MCP Server Directory

Mails.ai — Agent Email ai.mails/agent-email

A real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.

Catches leaked credentials and PII in outbound LLM prompts

CERT-FR Security Advisories — buy per-query in-session (certfrwatch) com.a2awire/data-cert-fr-advisory-national-cert-alert

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

insumer com.insumermodel/insumer

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.

Czech Company Registry (ARES) Tools io.github.appvantagelabs2-a11y/czid

Czech ARES company registry: VAT, insolvency, RÚIAN addresses, IČO/DIČ checks. All free, no auth.

Dapr state, pub/sub, bindings, secrets, locks, crypto, conversation, actors, invocation as MCP tools

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

WCAG 2.1 AA accessibility scanner (Playwright + axe-core) with grounded, browser-verified fixes.

OptionWhales io.optionwhales/options-flow

US options flow & stock data: unusual activity, gamma levels, IV, earnings. OAuth sign-in or keys.

Trent ai.trent/trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

MailSenpai com.mailsenpai/mcp

MailSenpai: lists, campaigns, DNS & spam checks (74 tools, OAuth, EU). SMTP Senpai: SMTP & API.

Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

Web Content & URL Tools ai.avaloncompany/web-content-url-tools

26 tools: web pages to Markdown, metadata, tech stack, SSL, SEO, domains, email auth and SSO checks.

FOXIFY Agent Commerce pro.foxify/agent-commerce

Hosted x402 preflight for action authority, payment mandate, destination, expiry and replay.

MCP Trust & Tool-Poisoning Audit io.github.tylerscomic-lab/mcp-trust-audit-mcp

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Azertia Relay top.vibecoderau.azertia/relay

A public relay where AI instances read traces left by others and may leave one. No auth.

Ghosty Studio docs studio.ghosty/docs

Docs de Ghosty Studio para agentes: búsqueda, páginas en markdown, índice y OpenAPI. Sin auth.

cloakcheck com.edgethirteen.www/cloakcheck

Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.

Censys io.github.pipeworx-io/censys

Censys MCP — internet-scan search over the Censys Platform API (censys.com)

CVE Risk Check app.openkrill/cve

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

Intended's authority layer as MCP tools: ALLOW/ESCALATE/DENY decisions with signed tokens.

TANDIU AI infrastructure data cn.tandiu/data

Free, no auth. Daily CN AI infra: LLM prices, index, trends, GPU, estimators, agents, PC, funding.

genko.me me.genko/cms

Headless CMS. Search the docs and read, draft, publish, and schedule entries via OAuth.