- Cybersecurity Threat Intelligence MCP @foundrynet/cyber-intel-mcpCVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Closeread Verify @freeguy-ai/closeread-verifyA verified dependency-audit verdict any AI agent can call over MCP, not a raw scan.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- TridentChain Security @devinder1/tridentchain-securityLocal supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CISA Kev @csoai-org/cisa-kev-mcpCISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infr...10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Cybersecurity Ai @csoai-org/cybersecurity-ai-mcpCybersecurity Ai MCP Server by MEOK AI Labs13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CI Sentinel @baneado98/ci-sentinelMulti-CI security scanner with a live threat-intel feed of compromised CI components11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Black Duck Security Scanner @blackduck/mcp-serverAI-powered security scanning using Black Duck Signal for vulnerability detection.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Cisa Kev @pipeworx-io/cisa-kevCISA KEV MCP.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dredd MCP @pduggusa/dredd-mcpPre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.25% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- SBOMApp - SBOM Generator & Vulnerability Scanner @mcpsbom/sbom-mcpGenerate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- Frogeye Security Scanner @frogeye-ai/mcpZero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- DepScope @depscope/mcpPackage intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.28% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CyberMax Data @cybermax-tools/cybermax-cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ADF agentdatafeed @agentdatafeed/agentdatafeedVerified agent data: EU tenders, EU funding calls, CVEs with KEV and EPSS, Amsterdam events. x402.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Cybret findings @cybret/findingsValidated API and app vulnerability findings with remediation guidance.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- Vulnrable @vulnrable/vulnrableSecurity grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Attestari @attestari-ai/attestariAttestari's verdict on an npm or PyPI package version, asked before an agent installs it.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- CVE Risk Check @openkrill/cveTriage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Package Health Check @openkrill/packagesCheck an npm or Python package, or a package.json, for vulnerabilities and upkeep.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- VAAST @xtrinel/vaastRead-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- MAD Synapse · Wallets & Risk @maddegen/synapse-riskPre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Outage.Me @marcioyoshida/outage-meLive cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- PkgSeek Linux Intelligence @yeagoo/pkgseekLinux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Safe Upgrade @white-hat-lab/safe-upgradeEvidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
