- Domain Intel @lazymac2x/domain-intelCloudflare Workers MCP server: domain-intel6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ScanMalware.com URL Scanner @scanmalware/scanmalware-mcpMCP server for ScanMalware.com URL scanning, malware detection, and analysis.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Scry @tunnelmind/scryFree IPv4 lookups against a distributed attacker-observation corpus.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cyber Library @cyberlibrary/librarySearch and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dragons Eye Ransomware Claims @ransomware-tracker/dragonseyePay-per-call ransomware leak-site claim lookups, recent claims and group profiles (x402 USDC).16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Vara MCP — Field Intelligence Scan Server @kushkillerjsixx66/vara-mcp-serverGoverned external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.Not assessed yet.A remote server; no sign-in.
- TLPT @tooloracle/tlptTLPTOracle — 17-tool TIBER-EU TLPT framework: scope, threat intel, scenarios, reports.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Sentrysurface @sentrysurface/sentrysurfaceCybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Sectora @megabrainee/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CISA Known Exploited Vulnerabilities (kevwatch) @a2awire/data-cisa-known-exploited-vulnerability-catalogCISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.43% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb) @a2awire/data-exploit-db-exploit-database-proof-of-conceptExploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.54% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Argus @thetempleofdoom/argusAgent rental platform: web-vuln scanning, OSINT and red-team tools via subscription.29% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AlertsBar @alerts/alertsbarDomain exposures: breaches, infostealers, ULP heap, cookies. Counts and samples, free.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Jsmon @jsmon/mcpDiscover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface30% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Hyperion @thetempleofdoom/hyperionHyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Execute adversarial-suffix-mcp @evozim/adversarial-suffix-mcpPremium agentic endpoint for adversarial-suffix-mcp.40% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Execute akamai-bot-manager-bypass-mcp @evozim/akamai-bot-manager-bypass-mcpPremium agentic endpoint for akamai-bot-manager-bypass-mcp.58% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Crimson Crawler @crimsoncrawler/mcp-serverEnrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- TunnelMind Data API @tunnelmind/dataTracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Have I Been Pwned @troyhunt/hibpBreach intelligence API: email search, domain monitoring, passwords and stealer logs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Indicia MCP @indicia/mcpRun OSINT queries and investigations with Indicia11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- X402 OSINT @jienweng/x402-osintPay-per-call OSINT for AI agents: username + email recon in USDC on Base via x402.20% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- NexGenData MCP (sign in with your Apify account) @thenextgennexus/domain-intelligence-mcp-serverWHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- robtex.com MCP @robtex/mcpDNS, IP, AS, domain reputation, and Lightning Network intelligence (44 tools)5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
