MCP server directory
53,625 MCP servers that connect AI assistants to tools and data, from the official MCP Registry and the community lists, updated every hour.
- 16 categories
- 33,964 remote servers
- Updated every hour
VerifyAPI — fact-check with signed receiptsio.github.KyTheKitty/verifyapi
Fact-check any claim with live web sources. Ed25519-signed receipts. Catches hallucinations.
ensmcpio.github.seifreed/ensmcp
Servidor MCP para consultar el ENS y mantener declaraciones de aplicabilidad auditables.
Huskio.github.husk-security/husk
Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
INVARAio.github.Jujitae/invara
Independent verification that a change kept its declared constraints. No model in the verdict path.
Proxy-Authenticate scheme token, value discardedio.github.sadri-dridi/proxy-auth
Proxy-Authenticate scheme token, value discarded
Authentication-Info nextnonce shape, value discardedio.github.sadri-dridi/auth-info
Authentication-Info nextnonce shape, value discarded
WWW-Authenticate scheme token, value discardedio.github.sadri-dridi/www-auth
WWW-Authenticate scheme token, value discarded
Policyholder Operations — Claim Review — Quillon Indemnity Co. (4cd7d405)com.a2awire/benchmark-claim-review-2026-09-10-4cd7d405
12 synthetic claim exception cases: duplicate payouts, fraud watch list entries, missing proof of lo
Blue Cap Machine Commerceio.soundiq/bluecap-evidence-verify
Deterministic MCP utilities, validation, evidence verification, and x402 commerce on Base.
Kavalio.github.usekaval/kaval
Verify the facts an agent's action depends on before it acts — ALLOW, REVIEW, or BLOCK.
Debian Security Advisories — buy per-query in-session (debianwatch)com.a2awire/data-debian-security-advisory-dsa-linux
Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.
OpenCode MCP Bridgeio.github.ManuOtel/opencode-mcp-bridge
Coordinate and verify OpenCode workers over MCP Streamable HTTP.
Kashifcom.kashifaudit/audit
Scores a website's online presence 0-100 and lists the top issues to fix. English/Arabic.
Licence audit, page read and endpoint check (AI-operated)dev.workers.rjhsignaltech.ai/licence-audit
AI-operated. Free previews: licences, page reads, endpoint checks. Paid full versions over x402.
Licence audit, page read and endpoint check - paid over x402 (AI-operated)dev.workers.rjhsignaltech.ai/licence-audit-paid
AI-operated. All tools paid: an unpaid tools/call answers HTTP 402 with x402 terms, USDC on Base.
Business Verify APIcom.gensparkclaw.mbiyepyh/business-verify
Verify a US business exists and is active by name + state. Status, formation date, agent.
ScanScam Integrityio.github.Gabothefounder/scanscam-integrity
Independent agent preflight: verify change, mandates, evidence, and exact execution.
Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch)com.a2awire/data-windows-security-update-microsoft-cvrf
MSRC Windows updates: CVE rollups, Patch Tuesday. Register in-session — free testnet funds.
Ubuntu Security Notices / USN (usnwatch) — buy per-query in-sessioncom.a2awire/data-ubuntu-security-linux-vulnerability
Ubuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.
Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)com.a2awire/data-rust-security-crate-vulnerability
Rust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.
Dependency Vulnerability Tracker — package security advisories ($0.01/query)com.a2awire/data-dependency-vulnerability-malicious-package-security
Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
CISA Known Exploited Vulnerabilities (kevwatch)com.a2awire/data-cisa-known-exploited-vulnerability-catalog
CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.
CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)com.a2awire/data-cisa-advisory-ics-security-alert
CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.
Vendor Clearance Auditcom.a2awire/benchmark-vendor-clearance-audit-v1
Free to compete: testnet faucet funds everything. Audit supplier rollout readiness.
Catch the Overpaymentcom.a2awire/benchmark-catch-the-overpayment-v1
Free to compete: testnet faucet funds everything. Audit an AP queue for overpayments.
Campaign Incrementality Auditcom.a2awire/benchmark-campaign-incrementality-audit-v1
Free to compete: testnet faucet funds everything. Measure true campaign lift.
CERT-FR Security Advisories — buy per-query in-session (certfrwatch)com.a2awire/data-cert-fr-advisory-national-cert-alert
CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly
SecHelixio.github.omarmohelal/sechelix
Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.
AgenTruxcom.agentrux/agentrux
Authenticated event topics for agent-to-agent messaging with per-agent credentials and audit logs.
MCP Modal Serverio.github.george-bobby/mcp-modal
MCP server for managing Modal apps, containers, volumes, and secrets.
LiquiLens Evidence Carrierio.github.beepboop2025/liquilens-evidence-carrier
Offline verification of local evidence carriers, fleet briefs, and hash-only trade-safety receipts.
Discord Webhook Shapeio.github.sadri-dridi/discord-webhook-shape
Check a Discord webhook URL shape. Secret discarded.
NarcoScope — illicit-economy evidence atlasio.github.beepboop2025/narcoscope
Read bounded illicit-economy evidence with provenance, privacy, availability, and federation intact.
Instilus compliance and business decision toolscom.instilus/gpsr
GPSR compliance check and small-business valuation estimate, from Instilus.
Cookie Complianceco.cookie-compliance/cookie-consent
Add a cookie consent banner that blocks trackers before consent and records proof of consent.
Bootlace AI SpendMapio.github.mtardy90-sudo/bootlace-ai-spendmap
Free-trial AI fleet spend meter. 100 calls or 14 days. No auth.
Moltline Agent Governancecom.moltlinestudio/govern
Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
Pilotex KYCclub.pilotex/kyc
KYC verification on autopilot for Bybit, MEXC and Bitget. 150 countries, pay per result.
HelpMyAgentio.github.helpmyagent/helpmyagent
Pay-per-call data APIs for AI agents: business, compliance, procurement, VAT and IBAN via x402.
AuditFellowapp.auditfellow/auditfellow
Your audit methodology inside Claude: findings, risks, controls and workpapers in your team format.
wa — safe WhatsApp automationio.github.yolo-labz/wa
Safety-first WhatsApp tools: draft-gated sends, enforced rate limits, append-only audit.
ideauditstudio.inite/ideaudit-tools
The scoring behind an audit allowed to say no. Twenty deterministic tools, offline, no account.
WOCLUB Cube Playgroundclub.worldorder/cube-playground
Shared voxel world for AI agents. Extend First Light at the world centre over HTTP or MCP; no auth.
StackShieldio.stackshield/stackshield
External security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.
pinnodds — Pinnacle oddscom.pinnodds/odds
Pinnacle live and prematch odds, odds drops and account usage. Auth: pinnodds API key as Bearer.
TrustScanio.github.entradox/trust-scan
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Compliance Checkdev.hatchloop/compliance-check
Preview a TCPA/GDPR/CASL/10DLC gate result before spending a paid send. No key needed.
Verify a Companydev.hatchloop/company-verification
Verify a company on GLEIF LEI and SEC EDGAR, screen sanctions. No key; quota-free data.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data. Last synced Oct 28, 2026.
Frequently asked questions
What is MCP?
The Model Context Protocol is an open standard that lets an AI assistant (Claude, ChatGPT, Cursor, an agent) call outside tools and read outside data through a "server". A remote server is a URL you add to your client; a local one runs on your computer from a package (npm, PyPI, Docker).
How do I add an MCP server to Claude or Cursor?
Open the server's page here and copy its configuration block into your client's MCP settings file, then restart the client. Remote servers need only the URL; local ones need Node (npx), Python (uvx) or Docker installed.
Are these servers safe?
Anyone can publish to the registry. A server can read what you give it access to and act on your behalf, so prefer servers with public source code from a publisher you recognise, and grant the smallest scope that works.