MCP Server Directory

patch-tuesday io.github.jonnybottles/patch-tuesday

Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

An MCP server that provides access to FedRAMP 20x security requirements and controls.

Security-first web access for Claude. Sanitizes pages, blocks injection, redacts PII.

Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging.

Docu-Scan MCP com.spocont/docu-scan

PDF and document extraction via Google Document AI. Free trial available.

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Scan website legal docs for missing or stale compliance clauses. Rule-based, no LLM.

nexus-mcp io.github.nexus-api-lab/nexus-mcp

Japanese LLM security — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free.

agentlock io.github.Olum289/agentlock

Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.

Moved to com.dechonet/mcp. 25 security tools, hosted at https://dechonet.com/mcp

TomeVault io.github.olijboyd/tomevault

Check AI instruction files, look up a company's record, and keep a dated record of your own.

An MCP server that provides tools to author OSCAL security compliance documentation

Authority-weighted memory graph for AI agents with conflict detection and semantic search.

Alienvault Otx io.github.pipeworx-io/alienvault-otx

AlienVault OTX MCP — Open Threat Exchange (free with key)

ArchGraph dev.archgraph/mcp

Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.

Confluence io.github.pipeworx-io/confluence

Confluence MCP — wraps the Confluence Cloud REST API v2 (OAuth)

Governs what AI agents do: tool calls, SQL, commands, files checked against policy before they run.

MCP Kill-Chain Research — Stage 1 (Identity ≠ Behavior) dev.gtfo/mcp-killchain-stage1-weather

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Deezer io.github.pipeworx-io/deezer

Deezer MCP — public catalog (no auth required).

Native Soil dev.nativesoil/soil

Save an AI chat's working state, load it in any other model or provider. Verified, secret-safe.

Epa Echo io.github.pipeworx-io/epa-echo

EPA ECHO MCP — wraps EPA ECHO Web Services (free, no auth)

Faa Delays io.github.pipeworx-io/faa-delays

FAA Delays MCP — live US airport operational status (FAA, free, no auth).

Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.