- Sentrysurface @sentrysurface/sentrysurfaceCybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Dark Search Protocol @parnasheps-eng/dark-search-protocol161 dark data sources, 25+ domains, 6-step pipeline, Streamable HTTP + stdio11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Sectora @megabrainee/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Fray — WAF Security Testing MCP Server @dalisecurity/frayWAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI30% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Update Hijack Demo @nottiboy137/update-hijack-demoDemo: Server update hijack PoC (clean copy for video)47% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Keyboardcrumbs MCP @keyboardcrumbs/mcpLive threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CISA Known Exploited Vulnerabilities (kevwatch) @a2awire/data-cisa-known-exploited-vulnerability-catalogCISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.43% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Exploit-DB New Exploits & Proof-of-Concepts — buy per-query in-session (exploitdb) @a2awire/data-exploit-db-exploit-database-proof-of-conceptExploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.54% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Argus @thetempleofdoom/argusAgent rental platform: web-vuln scanning, OSINT and red-team tools via subscription.29% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AlertsBar @alerts/alertsbarDomain exposures: breaches, infostealers, ULP heap, cookies. Counts and samples, free.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Jsmon @jsmon/mcpDiscover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface30% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Hyperion @thetempleofdoom/hyperionHyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.26% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Execute adversarial-suffix-mcp @evozim/adversarial-suffix-mcpPremium agentic endpoint for adversarial-suffix-mcp.40% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Execute akamai-bot-manager-bypass-mcp @evozim/akamai-bot-manager-bypass-mcpPremium agentic endpoint for akamai-bot-manager-bypass-mcp.58% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Crimson Crawler @crimsoncrawler/mcp-serverEnrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- TunnelMind Data API @tunnelmind/dataTracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Have I Been Pwned @troyhunt/hibpBreach intelligence API: email search, domain monitoring, passwords and stealer logs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Indicia MCP @indicia/mcpRun OSINT queries and investigations with Indicia11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- X402 OSINT @jienweng/x402-osintPay-per-call OSINT for AI agents: username + email recon in USDC on Base via x402.20% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Polarity @radar989/polarity-mcpReal-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Malware Patrol Threat Intelligence MCP server @andrec10002/mcp-server-threat-intelligenceOur MCP Server connects AI workflows to current, curated cyber threat intelligence8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- NexGenData MCP (sign in with your Apify account) @thenextgennexus/domain-intelligence-mcp-serverWHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- robtex.com MCP @robtex/mcpDNS, IP, AS, domain reputation, and Lightning Network intelligence (44 tools)5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database @exploit-intel/eip-mcpReal-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
