MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 1231 to 1260 of 1741

• cra-check

  io.github.holistis/cra-check

  Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.

  Community remotestreamable-http gitsecurity

• crawlinx-mcp

  io.github.im-ff/crawlinx-mcp

  Free technical-SEO audit MCP: crawl a site, run checks, return an LLM-ready shareable report.

  Community remotestreamable-http scrapingsecurity

• create-starter

  io.github.starter-series/create-starter

  Scaffold Starter Series projects and check release, deployment, security, and agent instructions.

  Community npmstdio devopssecurity

• crowdsentinel-mcp-server

  io.github.thomasxm/crowdsentinel-mcp-server

  AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

  Community pypistdio monitoringsecurity

• cuba-memorys

  io.github.LeandroPG19/cuba-memorys

  Persistent memory MCP server. 28 tools, BM25+MMR+OOD retrieval, tamper-evident audit, code graph.

  Community npmstdio memorysecurityvector-search

• cve-cache

  io.github.weiseer/cve-cache

  Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).

  Community npmstdio security

• cve-circl-mcp

  io.github.mrfentmen/cve-circl-mcp

  CVE Search: latest CVEs and vendor or product lookups from CIRCL - keyless.

  Community npmstdio searchsecurity

• cve-intel-mcp

  io.github.robertoyanguas-ops/cve-intel-mcp

  Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

  Community remotestreamable-http developer-toolssecurity

• cve-intelligence

  com.cve-security/cve-intelligence

  CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

  Verified domain remotestreamable-http security

• cve-triage

  io.github.rezearcher/cve-triage

  x402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.

  Community remotestreamable-http security

• cveawg-mcp

  io.github.mrfentmen/cveawg-mcp

  CVE Services: authoritative CVE records - des MCP: real tools for real work.

  Community npmstdio security

• cyberark-mcp

  io.github.mrfentmen/cyberark-mcp

  Password breach checks and identity security audits - no API key.

  Community npmstdio api-integrationsecurity

• cybersec-toolkit

  io.github.26zl/cybersec-toolkit

  Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

  Community ocistdio security

• cybershield

  io.tooloracle/cybershield

  CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

  Verified domain remotestreamable-http security

• database-mcp-mariadb

  io.github.arifulislamat/database-mcp-mariadb

  MCP server for MariaDB. Read-only by default, row caps, timeouts, secrets never logged.

  Community npmstdio security

• database-mcp-mysql

  io.github.arifulislamat/database-mcp-mysql

  MCP server for MySQL. Read-only by default, row caps, statement timeouts, secrets never logged.

  Community npmstdio databasessecurity

• database-mcp-postgres

  io.github.arifulislamat/database-mcp-postgres

  MCP server for PostgreSQL. Read-only by default, row caps, timeouts, secrets never logged.

  Community npmstdio databasessecurity

• datahogo

  io.github.datahogo/datahogo

  Scan a project for security issues locally with the open-source Data Hogo engine.

  Community npmstdio project-managementsecurity

• datatomcp

  com.datatomcp/datatomcp

  AI-native data layer: sheets, databases and apps for every agent, with exact answers and audit.

  Verified domain remotestreamable-http securityspreadsheets

• db-gateway

  io.github.4hmetuyar/db-gateway

  KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

  Community npmstdio security

• db-gateway

  io.github.GuardBee/db-gateway

  KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

  Community npmstdio security

• deckprobe

  io.github.deckflow/deckprobe

  Inspect PDF, Office, and iWork documents without rendering: counts, metadata, security signals

  Community npmstdio documentssecurity

• decoy.day honeypot

  day.decoy/honeypot

  A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.

  Verified domain remotestreamable-http security

• delego

  io.github.Delego-Dev/delego

  Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

  Community pypistdio security

• delinea-mcp

  io.github.mrfentmen/delinea-mcp

  Delinea Secret Server API: secrets search and retrieval.

  Community npmstdio api-integrationsearchsecurity

• demipass

  com.dustforge/demipass

  Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.

  Verified domain npmstdio security

• dep

  io.github.rog0x/dep

  License check, outdated deps, security for AI agents

  Community npmstdio security

• dep-oracle

  io.github.ertugrulakben/dep-oracle

  Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis.

  Community npmstdio security

• dependency-auditor

  io.github.4hmetuyar/dependency-auditor

  CVE scanning for npm/pip/cargo dependencies via OSV

  Community npmstdio security

• dependency-auditor

  io.github.GuardBee/dependency-auditor

  CVE scanning for npm/pip/cargo dependencies via OSV

  Community npmstdio security

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.