MCP Server Directory

Lattice: CVE, MITRE ATT&CK and detection graph for security agents io.namiq/lattice

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

Grade a site's security headers with fixes and a badge; read logs or code for the defender.

MCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.

b/cited ai.bcited/bcited

AEO tools: scan any URL for AI-citation readiness, read the public leaderboard and citation panel.

CVElens Vulnerability Intelligence com.cvelens/cvelens

CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.

SecScan us.secscan/secscan

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Colorado SOS Business Entity & Registered Agent Search io.github.TheCompanyAtlas/colorado-sos

Colorado Secretary of State business entity search with status and registered agent lookup.

Supplementenscanner nl.supplementenscanner/scanner

Cheapest supplements by normalized price per kg, serving or capsule, across Dutch stores.

DomainDNA: Tech Stack Detector, WHOIS & Domain Age API io.github.shawmena-dotcom/domain-intel

DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.

Alkemata Knowledge Gateway com.alkemata/public-knowledge

Alkemata articles, pages and map tools; scoped OAuth protects map contributions.

Browse, inspect, and retrieve installable React and Next.js interaction effects from Hyperiux Vault.

CVE Risk Check app.openkrill/cve

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

A real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.

ec360 com.encompassconfirm/ec360

KYC automation from authoritative public sources. Requires an Encompass licence.

Secrets Leak Audit io.github.tylerscomic-lab/secrets-leak-audit-mcp

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

CHRP EPI Authority io.github.chrp-bass/chrp-epi-authority

Read-only public EPI definitions, claim boundaries, use cases, and canonical sources.

AI agents use your Obsidian secrets by name — values never reach their context.

Offline full-text search over the HackTricks security wiki, synced every 3 days.

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

Traffalyzer com.traffalyzer/traffalyzer

SEO & UX audits for your websites: findings, Search Console data, growth plan and site scans.

catalogue com.securesvault/catalogue

Search 10,209 products for sale in euros and return buyable links with live prices.

Qalimo fr.qalimo/qalimo

Gestion locative française : biens, locataires, baux, quittances, comptabilité. OAuth 2.1.

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

Read-only multitenant Streamable HTTP bridge over Keeper Secrets Manager's MCP server.