MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 91 to 120 of 1125

• Backtest Overfitting Audit

  io.github.tylerscomic-lab/overfitting-audit-mcp

  Probability of Backtest Overfitting (CSCV), Deflated Sharpe Ratio, and purged CV splits.

  Community remotestreamable-http security

• BailingHub for Business Operations

  io.github.bailinghub/bailinghub-governance

  Let AI agents query and operate business systems with authorization, approval and audit trails.

  Community npmstdio security

• Barcode Scanner

  io.github.domdomegg/barcode-scanner-mcp

  Scan and generate barcodes and QR codes.

  Community npmstdio security

• Barzel FinOps Atlas

  io.github.Realbizdigital/barzel-finops-atlas

  AI agent cost control: true cost per outcome, budgets, spend limits, anomalies, audit evidence.

  Community remotestreamable-http security

• Batcave Detective Basic

  io.github.Bjorn2-sol/batcave-detective

  Evidence-bound second-opinion audit of an agent conclusion against caller-supplied evidence.

  Community remotestreamable-http security

• Bawbel Scanner

  io.github.bawbel/bawbel-mcp

  Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

  Community pypistdio securityfiles

• Bawbel Scanner

  io.github.bawbel/bawbel-scanner

  Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

  Community pypistdio securityfiles

• Bawbel Scanner

  io.github.bawbel/scanner

  Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

  Community pypistdio securityfiles

• Bellator Schedule Intelligence

  io.github.Bellator-Schedule-Intelligence/schedule-intelligence

  Schedule health, logic audit, and validation.

  Community remotestreamable-http automationhealthsecurity

• BenchFleet

  io.github.jimbob1414/benchfleet

  Let AI agents use your real Android phones safely, with permissions, approvals and an audit log.

  Community npmstdio security

• BentCrypto Machine Payments

  io.github.ghstaking/bentcrypto-machine-payments

  Paid token risk and security intelligence for AI agents over MCP with x402 payments.

  Community remotestreamable-http paymentscryptosecurity

• Betterleaks Cloud - GitHub & S3 Secret Scanner

  io.github.AnshumanAtrey/betterleaks-cloud

  Betterleaks Cloud - GitHub Secret Scanner + Validator

  Community gitsecurityfiles

• Bitwarden Public API and Secrets Manager (unofficial)

  io.github.mguttmann/the-real-bitwarden-mcp

  Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

  Community npmstdio api-integrationsecurity

• BlackDome Threat Intel

  io.github.blackdome-ai/blackdome

  Live honeypot threat intel: attacker IPs, IOCs, credentials, payloads, actors.

  Community pypistdio security

• BlackDome Threat Intel

  io.github.blackdome-ai/blackdome-mcp

  Honeypot threat intel: IOCs, sample comparisons, evidence clusters and ThreatDrop case status.

  Community pypistdio security

• Blumira

  io.github.WYRE-AI/blumira-mcp

  MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

  Community ocistdio api-integrationsecurity

• Blumira

  io.github.wyre-technology/blumira-mcp

  MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

  Community ocistdio api-integrationsecurity

• Bomly

  io.github.bomly-dev/bomly-cli

  Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit

  Community npmstdio security

• Bounty Operator

  io.github.bountyoperator/bounty-operator

  Argues against a security finding or a draft bug bounty report before you submit it.

  Community remotestreamable-http security

• Brain Scanner

  io.github.kevin-lozada-santos/brain-scanner

  Recover project context, review recorded decisions, and steer queued work across AI coding agents.

  Community remotestreamable-http security

• Brazil Tax Reform IBS/CBS, CNPJ QSA, BCB PTAX & Pix KYB

  io.github.jesleytassili-glitch/brazil-tax-cnpj-pncp-mcp

  Audit Brazil LC 214 NCM tax reform, CNPJ QSA partners, BCB PTAX/Selic, Pix ISPB, TISS XML & ANTT.

  Community security

• Bright Security

  io.github.NeuraLegion/mcp

  AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

  Community remotesse securitytesting

• Bug Bounty Intelligence

  io.github.holistis/bug-bounty-intelligence-mcp

  AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

  Community remotestreamable-http securitydata-analytics

• Bug Detector

  io.github.madhavi-opsera/bug-detector

  Analyzes code for bugs, security vulnerabilities, and code smells

  Community ocistdio security

• Bulwark

  io.github.bpolania/bulwark

  AI agent governance: content scanning, audit logs, policy evaluation, session management.

  Community ocistdio monitoringsecurity

• Burs-IA Tools

  io.github.soyeladice-svg/bursia-tools

  Free read-only tools for agents: agent-readiness audit, TLS/DNS/header checks, MCP search, utils.

  Community remotestreamable-http searchsecurity

• Business Site Audit

  io.github.mthburnsbarber-web/business-site-audit

  Audit a business website for observed crawl and indexing issues with source-linked fixes.

  Community remotestreamable-http securityproject-managementscraping

• CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon

  io.github.jesleytassili-glitch/cybersecurity-cve-ssl-mcp

  Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.

  Community securitymonitoring

• COLA Insight

  io.github.ge3m0r/cola-insight

  Read-only Social Security COLA data, calculations, history, and official source links.

  Community remotestreamable-http securitysocial-media

• CVE Exploit Priority (CISA KEV + EPSS)

  io.github.brunckel/cve-exploit-priority

  CISA KEV status and EPSS scores for CVE IDs, ranked P1/P2/P3 for patching, via Apify.

  Community securityscraping

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.