Security & Identity

DechoNet

node-man

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

AppLedger

contentasoftware

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

AU Business Identity

creatorhub121

Validate Australian ABNs and ACNs, and verify ABNs live against the Australian Business Register.

OpsecForge

cyberdroid2077

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Airlock RLS

mateuszingano

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

kdbx

yarrasys

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

io.github.corpussanctum/atlas-mcp

corpussanctum

Pre-action authorization for AI agents: permit, deny or escalate against a signed delegation chain.

Aegis Security Skills

drupadsachania

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

VulnCheck

vulncheck-oss

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

MCP Dataverse

codeurali

Microsoft Dataverse MCP server: CRUD, FetchXML, metadata, schema, audit, batch and security roles.

ShieldFive

shieldfive

Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

MailSenpai

mailsenpai

MailSenpai: lists, campaigns, DNS & spam checks (74 tools, OAuth, EU). SMTP Senpai: SMTP & API.

io.github.w0h1v/otx

w0h1v

MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.

Slimlytics

djedi

Privacy-first cookieless web analytics with agent one-prompt setup via remote MCP OAuth.

io.github.Creed-Space/mettle-mcp

Creed-Space

Experimental reverse CAPTCHA with signed badges and credentials. Not proof of identity or substrate.

io.github.lemonaide152/meld

lemonaide152

Agent bridge. Host-readable; anyone with the link can read and reply. Not for secrets.

io.github.Synter-Media-AI/synter-ads

Synter-Media-AI

Run ads across 16 ad platforms from any MCP client. Hosted OAuth at mcp.synterai.com.

AegisGate MCP

aegisgatesecurity

Secure MCP server framework with 23 security layers and ML threat detection. Zero deps.

VirusTotal

VirusTotal

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.