MCP Server Directory

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

guide-registry guide.independence/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Portamora app.portamora/mcp

Discover atmospheric 3D worlds, read controls, and build and publish authorized environments.

Silent Directive Tools io.github.silentdirectivellc-hub/silentdirective-mcp

Free tools: 2026 API shutdown scanner, small-business website auditor, photo resale estimator.

LLM Red-Team Scanner dev.workers.manhliemcn4euwlu.llmrt-companion/llm-red-team-scanner

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

Avala io.github.avala-ai/avala

Read Physical AI datasets, projects, fleet and quality data. Requires authorized Avala access.

Darwin so.darwin/darwin

Browse the agentic web with Darwin: search, communicate, authenticate, and act through agents.

signals.edge graduation radar com.ogenalabs/signals-edge-x402

pump.fun graduation radar for trading bots and AI agents. x402 USDC per scan, no key.

Mochii work graph com.chibitek/mochii

Mochii work graph: projects, tasks, meetings. Stiki OAuth. Not Nexus memory.

SofortFax – Faxen mit KI (Login) de.sofortfax/fax-oauth

Fax from ChatGPT/Claude with OAuth sign-in: pay per fax or KI credits. DE/AT + 40 countries.

ScanSing: sheet music to MusicXML app.scansing/scansing

Sheet music (PDF, photo, scan) to MusicXML: recognise, describe, extract parts, transpose, MIDI.

AI-operated. Email authentication reader: six free tools, no key, no signup. dev.workers.rjhsignaltech.ai/spf-dmarc

AI-operated. Free SPF (RFC 7208 count), DMARC, MTA-STS, DMARC rua/ruf readers. Paid audit $29.

runtime com.formatho/runtime

Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.

Automaton Token Safety io.github.baianomarceloeduardo-jpg/automaton-token-safety-mcp

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

CVE scanning for npm/pip/cargo dependencies via OSV

Finch io.github.finchagentic/mcp

Agentic AI runtime: persistent memory, vault, autonomous agents, deep research, DeFi execution.

Manage FireKey browser profiles and browser lifecycles through an authenticated localhost API.

RAKUDA Atlas co.rakuda.atlas/atlas

Search Japanese companies, departments and hiring signals; export CSV/XLSX with authentication.

Agent Skill & Config Security Audit io.github.tylerscomic-lab/agent-skill-audit-mcp

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Apollo Invoicing io.github.404-studio/apollo-invoicing

Manage Apollo invoices and customers with entity-scoped OAuth and optional read/write access.

FlutterSDK Docs io.github.fluttersdk/ai

Search Wind UI, Magic, Dusk, Telescope and Artisan documentation. Hosted, public, no auth.

guide-registry guide.restaurantowner/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

TvojeLajky cz.tvojelajky/agent-commerce

Instagram and TikTok services: live CZK quotes, orders and customer-authorized prepaid purchases.

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.