MCP Server Directory

Japan Startup Resources com.japanstartupresources/mcp

Curated Japan startup news and events this week. Read-only tools; subscriber OAuth required.

Auth Posture — Email Deliverability & Spoofability Audit app.rowb.auth-posture/audit

One-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.

Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots

Read your EyalSec security events, machines, runs and rules from an AI assistant.

Ghosty studio.ghosty/ghosty

Your Ghosty account: talk to your AI agents, review chats and work your sales board. OAuth.

AIDG Answer Feed site.chatgpt.connect675501.aidg-answer-feed/answer-feed

Validate authored product facts and export reviewed Merchant Center supplemental TSV files.

Pandy Tickets for organizers cloud.pandy/tickets-organizer

Read your events, sales, orders and attendees from your AI assistant. OAuth sign-in, read only.

AmlakIntel com.amlakintel/gulf-property

Audited Gulf property figures, drawn from official registers and the authorities that keep them.

Local MCP server for tasks and notes in any Markdown folder or Obsidian vault. No account needed.

Enpitech io.github.enpitech/enpitech

AgentReady website scans for AI agents, AI Hub search, newsletter and contact, from Enpitech.

The Remote Suite io.github.CognitiveCoreAI/the-remote-suite

Appreciate teammates, celebrate milestones, and run workspace ops from MCP clients via OAuth.

NLYRA — the risk layer of Robinhood Chain xyz.nlyra/risk-layer

Robinhood Chain risk layer: token Risk Level, contract scans, wallet x-rays, non-custodial trades

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

AI agents use your Obsidian secrets by name — values never reach their context.

DiskDrive io.github.shplep/diskdrive

User-owned files and explicit AI Memories for authorized assistants with scoped access.

Private, local search over your own files, by meaning and keywords, with secrets redacted.

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Cybret findings ai.cybret/findings

Validated API and app vulnerability findings with remediation guidance.

Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

URL scanning from urlscan.io. No key required.

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

catalogue com.securesvault/catalogue

Search 10,209 products for sale in euros and return buyable links with live prices.

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk