- index365 MCP @index365usa/index365Start index365 scans and read prioritized findings your coding agent can use.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Domain Posture MCP @domainposture/mcpRemote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- SimplyScan @simplyscan/simplyscanSecurity, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ASMHunter @asmhunter/asmhunter-mcpDrive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports.15% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- SecurityScan @apisecurityscan/securityscanScan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- N0s1 @spark1security/n0s1-mcpSecret scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub and GitLab21% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- RunSec Io MCP @runsec-io/mcpRunSec MCP server for workspace security scanning and remediation workflows.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MCP Fortress @mcp-fortress/mcp-fortressSecurity scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Base Security Scanner @lordbasilaiassistant-sudo/base-security-scanner-mcpMCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Contract Scanner @lordbasilaiassistant-sudo/contract-scannerSmart contract security scanner — vulnerabilities, risk scores, and calldata decoding7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- QuantumScan PQC Scanner @gaiabio12-design/quantumscan-pqc-scannerPQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Agent Security Scanner @mikehzp/agentvulnScan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Kloudle Cloud Security Scanner @kloudle/cloud-security-scannerAWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CodeVulnerability @evozim/codevulnerabilityOWASP threat scanner auditing codebases for safety leaks.27% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Opzyai Pro @opzyai/proDeep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Safeguard @cognivators/mcp-safeguardMCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Bright Security @brightsec/mcpEnables AI agents to access Bright Security tools for app discovery and security testing.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Subdomain API @subdomain/subdomainsFind known subdomains of a domain. Passive data; may include historic entries. List or count.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ByteRay AI @byteray/byteray-mcpHunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai20% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
