Catégorie MCP
Sécurité
Serveurs MCP pour la cybersécurité, l’authentification, l’analyse des vulnérabilités, la supervision, la conformité et les opérations sécurisées.
1156
serveurs MCP
Python Code Reviewer
org.duckdns.43-134-36-21/python-code-reviewer
Reviews Python code for vulnerabilities, bugs, performance issues, quality problems, and refactoring opportunities.
Public
x402 Counterparty Score
org.x402score/counterparty-score
Scores x402 sellers using on-chain settlement and catalog data, including wash trading, buyer activity, and trust verdicts.
Public
uratori（ウラトリ）
today.utsuroi/uratori
Researches publicly available evidence of Japanese vendors' security and privacy certifications and audit reports.
Public
token-safety
ai.tachyo/token-safety
Evaluates EVM and Solana tokens for rug-pull risk and returns a numerical safety verdict.
Public
Auth Posture — Email Deliverability & Spoofability Audit
app.rowb.auth-posture/audit
Audits an email domain's MX, SPF, DMARC, and DKIM configuration, including spoofing and disposable-address risk.
Public
cloakcheck
app.vercel.cloakcheck-wheat/cloakcheck
Scans web pages for hidden prompt-injection content in invisible text, CSS-hidden elements, and metadata attributes.
Public
exploitwatch
app.vercel.exploitwatch-kappa/exploitwatch
Checks software dependency names against CISA's Known Exploited Vulnerabilities catalog.
Public
triageshield
app.vercel.triageshield/triageshield
Verifies file paths, line references, and function claims in vulnerability reports against a GitHub repository.
Public
MacroCyber
co.macrocyber/attack-surface
Performs a passive external assessment of a public site's attack surface and reports evidence-based exposure findings and severity.
Public
blackwall-x402-guardrail
com.blackwalltier/blackwall-x402-guardrail
Evaluates x402 payment risk using counterparty reputation, price anomalies, and sanctions data, returning a GO, HOLD, or STOP verdict with a signed receipt.
Public
broker-safety
com.brokerchooser/broker-safety
Checks an investment broker by name or URL using regulatory status, verification data, scam reports, and trust indicators.
Public
Vendor Legit Check
com.dropwatchhq/legit-check
Screens vendors, stores, and group buys for reputation, red flags, and community sentiment before a purchase.
Public
phoenix-screen
com.dropwatchhq/phoenix-screen
Finds potential links between sanctioned or debarred principals and newly formed entities using name, address, and registered-agent signals.
Public
cloakcheck
com.edgethirteen.www/cloakcheck
Scans web pages for hidden or deceptive content intended to hijack AI browsing, shopping, or checkout agents.
Indisponible
exploitwatch
com.edgethirteen.www/exploitwatch
Checks software dependencies against CISA's Known Exploited Vulnerabilities catalog.
Indisponible
pumpcheck
com.edgethirteen.www/pumpcheck
Analyzes npm download patterns to identify possible download pumping and misleading dependency adoption signals.
Indisponible
site-audit
com.edgethirteen.www/site-audit
Crawls sampled website pages for WCAG accessibility issues and AI-agent prompt-injection risks.
Indisponible
triageshield
com.edgethirteen.www/triageshield
Verifies vulnerability-report file, line, and function claims against the current contents of a GitHub repository.
Indisponible
x402 Merchant Check
com.gradientdecisions/merchant-check
Assesses observable on-chain payment behavior for x402 merchants on Base and Solana and returns a payment trust recommendation.
Public
Regex Explainer
com.gumballtools/regex-explainer
Explains regular expressions in plain language and checks for catastrophic backtracking risks.
Public
IP99 IP risk & geolocation
com.ip99/ip99
Reports IP address risk indicators, proxy or VPN evidence, network details, and geographic attribution.
Public
verify-the-email-instantly
com.jojapi/verify-the-email-instantly
Checks email addresses for spam or authentication-related validity signals.
Public
verify
com.kenoodl/verify
Executes code in a sealed sandbox to check it against a supplied contract.
Public
MEO Preflight
com.machineeconomyobservatory/meo-preflight
Performs read-only checks comparing proposed machine payment details with dated payment history and observed service evidence.
Public
Webhook Signature Fixture Lab
com.mcpscores/webhook-signature-fixture-lab
Generates and optionally verifies test webhook HMAC-SHA256 signatures using a supplied secret and payload.
Public
OFACScreen Sanctions Screening
com.ofacscreen/screening
Screens person and company names against eight international sanctions and restricted-party lists using fuzzy matching.
Public
SSL Certificate Check
com.powmcp/ssl-certificate-check
Inspects a public host's TLS protocol support and served certificate details, including validity and hostname coverage.
Public
security-tools
com.rangercheck/security-tools
Checks publicly served website front-end code for exposed secrets, keys, and other client-side security issues.
Public
hush
com.royashbrook/hush
Provides installation and usage instructions for a secret store designed to keep secret values hidden from agents.
Public
amazon
com.seoapi/amazon
Validates whether IPv4 or IPv6 addresses belong to genuine Amazonbot or Amzn-SearchBot crawlers.
Public