MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 721 to 750 of 1125

• codebase-doctor

  io.github.subhajitlucky/codebase-doctor

  Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

  Community npmstdio security

• coderegistry

  io.github.hellosg/coderegistry

  Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.

  Community remotestreamable-http security

• compliance-trestle-mcp

  io.github.oscal-compass/compliance-trestle-mcp

  An MCP server that provides tools to author OSCAL security compliance documentation

  Community pypistdio developer-toolslegalsecurity

• conduit

  io.github.bkauto3/conduit

  Headless browser with SHA-256 audit trails and Ed25519-signed proof bundles for AI agents.

  Community pypistdio browsersecurity

• contentgate

  io.github.adsandcode/contentgate

  Pre-deploy checks for content sites: keywords, translations, links, claims, page SEO/GEO audit.

  Community npmstdio security

• context-vault

  io.github.RajdeepDas43/context-vault

  Governed memory for AI agents (Paramind AI): conflict-checked writes, time-travel reads, ACL, audit.

  Community pypistdio memorysecurity

• contract-scanner

  io.github.lordbasilaiassistant-sudo/contract-scanner

  Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

  Community npmstdio security

• contract-security-scanner

  io.github.mastrophot/contract-security-scanner

  MCP smart contract scanner with NEAR-focused security context.

  Community npmstdio security

• copilot-mcp

  io.github.Apex-Foundation/copilot-mcp

  Web3 founder diligence: code audit, jurisdiction, fund matching, portfolio, scoring.

  Community npmstdio cryptosecurity

• cra-check

  io.github.holistis/cra-check

  Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.

  Community remotestreamable-http gitsecurity

• crawlinx-mcp

  io.github.im-ff/crawlinx-mcp

  Free technical-SEO audit MCP: crawl a site, run checks, return an LLM-ready shareable report.

  Community remotestreamable-http scrapingsecurity

• create-starter

  io.github.starter-series/create-starter

  Scaffold Starter Series projects and check release, deployment, security, and agent instructions.

  Community npmstdio devopssecurity

• crowdsentinel-mcp-server

  io.github.thomasxm/crowdsentinel-mcp-server

  AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

  Community pypistdio monitoringsecurity

• cuba-memorys

  io.github.LeandroPG19/cuba-memorys

  Persistent memory MCP server. 28 tools, BM25+MMR+OOD retrieval, tamper-evident audit, code graph.

  Community npmstdio memorysecurityvector-search

• cve-cache

  io.github.weiseer/cve-cache

  Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

  Community npmstdio security

• cve-circl-mcp

  io.github.mrfentmen/cve-circl-mcp

  CVE Search: latest CVEs and vendor or product lookups from CIRCL - keyless.

  Community npmstdio searchsecurity

• cve-intel-mcp

  io.github.robertoyanguas-ops/cve-intel-mcp

  Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

  Community remotestreamable-http developer-toolssecurity

• cve-triage

  io.github.rezearcher/cve-triage

  x402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.

  Community remotestreamable-http security

• cveawg-mcp

  io.github.mrfentmen/cveawg-mcp

  CVE Services: authoritative CVE records - des MCP: real tools for real work.

  Community npmstdio security

• cyberark-mcp

  io.github.mrfentmen/cyberark-mcp

  Password breach checks and identity security audits - no API key.

  Community npmstdio api-integrationsecurity

• cybersec-toolkit

  io.github.26zl/cybersec-toolkit

  Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

  Community ocistdio security

• database-mcp-mariadb

  io.github.arifulislamat/database-mcp-mariadb

  MCP server for MariaDB. Read-only by default, row caps, timeouts, secrets never logged.

  Community npmstdio security

• database-mcp-mysql

  io.github.arifulislamat/database-mcp-mysql

  MCP server for MySQL. Read-only by default, row caps, statement timeouts, secrets never logged.

  Community npmstdio databasessecurity

• database-mcp-postgres

  io.github.arifulislamat/database-mcp-postgres

  MCP server for PostgreSQL. Read-only by default, row caps, timeouts, secrets never logged.

  Community npmstdio databasessecurity

• datahogo

  io.github.datahogo/datahogo

  Scan a project for security issues locally with the open-source Data Hogo engine.

  Community npmstdio project-managementsecurity

• db-gateway

  io.github.4hmetuyar/db-gateway

  KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

  Community npmstdio security

• db-gateway

  io.github.GuardBee/db-gateway

  KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

  Community npmstdio security

• deckprobe

  io.github.deckflow/deckprobe

  Inspect PDF, Office, and iWork documents without rendering: counts, metadata, security signals

  Community npmstdio documentssecurity

• delego

  io.github.Delego-Dev/delego

  Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

  Community pypistdio security

• delinea-mcp

  io.github.mrfentmen/delinea-mcp

  Delinea Secret Server API: secrets search and retrieval.

  Community npmstdio api-integrationsearchsecurity

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.