- ScanLabsAI Security Scanner @scanlabsai/scannerScan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Security Scanner @vpatser1/mcp-server-security-scannerScan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- pkg-oracle — Dependency Trust Oracle @julian-martin89/pkg-oracleBlocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVE Security @cve-security/cve-intelligenceCVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- RepoPilot @repopilot/repopilotRepository evidence for agents before they adopt dependencies, enter codebases, compare, or merge.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVE triage @rezearcher/cve-triagex402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Seal Security @sealsecurity/mcpVulnerability management: scan projects, search sealed packages, manage sealing rules and reports.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- index365 MCP @index365usa/index365Start index365 scans and read prioritized findings your coding agent can use.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- ScriptDocs MCP @timwal78/scriptdocs-mcp-serverReal, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vibgrate MCP @vibgrate/mcpQuery your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- NotCVE — CVE & Vulnerability Intelligence @notcve/vulnerability-intelligenceCVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Tech Risk @rezearcher/tech-riskx402 MCP for agents: crypto prices, funding, DeFi yields, Polymarket, Base RPC + MCP security.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- KernelScan @kernelscan/kernelscanLinux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- AgentSec MCP @traveljamboree/agentsec-mcpSecurity intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Mception @soufianetahiri/mceptionAudits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Fillin @artchristech/fillinSearch for AI agents. Closes the LLM-cutoff gap: CVEs, papers, frontier AI, prediction markets.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Opzyai Security Check @opzyai/mcpLocal-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Opzyai Pro @opzyai/proDeep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database @exploit-intel/eip-mcpReal-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- DataNexus MCP @datanexusmcp/mcp-serverPublic data intelligence for AI agents — CVE, compliance, patents, contracts, domains.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ZEN SecDB @nttzen/zen-secdbZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dynamic Feed @dynamicfeed/dynamic-feed94 keyless tools of live, verifiable data for AI: weather, hazards, space, CVEs. Ed25519-signed.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
