MCP server directory
53,114 MCP servers that connect AI assistants to tools and data, from the official MCP Registry and the community lists, updated every hour.
- 16 categories
- 33,607 remote servers
- Updated every hour
Agent Revenue Networkcom.agentrevenuenetwork/agent-revenue-network
Translation, data quality, execution verification and agent utilities over MCP + x402 USDC on Base.
Go-Live Checkcom.dontdeployonfriday/golive-check
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
ENTIA Entity Verificationio.github.entia-systems-core/entity-verification
Verified business identity for AI agents: 11.3M entities, EU VAT (VIES), BORME, GLEIF. Free trial.
AnyHooknet.anyhook/anyhook
A webhook inbox for agents: one call returns a live URL. Mock, verify, inspect and replay.
EyalSecio.github.EyalSec/eyalsec-mcp
Read your EyalSec security events, machines, runs and rules from an AI assistant.
Preflightcom.allthepossibles/preflight
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Re-Agents MCPai.re-agents/mcp
Re-Agents.ai tools for AI agents: website audits and your approved company knowledge.
LoginLlamaio.github.joshghent/loginllama
Ask questions about your login security data: risk scores, blocked logins, Tor, VPN and bot traffic.
Aetheryaai.aetherya/mcp
Test decisions on a synthetic audience: studies, site audits, copy tests and post simulations.
GenPark Streaming NDJSON & JSONL Schema Validatorio.github.alphaparkinc/genpark-streaming-ndjson-jsonl-schema-validator-skill
Ultra-low-latency incremental line validator with chunk boundary reassembly and schema auditing
GenPark Prompt Injection Canary Leak Sentinelio.github.alphaparkinc/genpark-prompt-injection-canary-leak-sentinel-skill
HMAC-signed zero-width invisible canary token generator and output response leak auditor
zipnative MCP — ZIP creation, inspection, secure extraction & verificationio.github.Nizoka/zipnative-mcp
ZIP MCP server: create, inspect, verify, extract, canonicalize, merge, modify. 15 tools
Suprsonicio.github.O-mega-Enterprise/suprsonic-mcp
One API key, dozens of capabilities for your AI agent. Zero provider auth.
MCP Security Guardio.github.petrovicistefan/mcp-security-guard
Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).
Lanmao Free AI Creditsai.lanmao/free-ai-credits
Hand-verified free AI credits, API trials and free tiers. Read-only, no auth, updated daily.
spintax.net MCP servernet.spintax/mcp
Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth.
ShopSafe URL verificationau.com.shopsafe/verify
URL risk evidence with scoped OAuth/API keys, capped prepaid costs and up to ten URLs per batch.
rostrumio.github.girishkvs/rostrum
Clean up talk recordings: find redos, retakes and dead air, review every cut, render and verify.
verify-proofio.github.csolomon0704-prog/verify-proof
Verify timestamp proofs offline, anchor hashes through ProofLedger, keep agent run receipts.
chunk-invarianceio.github.ninadphalak/chunk-invariance
Checks whether your streaming redactor leaks a secret split across chunks; writes a pytest for it.
Grideōs Factscom.grideos/facts
Read-only facts about Grideōs from its signed, hash-chained ledger. Verify before you cite.
Own Your Mind DeAI assessmentsai.ownyourmind/oym-substrate
Signed, independent scores and claim checks for decentralised AI projects. Read-only, no auth.
GenPark Complex Financial Formula Audit Validatorio.github.alphaparkinc/genpark-complex-financial-formula-audit-validator-skill
Arithmetic consistency checks and cross-footing validation for financial statements
Diogenes Autonomous Microservice Gatewayio.github.stand-out-of-my-sun/diogenes-gateway
Autonomous AI microservices: 55 dynamic guardrails, contract audits & oracles via L402/x402/MPP.
passmcpcom.sebastienrousseau/passmcp-server
Evaluate an MCP server with passmcp and verify its attestations, from inside the agent. Read-only.
Vaara MCP Serverio.github.vaaraio/vaara-server
Accountable autonomy MCP server: gating, tamper-evident audit for every action
Vaaraio.github.vaaraio/vaara
Accountable autonomy proxy: gating, tamper-evident audit, time anchor for every action
opsgateio.github.polymatx/opsgate
The safety gate between AI agents and your servers: typed, policy-checked, audited ops tools.
Auditon security assessmentsco.auditon/assessments
Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.
Security Headersio.github.basitalisandhu/mcp-security-headers
Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
OSV Advisoriesio.github.basitalisandhu/mcp-osv-advisories
Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
JWT Toolsio.github.basitalisandhu/mcp-jwt-tools
Decode JWTs without verifying, flag risky algorithms and claims, verify HS256 or RS256 with a key.
STEADYWRK Agentic Readiness Probe, Store Guard and Dispatchapp.steadywrk/mcp-dispatch
Keyless storefront readiness probe linking a Store Guard audit, plus dispatch estimates and quotes.
Landfallio.github.landfall-audit/landfall
Website intelligence for AI agents: landing page audits, business contact details, tracking checks.
Tytoncom.usetyton/tyton
Audit and set up Meta Pixel and the Conversions API from your AI agent.
MCP Auditgithub.com/P4ST4S/mcp-audit
Transparent proxy that intercepts, signs, rate-limits, redacts and audits MCP tool calls without modifying client or server.
hushio.github.omarei-omoto/hush
Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.
Server and secret guardrailscom.testedtemplates/ops-guardrails
Local checks for sudo, systemd, sshd, ufw, and secret leaks before an agent applies them.
OSV Dependency Vulnerability Checkio.github.fairquery/osv-dependency-vulnerability-check
Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
Tenantback CAM Auditcom.tenantback/cam-audit
Audit a landlord's CAM reconciliation against the lease. Finds overcharges with clause citations.
VerifiMind PEAS - RefleXion Trinityio.github.creator35lwb-web/verifimind-genesis
X-Z-CS AI validation with auditable reasoning. 8 active tools; 5 in maintenance. v0.5.66
Sec Nportio.github.pipeworx-io/sec-nport
SEC Form N-PORT — fund and ETF holdings, asked security-first.
POPCORN Witness Verifierio.github.violetclaire/popcorn-tain-verifier
MCP server for verifying receipts: POPCORN-WITNESS/2.0 signature, digest, and time. Free, read only.
Guaritaio.github.pitroldev/guarita
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
VMware NSX Securityio.github.vmware-skills/vmware-nsx-security
VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.
Contact Verify (verify-x402)dev.workers.okwithit9.verify-x402/contact-verify
Contact Verify (verify-x402). Basic $0.002, domain $0.02, sender $0.025.
Model Finderco.indigloo/model-finder
Find the cheapest AI model that passes your tests: audit repo models, build evals, routing, sizing
Sn1per MCP Server: pentest, recon and attack surface scanningio.github.1N3/sn1per-mcp
Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data. Last synced Oct 27, 2026.
Frequently asked questions
What is MCP?
The Model Context Protocol is an open standard that lets an AI assistant (Claude, ChatGPT, Cursor, an agent) call outside tools and read outside data through a "server". A remote server is a URL you add to your client; a local one runs on your computer from a package (npm, PyPI, Docker).
How do I add an MCP server to Claude or Cursor?
Open the server's page here and copy its configuration block into your client's MCP settings file, then restart the client. Remote servers need only the URL; local ones need Node (npx), Python (uvx) or Docker installed.
Are these servers safe?
Anyone can publish to the registry. A server can read what you give it access to and act on your behalf, so prefer servers with public source code from a publisher you recognise, and grant the smallest scope that works.