Back to the catalog

MCP servers · Security & identity

50 listings on this page, in order of arrival. Each one has its own page with README, repository facts and source links.

  1. mlab.sh ★ 2
    Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.
  2. Verifa
    Identity verification, document checks, sanctions/PEP screening and case review as agent tools.
  3. Gemalli B2B Trade
    Global B2B trade: verified manufacturers, product search, sanctions screening, HS codes.
  4. AIS CVE Priorities — daily exploit-ranked patch list for AI agents
    Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
  5. HumanMirror Outcome
    Verified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.
  6. Ironfang
    Screenshots, PDFs, QR codes, clips and template renders with a normal OAuth sign-in.
  7. Vitals Vault
    Find public biomarker education, available blood tests, panels, and budget-aware starting points.
  8. Verify a Company ★ 1
    Verify a company on GLEIF LEI and SEC EDGAR, screen sanctions. No key; quota-free data.
  9. Compliance Check ★ 1
    Preview a TCPA/GDPR/CASL/10DLC gate result before spending a paid send. No key needed.
  10. 24好玩 · 方案空间
    把 Agent 为客户生成的方案发布成客户专属的微信/手机可读链接,收回客户看了什么、说了什么,再交回 Agent 改下一版。需授权(OAuth 2.1 或 API token)。
  11. CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewat
    CVE advisories: high/critical NVD vulns, daily digest. Register in-session — free testnet funds.
  12. Strix
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
  13. ai.kanonik/kanonik
    Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.
  14. Retired: install com.trustycap/trustycap
    Retired identity. TrustyCap is published as com.trustycap/trustycap. Install that.
  15. Vizier
    Deterministic authorization for one proposed AI agent action, returned with a signed receipt.
  16. mcp-sanctions
    Sanctions/watchlist screening (RF, OFAC, EU, UK, UN) with confidence levels for KYC/AML.
  17. My wine
    Find wines and compare live merchant prices in your region. Fair-deal search, My wine OAuth login.
  18. JoinLayer
    Operate secure JoinLayer data pipelines through delegated OAuth.
  19. SpendShield ★ 2
    Authorization layer between AI agents and money: ALLOW/APPROVAL/DENY, budgets, audit.
  20. CISA Known Exploited Vulnerabilities (kevwatch)
    CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.
  21. Soundcheck
    Staff live events: gigs, crew, setlists, call lists, ingest. Hosted MCP with OAuth.
  22. ComingUp Today
    Family schedules and household tools with OAuth. External calendars remain read-only.
  23. app.melodygenie/melody-genie
    Write lyrics in 100+ styles, score them, generate full songs with 4 engines, split stems. OAuth.
  24. ai.getvda/google-oauth-credential-service
    Google OAuth Credential Service
  25. ai.getvda/google-oauth-langchain-agent
    Google OAuth LangChain Agent
  26. Nizh
    Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
  27. Orbit ★ 32
    Task management for people and AI agents, with scoped OAuth access to issues, projects, and docs.
  28. GaugeMesh
    Route MCP capabilities through deterministic identity, policy, budget, and deadline constraints.
  29. Feldspar free repository security scan
    Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
  30. io.github.MissPris2023/clausely
    UK compliance documentation for the EU AI Act, Worker Protection Act 2024, and UK GDPR.
  31. Uproar
    Chat where AI agents are first-class members, with their own identity and permissions.
  32. CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)
    CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.
  33. io.github.doublegate/cyberchef-mcp ★ 19
    CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
  34. NDEX Pricing
    Swiss market prices for video games and consoles, with provenance. Read-only, OAuth 2.1.
  35. Working Machines MCP Server
    Connect to 1,400+ apps and 15,000+ actions through one OAuth-protected MCP server.
  36. Insuro
    Free insurance vault MCP: OAuth policies, renewals, coverage Q&A, file PDFs. Global; not advice.
  37. Shodan Search MCP
    Defensive Shodan search and host intelligence MCP using customer-provided SHODAN_API_KEY for
  38. Vulnerability Intel MCP
    Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS
  39. Notes Vault
    Indexed search, schema-checked writes and session hooks for a markdown notes vault
  40. ColoringBookify
    Create coloring pages and books. OAuth + Business plan required; AI generation uses credits.
  41. meok-compliance-passport-mcp
    Agent Compliance Passport MCP server - portable, signed credentials AI agents carry to prove complia
  42. ANIME INTELLIGENCE
    Paid anime collectibles intelligence: identity, value, rarity, risk and purchase routing.
  43. meek_defoneos_audit_logging_mcp
    MEEK DEFONEOS Audit Logging MCP — SIEM + audit chain + compliance logs. MIT-licensed.
  44. meok-ai-psych-vuln-audit-mcp
    EU AI Act Article 5(1)(f) gambling-vertical compliance audit MCP. Detects AI systems that exploit ps
  45. Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session
    Ubuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.
  46. Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcw
    MSRC Windows updates: CVE rollups, Patch Tuesday. Register in-session — free testnet funds.
  47. agentguard
    MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.
  48. TrustScan
    Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
  49. KontragentPro
    Russian company data by INN: registry, financials, bankruptcy, inspections, sanctions
  50. uk.co.firecompliancecost/site
    Fire Compliance Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...