- Presend dependency checks @presendapp/presend-depsCheck an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.Not assessed yet.A remote server; no sign-in.
- Vigía @coredls/vigiaWhat breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- NPMScan @salemalem/npmscanDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Snow Leo Risk & Compliance @magzhansan/snowleo-riskScreen names against OFAC, EU and UN lists; check CVEs, domain DNS and WHOIS, and public tenders6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Circl Vulnerability Lookup @pipeworx-io/circl-vulnerability-lookupCIRCL Vulnerability-Lookup — aggregated vulnerability records7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- FeedMyAgent @makash/feedmyagentTechnology intelligence feed for AI agents: tech stack, compliance, security.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PG1 Sovereign Threat Intelligence @project-gifted1/pg1-threat-intelThreat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Presend MCP Server @presendapp/presend-mcpBefore an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Company filing and CVE evidence snapshots @stavros65/fishnet-company-cveCompany filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- nittim @nittim/nittimProduction-safety audits for AI-generated code, with a fix for every finding.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Feldspar free repository security scan @project-feldspar/scanFree deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Guitar Practice Routine App — Chord Charts @slshults/gpra-chord-chartsLook up a guitar chord by name and get a text chord diagram. 12,708 standard-tuning names.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- XFA @xfa/xfaXFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- JarvisClaw — AI Gateway & API Marketplace @api-jarvisclaw/jarvisclaw320 AI models + 2,720 pay-per-call APIs. x402 USDC on Base or Solana, no API key.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- WP HealthKit @wphealthkit/mcp-serverSecurity audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- CyberShield @tooloracle/cybershieldCyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- FabTally Guard @zvmzaretsky/fabtally-guardVerify before you act: deps-check, x402-preflight, json-repair & url-read for agents.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Devstack @isaiahdupree/devstack-mcpDev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- The Bot Wire @araspasha/botwire-mcp301 real-time data wires. Paid per call via x402, no API key, no free tier.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- endoflife.ai — Software Lifecycle Intelligence @endoflife-ai/endoflife-mcpEOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Security Intel MCP @datakoot/cve-vulnerability-lookupCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- VDB @ai/vdbCheck packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Trusteed @trusteed-io/trusteed-mcpCTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Lazaretto @jamesdfinance-dev/lazarettoFree lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
