- Security Intel MCP @selflabbs/security-intel-mcpCVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Security Intel @elsas/security-intelDaily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- vuln-intel @rozetyp/vuln-intelFree hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cybersecurity Threat Intelligence MCP @foundrynet/cyber-intel-mcpCVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CI Sentinel @baneado98/ci-sentinelMulti-CI security scanner with a live threat-intel feed of compromised CI components11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cisa Kev @pipeworx-io/cisa-kevCISA KEV MCP.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dredd MCP @pduggusa/dredd-mcpPre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.25% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- SBOMApp - SBOM Generator & Vulnerability Scanner @mcpsbom/sbom-mcpGenerate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Frogeye Security Scanner @frogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MEOK CRA Art14 Reporter @csoai-org/meok-cra-art14-reporter-mcpMEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- DepScope @depscope/mcpPackage intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.28% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CyberMax Data @cybermax-tools/cybermax-cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ADF agentdatafeed @agentdatafeed/agentdatafeedVerified agent data: EU tenders, EU funding calls, CVEs with KEV and EPSS, Amsterdam events. x402.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cybret findings @cybret/findingsValidated API and app vulnerability findings with remediation guidance.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Vulnrable @vulnrable/vulnrableSecurity grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Attestari @attestari-ai/attestariAttestari's verdict on an npm or PyPI package version, asked before an agent installs it.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- CVE Risk Check @openkrill/cveTriage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Package Health Check @openkrill/packagesCheck an npm or Python package, or a package.json, for vulnerabilities and upkeep.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MAD Synapse · Wallets & Risk @maddegen/synapse-riskPre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Outage.Me @marcioyoshida/outage-meLive cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PkgSeek Linux Intelligence @yeagoo/pkgseekLinux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CyberMax Data @shawmena-dotcom/cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Jeevesus — DugganUSA Threat Intelligence MCP @pduggusa/dugganusa-threat-intelcheck-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.40% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Sectora @megabrainee/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
