- CyberMax Data @shawmena-dotcom/cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Sectora @megabrainee/sectoraThreat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Codeaudit @infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Hacker Bob public records @bobnetsec/hacker-bob-public-recordsRead-only public CVE records, capability metadata, and agent instructions from Hacker Bob.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Sphior Code @toraastrta/sphior-code-mcpDeterministic SAST/SCA findings + fix guidance for your GitHub repos, handed to your AI agent.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Signal Oracle @neruoticfarrow/signal-oraclePay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Global Intel Exchange @joseph-ceo/global-intel-exchangeReal-time sanctions screening, CVE, and company registry checks for agents.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- CyberMax Data @cybermax-tools/cybermax-dataFree US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- selvo @cope-labs/selvoLinux CVE prioritisation: 16 MCP tools for scan, fleet, runtime, and PR-able fix discovery.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- Keyboardcrumbs MCP @keyboardcrumbs/mcpLive threat intel for Claude — CVE, KEV predictions, IP lookup, malware hashes. Free, no API key.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
- CERT-FR Security Advisories — buy per-query in-session (certfrwatch) @a2awire/data-cert-fr-advisory-national-cert-alertCERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly18% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) @a2awire/data-cisa-advisory-ics-security-alertCISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.28% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Depcheck @kaneky/depcheckKnown vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- CVElens Vulnerability Intelligence @cvelens/cvelensCVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
- grim-mcp @abduljabbarbxr/grim-mcpSecurity audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
- Exploitwatch @edgethirteen/exploitwatchCheck a dependency list against CISA's live Known Exploited Vulnerabilities catalog.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Exploitwatch @exploitwatch-kappa/exploitwatchCheck dependencies against CISA's real Known Exploited Vulnerabilities feed.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Vulnerability Intel MCP @nexlab/vulnerability-intelDefensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
- AIS CVE Priorities — daily exploit-ranked patch list for AI agents @aislabs/cveDaily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- UpgradeLens @mattpicone/upgradelensnpm/PyPI/Django dependency upgrades: security, runtime compatibility, migration, package ranking.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- ProfitCollector @bakhour/profitcollector22 pay-per-call developer, security, network and data utilities using x402 on Base.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- MCPFax Dev Package Intelligence @mcpscores/dev-package-intelIs this dependency current, licensed, deprecated, or already carrying a CVE?19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Krabbot Devtools @marvin-odigo/krabbot-devtoolsAI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
- Dependency Trust @kaiv/dependency-trustTrust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
