119,560 servers from the official registry, GitHub and npm. Filter by category, transport and language.
Protects AI agents and IDEs by detecting malicious packages, vulnerabilities, and risky CI workflows.
$claude mcp add vet -- docker run -i --rm ghcr.io/safedep/vet:v1.20.0
Queries GitHub Security Advisories from a local cloned database to identify vulnerabilities in software ecosystems.
Scans AI agent configurations, MCP servers, and tool permissions to detect hardcoded secrets, permission misconfigurations, and injection vectors.
$claude mcp add agentshield -- npx -y ecc-agentshield
Detect malicious or vulnerable npm packages through registry searches, OSV.dev lookups, and GitHub advisory checks.
$claude mcp add --transport http npmscan-mcp-plugin https://npmscan.com/api/mcp
Analyzes CI/CD pipelines to identify missing security checks and determines if existing controls effectively block builds on security findings.
$claude mcp add zanadir -- docker run -i --rm docker.io/mustachecase/zanadir:0.31.0
Performs OSINT sweeps of digital footprints including breaches, accounts, domains, and IPs using an AI security analyst.
$claude mcp add clearfront -- uvx clearfront
Provides Claude with 28 security intelligence tools to perform CVE triage, risk scoring, and threat intelligence across 24 different APIs.
Analyzes codebases to provide dependency graphs, security scanning, architecture insights, and multimodal knowledge graph ingestion for LLM agents.
$claude mcp add grasp -- npx -y grasp-mcp-server
Scores npm, PyPI, Cargo, and Go packages based on behavioral commitment signals to identify supply chain concentration risks.
$claude mcp add proof-of-commitment -- npx -y proof-of-commitmentEnforces commit-time policy checks for AI agent writes with ALLOW, DENY, or STEP_UP decisions and a tamper-evident audit log.
$claude mcp add writ -- uvx writ-mcp
Enforces policy checks for AI agent writes with ALLOW, DENY, or STEP_UP decisions and a tamper-evident audit log.
$claude mcp add writ -- uvx writ-mcp
Enables natural language security investigations using Microsoft Sentinel, Defender XDR, and threat intelligence via specialized agent skills.
Verifies AI agent claims and documentation promises by checking them against the actual codebase with evidence-based proof.
$https://github.com/EmanueleCell4/elliot-mcp/releases/download/v0.6.0/elliot-mcp-0.6.0.mcpb
Provides governance, security controls, and repository context for AI coding agents working with GitHub repositories.
$claude mcp add agentic-sdlc-mcp -- npx -y agentic-sdlc-mcp
Scores npm, PyPI, and GitHub repositories from 0 to 100 to assess maintenance health and identify potential dependency risks.
$claude mcp add pkg-health-mcp -- npx -y pkg-health-mcp
Enables AI clients to search code, packages, documentation, academic papers, and vulnerability data across multiple technical sources.
$claude mcp add codesearch -- uvx skdev-codesearch-mcp
Provides AI agents with unified vulnerability intelligence by aggregating data from NVD, EPSS, CISA KEV, GitHub Advisory, and other security sources.
$claude mcp add cve-mcp -- npx -y cve-mcp
Provides an AI agent with system administration capabilities including shell command execution and GitHub management through enterprise-grade guardrails.
$claude mcp add super -- uvx superuser
Translates lockfile diffs into human-readable upgrade plans with semver analysis, breaking changes, and security fix identification.
$claude mcp add dep-diff-mcp -- npx -y @digicatalyst/dep-diff-mcp
Tests MCP servers for security vulnerabilities, hidden instructions, leaked secrets, and specification compliance using code-based validation.
$claude mcp add qamcp-cli -- npx -y qamcp-cli