MCP Server Directory

Scans files for leaked secrets and API keys

Etsy io.github.pipeworx-io/etsy

Etsy MCP — public listing search via Etsy Open API v3 (api_key auth only)

PII & Secret Redactor io.github.tylerscomic-lab/pii-redactor-mcp

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

CUBBY HOUSE — AU Mattress Commerce for Agents io.github.GIT-access-ntwx/cubby-house

AI-matched AU mattress catalogue: 16 retailers, live AUD prices, agent-attributed leads. No auth.

AlphaProve io.github.Bogzx/alphaprove

Backtest trading ideas and inspect strategies, trades and results. OAuth; invite-only beta.

Secrets Leak Audit io.github.tylerscomic-lab/secrets-leak-audit-mcp

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Sfda Drugs io.github.pipeworx-io/sfda-drugs

SFDA Drugs — Saudi Food and Drug Authority drug data

Scan Street View areas into PanoIDs and download imagery through PanoOn.

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

QR Branding io.github.quartzondev/qr-branding

Generate branded, scan-validated QR codes (manual, AI, templates, Wi-Fi, vCard, geo).

OpenMail sh.openmail/openmail

Gmail for agents: create inboxes, read and reply to mail, send email, manage domains. OAuth sign-in.

ScanForAI com.scanforai/scanforai

Score text and web pages for signs of AI writing; check images for hidden AI instructions.

Colorado SOS Business Entity & Registered Agent Search io.github.TheCompanyAtlas/colorado-sos

Colorado Secretary of State business entity search with status and registered agent lookup.

Bounded, read-oriented filesystem, git and named-task tools over authorized workspace roots.

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

DnsGuard dev.workers.mike-tusa.dnsguard/dnsguard

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

Every GuardBee MCP security tool in one server: OWASP MCP Top 10, secrets, supply chain, TLS/DNS

Spaceti Intelligence ai.spaceti/intelligence

Spaceti workplace analytics: occupancy, environment, bookings, sensors. Read-only, OAuth 2.1 login.

Suunto API: workout history, summaries. Needs OAuth token.

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

Kinjay health records com.kinjay/mcp

Household health records with source attribution. Read and add records with OAuth approval.

tools dev.workers.sebastiaan-ba3.mcpgateway/tools

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.