- vuln-intel @rozetyp/vuln-intelFree hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Mcpcheckup @fpetitit/mcpcheckupScans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cloud Pathfinder @baneado98/cloud-pathfinderIaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Hackertarget @pipeworx-io/hackertargetHackerTarget MCP.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Domain Intel @lazymac2x/domain-intelCloudflare Workers MCP server: domain-intel6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Frogeye Security Scanner @frogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Bright Security @neuralegion/mcpAI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Compuute MCP Security Scanner @compuute/compuute-scan-apiScan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ScanMalware.com URL Scanner @scanmalware/scanmalware-mcpMCP server for ScanMalware.com URL scanning, malware detection, and analysis.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Bumblebeereceipt @clauxel/bumblebeereceipt-mcpA paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Helixar Security @helixar/mcpSecurity tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Grisoco AI security audits @grisoco/auditsSmart-contract security audits for EVM chains and DAML: quote, run and fetch reports.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- HeaderGuard @mike-tusa/headerguardScan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Tanod Security @tanod/securityContract and agent-package scans, phishing URL and OFAC checks, domain and header checks.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Redthread @redthreadsec/redthreadAttack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Ship Check @uxcontinuum/ship-checkScan a deployed app URL for exposed keys, open Supabase tables and missing security headers.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- TokenOS Smart Contract Audit @tokenos/contract-auditScan Solidity & Anchor code6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PromptBrake Free Tools @aj888/promptbrake-free-toolsFree AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- TLPT @tooloracle/tlptTLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Sentrysurface @sentrysurface/sentrysurfaceCybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Sectora @megabrainee/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Hacker Bob public records @bobnetsec/hacker-bob-public-recordsRead-only public CVE records, capability metadata, and agent instructions from Hacker Bob.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Ecoa @ecoa/ecoaVerificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- FEDLIN Scanners @fedlin/fedlin-mcp-serverExposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
