MCP Server Directory

Catches leaked credentials and PII in outbound LLM prompts

vulnrable com.vulnrable/vulnrable

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Rust Crate Security Advisories — buy per-query in-session (rustsecwatch) com.a2awire/data-rust-security-crate-vulnerability

Rust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.

CardPing com.rankkking.cardpingv2/cardping

Manage your CardPing business-card directory: add, search, view scans, and manage events.

guide-registry guide.constructionleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Converts photos or scans of printed sheet music to MusicXML with optical music recognition

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

Piloxa io.github.Piloxa/piloxa

Prepare USPS Certified Mail letters from any AI assistant; a person reviews, pays and authorizes.

guide-registry guide.schoolleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Censys io.github.pipeworx-io/censys

Censys MCP — internet-scan search over the Censys Platform API (censys.com)

guide-registry guide.babyname/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

IT Security — Access Change Request Recertify — Alder Court Partners (b578285f) com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f

12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m

MailSenpai com.mailsenpai/mcp

MailSenpai: lists, campaigns, DNS & spam checks (74 tools, OAuth, EU). SMTP Senpai: SMTP & API.

guide-registry guide.mealprep/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Who can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).

AI API Cost Firewall & Rate Limiter io.github.Ansarii/mcp-rate-limiter

Token guard and rate limiter preventing runaway API cost spikes for OpenAI and Anthropic.

guide-registry guide.bicycle/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Surf Hut com.aisurfhut/surf-hut

Signed proof-of-time, 30-day stash, live NOAA surf data. No auth. The hut keeps honest clocks.

Project Fingerprint com.projectfingerprint/personal-context

Personal context and preferences for AI via OAuth-approved profile sections and taste data.

guide-registry guide.localleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

guide-registry guide.militaryleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Rose Bounty org.agttglobal/rose-bounty

AI-agent trust infrastructure for discovery, authority, execution, verification, and receipts.

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

guide-registry guide.careleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.