- Sourcery @abyssbugg-labs/sourcerySourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Vigía @coredls/vigiaWhat breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- DetectZeStack @mlugo-apx/detectzestack-mcpDetect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- NPMScan @salemalem/npmscanDetect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- DLP @cx-anand-nandeshwar/dlp-mcpThe DLP MCP provides the compliance violation in the one drive, google drive documents.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- Snow Leo Risk & Compliance @magzhansan/snowleo-riskScreen names against OFAC, EU and UN lists; check CVEs, domain DNS and WHOIS, and public tenders6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Circl Vulnerability Lookup @pipeworx-io/circl-vulnerability-lookupCIRCL Vulnerability-Lookup — aggregated vulnerability records7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- OSV @mrfentmen/osv-mcpUse this MCP server to OSV open source vulnerability data and package security checks. Tools...4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CISA Kev @mrfentmen/cisa-kev-mcpUse this MCP server to CISA Known Exploited Vulnerabilities catalog search. Tools include search...5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- FeedMyAgent @makash/feedmyagentTechnology intelligence feed for AI agents: tech stack, compliance, security.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PG1 Sovereign Threat Intelligence @project-gifted1/pg1-threat-intelThreat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Gadriel AI Security Harness @gadriel-ai/gadrielAI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Presend MCP Server @presendapp/presend-mcpBefore an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- pkgproof @pkgproof/pkgproofVerify an npm package before install: advisories, install scripts, typosquats, declared repository.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Company filing and CVE evidence snapshots @stavros65/fishnet-company-cveCompany filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- nittim @nittim/nittimProduction-safety audits for AI-generated code, with a fix for every finding.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- SecOps Field Notes @labaccessnow/secops-field-notes-mcpCVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- isMalicious threat intelligence for AI agents @ismalicious/mcp-serverReputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Feldspar free repository security scan @project-feldspar/scanFree deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Guitar Practice Routine App — Chord Charts @slshults/gpra-chord-chartsLook up a guitar chord by name and get a text chord diagram. 12,708 standard-tuning names.2% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Blackpoint Cyber @wyre-ai/blackpoint-mcpMCP server for Blackpoint Cyber MDR — alerts, threats, and operations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
- XFA @xfa/xfaXFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Auditra @mwstech/auditraRead-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from a package registry.
- JarvisClaw — AI Gateway & API Marketplace @api-jarvisclaw/jarvisclaw320 AI models + 2,720 pay-per-call APIs. x402 USDC on Base or Solana, no API key.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
