MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 991 to 1020 of 1741

• The Bitcoin Adviser

  com.thebitcoinadviser/mcp

  Education-only MCP tools for Bitcoin security, retirement and fees, from The Bitcoin Adviser.

  Verified domain remotestreamable-http cryptosecurity

• The Service Marketing Guys Audit

  com.theservicemarketingguys/audit

  Read-only audit of any local service business, Open Service Profile conformance first.

  Verified domain remotestreamable-http securitymarketing

• TheLeaf Threat Observatory

  ai.theleaf.observatory/threat-observatory

  Read-only honeypot observations and evidence. Invite-only API key; request access on our website.

  Verified domain remotestreamable-http api-integrationsecurity

• ThornGuard

  app.qwady.thorns/thornguard

  Remote MCP security gateway for auth, redaction, policy enforcement, and audit logging.

  Verified domain securitymonitoring

• Threatist

  io.threatist/threatist

  Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed.

  Verified domain remotestreamable-http security

• Tier1 IT Assessment

  nz.tier1.mcp/it-assessment

  Read-only IT Health Check, domain security, recommendations, pricing, and draft enquiries.

  Verified domain remotestreamable-http healthsecurity

• Tisty

  io.github.rgdevment/tisty

  Agents plan in Markdown and work in tasks with steps, where you can follow and audit every stage.

  Community npmstdio documentssecurity

• Tkach Security

  io.github.ECD5A/tkach-security

  Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

  Community ai-modelssecurity

• Tn Dmv

  io.github.pipeworx-io/tn-dmv

  Tennessee DMV MCP — Department of Safety and Homeland Security: the 186 driver service centers…

  Community npmremotestdio security

• TokenOS Smart Contract Audit

  ai.tokenos/contract-audit

  Scan Solidity & Anchor code

  Verified domain remotestreamable-http security

• Tokenomics Audit Desk — Unlock Calendar

  io.github.yungsuper16-eng/tokenomics-unlock-calendar

  Premium via x402: $1.00 full 20-token reconstruction - tokenomics-x402.gtcclothing1.workers.dev

  Community remotestreamable-http calendarsecurity

• ToolFit + MCPCheck

  co.youraitools/toolfit

  Audit, pin and diff agent tool lists; preflight and watch remote MCP servers. Free tier; x402.

  Verified domain remotestreamable-http security

• ToolTrust Scanner

  io.github.AgentSafe-AI/tooltrust-scanner

  Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.

  Community npmstdio ai-modelssecurity

• Touchstone

  cv.touchstone/touchstone

  Bitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions.

  Verified domain npmremotestdio security

• Traceproof

  run.raised.traceproof/traceproof

  Search security findings and contribute versioned, evidence-backed reproduction reports.

  Verified domain remotestreamable-http searchsecurity

• TraderMatrix Free Gapper Scanner

  pro.tradermatrix/free

  Free, keyless pre-market and after-hours low-float gapper scanner from TraderMatrix.

  Verified domain remotestreamable-http security

• Tremelay

  io.github.CharitonMedia/tremelay

  Local MCP broker: agents call credentials through a daemon without seeing secrets.

  Community security

• Trent

  ai.trent/trent

  Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

  Verified domain remotestreamable-http security

• Trestle

  com.trestlescan/trestle

  Detects leaked secrets (API keys, tokens, private keys) in source code.

  Verified domain npmstdio api-integrationsecurity

• TridentChain Security

  io.github.DevInder1/tridentchain-security

  Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

  Community pypistdio securitydeveloper-tools

• Tripwire

  io.github.aliboIly/tripwire

  MCP for Roblox Studio and Open Cloud: drive Studio, run headless tests, and review game security.

  Community npmstdio gamingbrowsersecurity

• Tripwire

  io.github.bonesdefi/tripwire

  Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

  Community npmstdio security

• Tripwire Guard — evidence-first injection scanner

  io.github.KubaOpoczka/tripwire-guard

  Local read-only MCP scanner for known prompt-injection patterns with exact evidence and no network.

  Community npmstdio security

• Trood MCP

  io.github.TroodInc/trood-mcp

  The environment around your code: launch, secrets, domains, the systems you run, and people.

  Community npmstdio security

• TrueClicks

  com.trueclicks/trueclicks

  Audit and monitor PPC accounts: Google Ads, Microsoft Advertising, and Meta Ads.

  Verified domain remotestreamable-http marketingsecurity

• TrueNAS AIops

  io.github.AIops-tools/truenas-aiops

  Governed TrueNAS SCALE storage ops — 25 MCP tools with audit, budget, undo guards.

  Community pypistdio filessecurity

• Truss Threat Intelligence

  com.truss-security/truss-mcp

  Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

  Verified domain remotestreamable-http securityidentity

• TrustNotch

  com.trustnotch/trustnotch-mcp

  Tamper-evident audit logs for AI agents: submit, fetch, and verify cryptographic proof bundles.

  Verified domain pypistdio monitoringscrapingsecurity

• TrustScan

  io.github.entradox/trust-scan

  Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

  Community remotestreamable-http security

• TrustVision

  io.github.Evozim/trust-vision

  C2PA standard visual authenticity scanner and metadata auditor.

  Community remotesse security

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.