MCP Server Directory

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Sickle — every mailbox for your agent app.sickle/mail

Gmail, Outlook, iCloud, Fastmail and any IMAP mailbox for your agent. Scoped OAuth, approved sends.

ScanForAI com.scanforai/scanforai

Score text and web pages for signs of AI writing; check images for hidden AI instructions.

Bounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.

OpenMail sh.openmail/openmail

Gmail for agents: create inboxes, read and reply to mail, send email, manage domains. OAuth sign-in.

Secrets Leak Audit io.github.tylerscomic-lab/secrets-leak-audit-mcp

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Scan Street View areas into PanoIDs and download imagery through PanoOn.

tools dev.workers.sebastiaan-ba3.mcpgateway/tools

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Sec 13f io.github.pipeworx-io/sec-13f

SEC 13F — institutional ownership, asked security-first.

Secret Santa Organizer com.secretsantaorganizer/secretsanta

Create a Secret Santa party with names, emails, a date, a place, and a budget.

Helius io.github.pipeworx-io/helius

Helius MCP — deeper Solana wallet/asset data than solscan (helius.dev)

Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS

VAREXIS-INDEX - Source-linked evidence tech.varexis/varexis-index

MCP permissions and audit evidence: free read-only discovery and previews. No advice or authority.

Site Check com.modernmustardseed/site-check

Public website health scan, AI-crawler and structured-data readiness, and a local presence score.

Draw40 io.github.Si40Code/super-excalidraw

Draw40 is an independent diagram workspace with an interactive MCP Apps canvas. OAuth sign-in.

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Spaceti Intelligence ai.spaceti/intelligence

Spaceti workplace analytics: occupancy, environment, bookings, sensors. Read-only, OAuth 2.1 login.

Local MCP server for architectural decisions, traceability, and non-authoritative proposals.

Etsy io.github.pipeworx-io/etsy

Etsy MCP — public listing search via Etsy Open API v3 (api_key auth only)

OXVO Insights com.oxvo/insights

Read-only OXVO Insights analytics: list tracked events and run queries for one app you authorize.

Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

Pay-per-call x402 tools on Base: web extract/render, burn-once secret vault, chart, GeoTIFF

Suunto API: workout history, summaries. Needs OAuth token.