- Hacker Bob public records @bobnetsec/hacker-bob-public-recordsRead-only public CVE records, capability metadata, and agent instructions from Hacker Bob.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Signal Oracle @neruoticfarrow/signal-oraclePay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CyberMax Data @cybermax-tools/cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CERT-FR Security Advisories — buy per-query in-session (certfrwatch) @a2awire/data-cert-fr-advisory-national-cert-alertCERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) @a2awire/data-cisa-advisory-ics-security-alertCISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.28% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Depcheck @kaneky/depcheckKnown vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVElens Vulnerability Intelligence @cvelens/cvelensCVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Exploitwatch @edgethirteen/exploitwatchCheck a dependency list against CISA's live Known Exploited Vulnerabilities catalog.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Exploitwatch @exploitwatch-kappa/exploitwatchCheck dependencies against CISA's real Known Exploited Vulnerabilities feed.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Vulnerability Intel MCP @nexlab/vulnerability-intelDefensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- AIS CVE Priorities — daily exploit-ranked patch list for AI agents @aislabs/cveDaily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- UpgradeLens @mattpicone/upgradelensnpm/PyPI/Django dependency upgrades: security, runtime compatibility, migration, package ranking.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ProfitCollector @bakhour/profitcollector22 pay-per-call developer, security, network and data utilities using x402 on Base.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MCPFax Dev Package Intelligence @mcpscores/dev-package-intelIs this dependency current, licensed, deprecated, or already carrying a CVE?19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Krabbot Devtools @marvin-odigo/krabbot-devtoolsAI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dependency Trust @kaiv/dependency-trustTrust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- ScanLabsAI Security Scanner @scanlabsai/scannerScan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- pkg-oracle — Dependency Trust Oracle @julian-martin89/pkg-oracleBlocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVE Security @cve-security/cve-intelligenceCVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- RepoPilot @repopilot/repopilotRepository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVE triage @rezearcher/cve-triagex402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Seal Security @sealsecurity/mcpVulnerability management: scan projects, search sealed packages, manage sealing rules and reports.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Vibgrate MCP @vibgrate/mcpQuery your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- NotCVE — CVE & Vulnerability Intelligence @notcve/vulnerability-intelligenceCVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
