuth and enterprise SSO handled through Clerk, enabling AI assistants to act on your product on behalf of logged-in users.

Enables AgentBase agents to call read-only tools for employee directory, leave balances, purchase orders, and inventory levels while keeping enterprise data inside the data center.

Enables autonomous agents and MCP-compatible clients to enforce policy-approved actions using risk tiers, reversible checkpoints, and token approval bounds.

A remote MCP server deployed on Cloudflare Workers with OAuth authentication, enabling secure tool calling over SSE.

Enables deploying a remote MCP server on Cloudflare Workers with OAuth login, allowing MCP clients like Claude Desktop to connect and use tools over SSE.

Stateless Streamable HTTP MCP endpoint with OAuth 2.1 authentication via Cloudflare Workers, supporting PKCE, DCR, and token introspection.

An MCP server deployed on Cloudflare Workers with OAuth login, allowing remote invocation of tools like math operations from MCP-compatible clients.

Enables agents to audit and safeguard repositories by detecting dependency pinning issues, license compliance problems, hardcoded secrets, and dead code through MCP tools.

MCP server for AI agent identity — verify agents with Ed25519 signatures, check trust scores, sign and verify content, exchange encrypted messages. Built on the Agent Identity Protocol (AIP).

Automated security red-team for any MCP server that scans manifests against OWASP LLM Top 10 and MCP-specific risks, returning a 0-100 hardening score and HMAC-signed report.

Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD security insights.

A hardened MCP server that enforces authentication via Easy Auth and OAuth, manages secrets with Key Vault, and restricts network access using VNet integration and API Management, enabling secure tool invocations through a fully private infrastructure.

Enables AI agents to scan, redact, and govern sensitive data before sending it to external tools through DLP, secure chat, and shadow AI discovery tools.