- DetectZeStack @mlugo-apx/detectzestack-mcpDetect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- DLP @cx-anand-nandeshwar/dlp-mcpThe DLP MCP provides the compliance violation in the one drive, google drive documents.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- OSV @mrfentmen/osv-mcpUse this MCP server to OSV open source vulnerability data and package security checks. Tools...4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CISA Kev @mrfentmen/cisa-kev-mcpUse this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Gadriel AI Security Harness @gadriel-ai/gadrielAI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- pkgproof @pkgproof/pkgproofVerify an npm package before install: advisories, install scripts, typosquats, declared repository.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- SecOps Field Notes @labaccessnow/secops-field-notes-mcpCVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- isMalicious threat intelligence for AI agents @ismalicious/mcp-serverReputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Blackpoint Cyber @wyre-ai/blackpoint-mcpMCP server for Blackpoint Cyber MDR — alerts, threats, and operations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- Auditra @mwstech/auditraRead-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Package risk @makosddavid/package-riskPackage risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Checkmarx @checkmarx/checkmarxOfficial Checkmarx MCP Server3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Truesignal @rudrendupaul/truesignalWraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Agent Toolkit @white-hat-lab/agent-toolkitPay-per-call developer utilities and npm supply-chain security tools for coding agents, over x402.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Package Intel @adam121393/package-intelnpm, PyPI & crates.io health, vulns and dependency graphs. Runs locally, no API key.13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- LineBreak Gate & Spec Bridge @linebreakapp/linebreak-gateApproved acceptance criteria served over MCP to Claude Code, Cursor, or Codex. Git-only, sealed.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- PostgreSQL CVE & Release Intelligence @meob/pg-cve-mcpPostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- FTP SSH @chris221/ftp-ssh-mcpWork with a remote host over FTP/FTPS/SFTP, SSH, and MySQL.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Voyager Agent @dir-ai/voyager-agentOne universal Voyager: name a goal; it activates senses (repo, net) and runs a live mission.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Voyager @dir-ai/voyagerCited, OSV-gated, injection-hardened web briefs for coding agents. Verified, never raw web.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Intelthreadlinqs @threadlinqs/intelthreadlinqs-mcpThreadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Agent Toolbox @solhammer/agent-toolbox26 deterministic, offline pre-action safety gates for AI agents, each with a signed verdict.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- 4da @4da-systems/4da-mcp-serverUpgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Scout Security @varpost/scoutDeterministic, zero-token security scanner your AI agent calls to find and re-verify issues.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
