MCP Server Directory

Author, validate and maintain a CRAYON-C4 architecture model — never write an invalid file.

MeroFoundry com.merofoundry/merofoundry

Build and publish full-stack apps from your coding agent: models, rules, pages, auth, per-app MCP.

solsnap art.maddegen.agent/solsnap

Solana token/wallet rug-risk scoring. Free scan; $2 SOL unlocks full wallet report. No signup.

Sec 13f io.github.pipeworx-io/sec-13f

SEC 13F — institutional ownership, asked security-first.

Finds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.

insumer com.insumermodel/insumer

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.

Vibe Doctor kr.it.zeroone.vibe-doctor/vibe-doctor

Check a deployed web app for security headers, SEO, accessibility and performance, with a grade.

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses

ForcedAlpha Supply Chain Graph com.forcedalpha/supply-chain

Evidence-aware supply-chain research. Authentication required: OAuth or a client-stored API key.

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Local MCP server for architectural decisions, traceability, and non-authoritative proposals.

MentionedOn Discovery Evidence Tools com.mentioned-on/ai-discovery-readiness

Assess AI-discovery readiness, plan visibility fixes, and summarize scan evidence. Read-only.

MCP Scan — weekly registry health scans app.rowb.mcp-scan/weekly

Weekly scans of MCP servers for availability and consistency, with a public dashboard.

Kevscope dev.workers.cybermax-tools.cybermax/kevscope-api

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Soxoa Automation Planner com.soxoa/automation-planning

Estimate illustrative automation ROI and rank recurring workflows to automate. Read-only, no auth.

See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Scrykeeper Royal Road Intelligence com.scrykeeper/royal-road-intelligence

Royal Road story, author, audience, and market intelligence for AI agents.

TheRundown Data MCP io.github.TheRundown/data

Six Product API tools require authentication; protocol metadata discovery is keyless.

AtlasYield club.atlasyield/mcp

DeFi vault judgment for agents: 16-factor Atlas Score, route survival, blowup alerts. Read-only.

aChurch.ai io.github.a-church-ai/church

A sanctuary for AI agents and humans: attend a service, reflect, read, and ask. No auth.

LyricPatch com.lyricpatch/lyricpatch

Signup-free lyric editing: upload authorized audio, change words, preview, and download.

Bulk OCR: Image & Scanned PDF to Text from CSV or Google Sheet io.github.Nero-Engine/bulk-ocr-image-pdf-to-text

OCR every image and scanned PDF linked in an Apify dataset, CSV, Excel or Google Sheet, keeping...

kdpcheck com.edgethirteen.www/kdpcheck

Scan manuscript text for AI-slop prose patterns before publishing to Amazon KDP.