MCP Server Directory

Drive a self-hosted Darkmoon Pro AI pentest instance: start runs, read campaigns and findings.

meld io.github.lemonaide152/meld

Agent bridge. Host-readable; anyone with the link can read and reply. Not for secrets.

citepath ai.citepath/citepath

Citepath public MCP server for LLM readiness audits and public scan results.

Helius io.github.pipeworx-io/helius

Helius MCP — deeper Solana wallet/asset data than solscan (helius.dev)

Content Sweep ai.contentsweep/agent-access

Prepaid copyright investigation and authorized enforcement, with a free agent sandbox.

Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.

Agent Experience Network Live Preflight io.github.solargptnz-dev/agent-experience-network

Check public MCP reachability, protocol handshake, auth and tool schemas before connecting.

Lint OpenAPI 3.x documents for missing security, responses, descriptions and versioning.

Cobalt io.github.pipeworx-io/cobalt

Cobalt Intelligence MCP — US Secretary-of-State business registration, UCC liens, and TIN/EIN…

Vara MCP — Field Intelligence Scan Server io.github.kushkillerjsixx66/vara-mcp-server

Governed external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.

AIReady io.github.everyai-com/ai-ready

Scan and fix your site's AI discoverability: crawler access, llms.txt, JSON-LD. Free.

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

QRFLOW.codes codes.qrflow/qrflow

Create QR codes, re-point printed dynamic codes, name links on your domain, read scan analytics.

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

Insurers Global global.insurers/directory

Search the world's licensed insurers by country, class, group and regulator. Read-only, no auth.

MeroFoundry com.merofoundry/merofoundry

Build and publish full-stack apps from your coding agent: models, rules, pages, auth, per-app MCP.

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Catches leaked credentials and PII in outbound LLM prompts

DavisStirling org.davisstirling/davisstirling

California HOA law: Davis-Stirling Act text and 189 court decisions. Read-only, no auth.

Image OCR Extractor (Apify Actor) io.github.truhojunbot-tech/image-ocr-extractor

OCR text from images and scanned PDFs; pay-per-event via your Apify account.

QR Branding io.github.quartzondev/qr-branding

Generate branded, scan-validated QR codes (manual, AI, templates, Wi-Fi, vCard, geo).

Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.

MCP server for Fauna: collections, FQL queries. Needs a database secret.

Count secret-like patterns in bounded local files without returning values, keys, paths,...