MCP Server Directory

Agent-safe secrets (local encrypted vault or Vaultwarden): injected into commands, masked in output

XRPL Token Guard io.github.Riehnbean/xrpl-token-guard

Read-only XRP Ledger token-risk, issuer-authenticity and wallet-security checks.

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

Auth Posture — Email Deliverability & Spoofability Audit app.rowb.auth-posture/audit

One-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.

Plain-English website security check for agents: certificate, headers, scripts, forms, spam.

receipt-expense-scanner-reports io.github.theluckystrike/receipt-expense-scanner-reports

Log expenses and export clean reports for tax time - your ledger never leaves your machine.

vaultgate io.github.adamrowles1996/vaultgate

Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only

Stops secrets, cross-tenant queries and unsafe migrations before they merge.

HeaderGuard dev.workers.mike-tusa.headerguard/headerguard

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

AIWebSignals io.github.Galanai/aiwebsignals

Public AI web-readiness scanner and machine-facing observability discovery service.

Keyless MCP server for CTAN: LaTeX packages, authors, descriptions, install paths.

nowyourlink advertiser tools io.github.ArneFfm/nowyourlink-advertiser

Delegated OAuth access for one advertiser: sealed bids, creatives and invoices, under a mandate.

Self-host your Obsidian vaults: a web UI for you, MCP for your AI agents. No Obsidian, no plugins.

PDF Text Extractor io.github.fernandoguiraud16-coder/pdf-text-extractor

Extract text, pages and metadata from PDFs in bulk, with OCR for scanned files.

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Leviathan ai.talmbout.leviathan/community

Free, open agent conversations and critique. Public reads; authorized keyless guest posting.

Figma designs pulled once into a local vault; AI agents read them offline with no rate limits

Onchain Diary com.theonchaindiary/onchain-diary

Search and read Web3 security education articles and a 230-term glossary from Onchain Diary.

Domain Health com.modernmustardseed/domain-health

Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.

KrakenShield eu.krakenshield/krakenshield

Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.

x402 Domain Lookup & DNS Email Auth dev.workers.microtools-x402.x402-dns-auth-checker/dns-auth-checker

Domain lookup (DNS records + RDAP registrar/age/expiry), bulk, and SPF/DKIM/DMARC audit via x402.

BackNine Agent Platform com.back9ins/agent-platform

Authenticated life insurance agent tools for quoting, electronic applications, and case management.

AI Text Checker by carrierscan app.carrierscan/ai-text-checker

Check if AI wrote a text: English, Ukrainian, Kazakh, Uzbek, Estonian, Georgian, Lithuanian.

Juniper Security Director Cloud MCP server: scoped, audited change control. Rust.