"Search for free open-source software" matching MCP servers:

Enables AI agents to inspect and manage Windows software, including listing installed and running apps, searching catalogs, installing, upgrading, uninstalling, managing startup apps, exporting backups, and checking exploited vulnerabilities. It also supports a read-only mode for safe discovery.

Scans code for exposed secrets, API keys, tokens, and credentials across 69 patterns covering cloud services, AI platforms, payment providers, authentication services, and databases.

Deterministic agentic data firewall that secures, monitors, and controls AI agent interactions with data and software via MCP, preventing data leaks.

Enables AI agents to inspect, check, and audit signed offline spending authorizations, and to issue hash-chained receipts for each action taken against them. Enforces per-transaction, total, expiry, merchant, and human-approval constraints, returning allow, needs_human, or deny with the specific failing constraint.

Enables AI agents to read connected bank accounts, transactions, and balances through the Lunch Flow Personal API using a personal API key.

Turns an OpenAPI specification into a broker-published slot of curated, LLM-ready tools that a human operator reviews, tests, and approves before anything goes live. The resulting tools are declarative and run under the broker's authorization, audit, execution limits, and secret handling.

Provides OAuth-protected remote access to an existing Open Brain, forwarding approved tool calls from Gemini Spark and Perplexity web clients without altering the upstream system.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.

Enables searching and analyzing CVEs and vulnerabilities from multiple sources, optimized for PR review scenarios to help developers identify the latest security issues.

Enables comprehensive threat analysis for Indicators of Compromise (IoCs) including IP addresses, file hashes, domains, and URLs. It provides detailed reputation scores, security vendor evaluations, and network metadata to facilitate security assessments and risk detection.

MCP server for AI search crawler governance, brand safety, and search infrastructure auditing. Provides tools to audit robots.txt, canonical links, sitemaps, redirects, and send IndexNow notifications.

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Enables permission-checked search of past chat history that links older messages with the latest activity, returning supporting context such as timestamps, speakers, and surrounding conversation. Authorization is re-verified against current room membership and approved groups on every search, message fetch, and period read.

A Model Context Protocol (MCP) server for accessing the CIRCL CVE SEARCH API, providing comprehensive vulnerability and security information.

Enables AI agents to analyze images from a URL, local path, or Base64 string and determine whether they are AI-generated, including detection of signatures from Flux, Midjourney, DALL·E, and Stable Diffusion. Also inspects cryptographic C2PA provenance manifests, signing certificate authorities, and camera EXIF metadata without requiring API keys or accounts.

Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.

Enables AI agents to vet npm and PyPI packages before installation, reporting typosquats, vulnerabilities in the selected version, publisher changes, and names that don't exist or were published within the last 30 days. It also exposes DNS, WHOIS, email, JWT and file/image utilities as tools over Streamable HTTP, with no signup or API key required.

Enables AI assistants to search Webamon threat intelligence databases, submit URLs for scanning, retrieve scan reports, and browse phishing campaigns and infrastructure clusters using Lucene-powered queries.

Enables read-only access to personal European bank accounts through Enable Banking, allowing MCP clients to list accounts, retrieve balances, search and summarize transactions, and estimate spending with bounded, privacy-preserving tools.

Enables secure one-time encrypted file and note sharing by encrypting data locally before upload and providing tools for sending, listing, checking, and revoking links.

Enables AI agents to score their outgoing responses against groundedness and prompt-injection risks mid-turn, returning allow, warn, or block verdicts before the response reaches the user.

This local, read-only MCP server allows AI to interact with diverse data sources, including SQLite, CSV, Excel, Postgres, and MySQL. It enables controlled data viewing within a chat environment while strictly enforcing read-only access and user-defined visibility rules.

A self-hosted, read-only server that lets compatible MCP clients access personal European bank account balances, transactions, spending, and cash-flow summaries through Enable Banking.

A safety layer and monitoring copilot for AI agents using Splunk MCP, recording tool calls, enforcing policies, and blocking risky actions.

Enables secure, permission-controlled exposure of Frappe/ERPNext DocTypes and CRUD, search, metadata, and deletion operations to MCP clients such as AI agents, with field-level allowlisting and audit logging.

ZeroTrusted ai PII Detection

Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.

A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.

Open end-to-end encrypted messaging protocol and MCP server (a4a-mcp) that gives AI agents a cryptographic address (apub1...) to exchange messages, tasks, and signed agreements directly across NAT without port forwarding.

Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.

Enables checking npm packages for known security vulnerabilities using the OSV API before installation. Supports both single package checks and bulk vulnerability scanning for multiple packages at once.

Enables LLMs to perform automated penetration testing and Active Directory reconnaissance through Mythic, with tools for executing PowerShell, AD recon, domain user enumeration, and Kerberoasting.

A generic local MCP plugin base for ChatGPT that ships example status and echo tools, a guided setup wizard for tunnel configuration with DPAPI-protected API keys, and separated persistent versus generated runtime storage. It also provides a bounded metadata-only conditional-read cache that suppresses unchanged read-only responses to save context.

AI-powered security scanning MCP server that exposes 25+ professional tools, enabling penetration testing and security assessments through natural language interaction with AI agents like Claude Desktop.

Enables AI agents to execute provider tools through a self-hostable gateway with scoped keys, permissions, and accounting reservations.

Enables AI agents to query Microsoft Entra data using natural language, converting requests into Microsoft Graph API calls for read-only enterprise IT scenarios.

Lets Claude, ChatGPT or Cursor connect to PrestaShop, with each employee approving what they may do.