MCP 分类
安全
用于网络安全、认证、漏洞分析、监控、合规和安全运营的 MCP 服务器。
1156
MCP 服务器
Python Code Reviewer
org.duckdns.43-134-36-21/python-code-reviewer
Reviews Python code for vulnerabilities, bugs, performance issues, quality problems, and refactoring opportunities.
公开
x402 Counterparty Score
org.x402score/counterparty-score
Scores x402 sellers using on-chain settlement and catalog data, including wash trading, buyer activity, and trust verdicts.
公开
uratori（ウラトリ）
today.utsuroi/uratori
Researches publicly available evidence of Japanese vendors' security and privacy certifications and audit reports.
公开
token-safety
ai.tachyo/token-safety
Evaluates EVM and Solana tokens for rug-pull risk and returns a numerical safety verdict.
公开
Auth Posture — Email Deliverability & Spoofability Audit
app.rowb.auth-posture/audit
Audits an email domain's MX, SPF, DMARC, and DKIM configuration, including spoofing and disposable-address risk.
公开
cloakcheck
app.vercel.cloakcheck-wheat/cloakcheck
Scans web pages for hidden prompt-injection content in invisible text, CSS-hidden elements, and metadata attributes.
公开
exploitwatch
app.vercel.exploitwatch-kappa/exploitwatch
Checks software dependency names against CISA's Known Exploited Vulnerabilities catalog.
公开
triageshield
app.vercel.triageshield/triageshield
Verifies file paths, line references, and function claims in vulnerability reports against a GitHub repository.
公开
MacroCyber
co.macrocyber/attack-surface
Performs a passive external assessment of a public site's attack surface and reports evidence-based exposure findings and severity.
公开
blackwall-x402-guardrail
com.blackwalltier/blackwall-x402-guardrail
Evaluates x402 payment risk using counterparty reputation, price anomalies, and sanctions data, returning a GO, HOLD, or STOP verdict with a signed receipt.
公开
broker-safety
com.brokerchooser/broker-safety
Checks an investment broker by name or URL using regulatory status, verification data, scam reports, and trust indicators.
公开
Vendor Legit Check
com.dropwatchhq/legit-check
Screens vendors, stores, and group buys for reputation, red flags, and community sentiment before a purchase.
公开
phoenix-screen
com.dropwatchhq/phoenix-screen
Finds potential links between sanctioned or debarred principals and newly formed entities using name, address, and registered-agent signals.
公开
cloakcheck
com.edgethirteen.www/cloakcheck
Scans web pages for hidden or deceptive content intended to hijack AI browsing, shopping, or checkout agents.
不可用
exploitwatch
com.edgethirteen.www/exploitwatch
Checks software dependencies against CISA's Known Exploited Vulnerabilities catalog.
不可用
pumpcheck
com.edgethirteen.www/pumpcheck
Analyzes npm download patterns to identify possible download pumping and misleading dependency adoption signals.
不可用
site-audit
com.edgethirteen.www/site-audit
Crawls sampled website pages for WCAG accessibility issues and AI-agent prompt-injection risks.
不可用
triageshield
com.edgethirteen.www/triageshield
Verifies vulnerability-report file, line, and function claims against the current contents of a GitHub repository.
不可用
x402 Merchant Check
com.gradientdecisions/merchant-check
Assesses observable on-chain payment behavior for x402 merchants on Base and Solana and returns a payment trust recommendation.
公开
Regex Explainer
com.gumballtools/regex-explainer
Explains regular expressions in plain language and checks for catastrophic backtracking risks.
公开
IP99 IP risk & geolocation
com.ip99/ip99
Reports IP address risk indicators, proxy or VPN evidence, network details, and geographic attribution.
公开
verify-the-email-instantly
com.jojapi/verify-the-email-instantly
Checks email addresses for spam or authentication-related validity signals.
公开
verify
com.kenoodl/verify
Executes code in a sealed sandbox to check it against a supplied contract.
公开
MEO Preflight
com.machineeconomyobservatory/meo-preflight
Performs read-only checks comparing proposed machine payment details with dated payment history and observed service evidence.
公开
Webhook Signature Fixture Lab
com.mcpscores/webhook-signature-fixture-lab
Generates and optionally verifies test webhook HMAC-SHA256 signatures using a supplied secret and payload.
公开
OFACScreen Sanctions Screening
com.ofacscreen/screening
Screens person and company names against eight international sanctions and restricted-party lists using fuzzy matching.
公开
SSL Certificate Check
com.powmcp/ssl-certificate-check
Inspects a public host's TLS protocol support and served certificate details, including validity and hostname coverage.
公开
security-tools
com.rangercheck/security-tools
Checks publicly served website front-end code for exposed secrets, keys, and other client-side security issues.
公开
hush
com.royashbrook/hush
Provides installation and usage instructions for a secret store designed to keep secret values hidden from agents.
公开
amazon
com.seoapi/amazon
Validates whether IPv4 or IPv6 addresses belong to genuine Amazonbot or Amzn-SearchBot crawlers.
公开