MCP Server Directory

Find every leaked secret on your machine — API keys in .env files, shell history, and configs.

Worldbank io.github.pipeworx-io/worldbank

World Bank MCP — wraps the World Bank Data API v2 (free, no auth)

pixelvault io.github.pixelvault-dev/pixelvault

Image infrastructure for agents. Upload, transform, and deliver images through MCP, CLI, or API.

Author, ROM-validate, and render 3D human movement (.posecode) with a shareable playground link.

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

sentrysurface io.github.sentrysurface/sentrysurface

Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.

PostgreSQL MCP server for schema, query, health, security, and performance analysis.

Extract structured, schema-validated data from PDFs, scans, images, spreadsheets, and forms.

Motiv Fleet io.github.vilogy/mcp-fleet

DeFi MCP fleet: oracle, security audit, treasury yield, QA attestation, and compute tools on Base.

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

Git-native project memory for AI coding agents: Markdown source of truth, reviewable, secret-safe.

Two-layer memory MCP server for AI agents with 37 tools, RAG, graphs, wiki, auth

Minimal MCP server for downloading Gmail attachments to disk. Read-only OAuth by default.

heron io.heronapp/heron

Signed security scores for what an AI agent runs and reads: skills, MCP servers, prompts, tokens.

Trust scoring for MCP servers, AI skills & npm packages — 15 signals + safety scanning.

Architecture intelligence, security analysis, and living docs. 15 tools, Mermaid output.

Philidor DeFi Vault Risk Analytics io.philidor/defi-vaults

Search 700+ DeFi vaults, compare risk scores, analyze protocols. No API key needed.

Shopify MCP server with real analytics (ShopifyQL), auto-refresh auth, and Shopify API 2026-04.

MCP conformance test harness. JSON-RPC, OAuth 2.1 PKCE, schemas, smoke, annotations. CLI + lib.

drwho.me network and developer tools me.drwho/tools

29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

Sputnik X — AI-Agent-Native Intelligence xyz.sputnikx/market

Sputnik X: 16 free MCP tools and EU Trade via authenticated REST and x402.

Bright Security com.brightsec/mcp

Enables AI agents to access Bright Security tools for app discovery and security testing.