MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 1261 to 1290 of 1741

• dependency-management-mcp-server

  com.sonatype/dependency-management-mcp-server

  Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

  Verified domain remotestreamable-http security

• depwire

  io.github.atef-ataya/depwire

  Dependency graph + 24 MCP tools. Impact analysis, simulation, security, agent coordination

  Community npmstdio security

• detectzestack-mcp

  io.github.mlugo-apx/detectzestack-mcp

  Detect any website's tech stack, security headers, SSL, DNS and CVEs via DetectZeStack.

  Community npmstdio security

• dingdawg-code-review

  io.github.dingdawg/dingdawg-code-review

  AI code review — security, quality, performance. Learns your patterns. Receipted.

  Community npmstdio security

• dingdawg-devops-agent

  io.github.dingdawg/dingdawg-devops-agent

  DevOps AI. Deploy checks, incident analysis, infra audit. Learns from past failures.

  Community npmstdio devopsmonitoringsecurity

• dingdawg-finance-agent

  io.github.DingDawg-dev/dingdawg-finance-agent

  Financial analysis AI. Forecasting, audit prep, SOX/GAAP compliance. Accuracy compounds with use.

  Community npmstdio financelegalsecurity

• dingdawg-finance-agent

  io.github.dingdawg/dingdawg-finance-agent

  Financial analysis AI. Forecasting, audit prep, SOX/GAAP compliance. Accuracy compounds with use.

  Community npmstdio financelegalsecurity

• dingdawg-governance

  io.github.dingdawg/dingdawg-governance

  Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.

  Community npmstdio security

• dingdawg-shield

  io.github.dingdawg/dingdawg-shield

  AI security scanning and trust scoring. Stack-specific threat models. Free local scan.

  Community npmstdio security

• directory

  com.grcmigrate/directory

  Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

  Verified domain remotestreamable-http legalsearchsecurity

• disclosure-compiler

  io.github.jdhart81/disclosure-compiler

  Deterministic cited disclosure drafts with verified GHG lineage and audit hashes.

  Community remotestreamable-http security

• dnstwister-mcp

  io.github.mrfentmen/dnstwister-mcp

  DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.

  Community npmstdio security

• dockertag

  io.github.CloudCorpRecords/dockertag

  Audit image tags and OCI labels: pinning, lowercase repos, and the MCP server-name label.

  Community npmstdio imagesecurity

• domain-intel

  io.github.erikirby/domain-intel

  Website intelligence for AI agents: tech stack, hosting, security posture, SEO, and DNS.

  Community npmstdio marketingsecurity

• domain-intelligence

  io.github.DataLeadsPRO/domain-intelligence

  Domain overviews for security and sales: registration, infrastructure, and risk signals.

  Community remotestreamable-http crmdevopssecurity

• domain-osint-mcp

  io.github.robertoyanguas-ops/domain-osint-mcp

  Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.

  Community remotestreamable-http api-integrationsecurity

• domainintel-mcp

  io.github.Bishop81/domainintel-mcp

  Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

  Community npmstdio security

• doppler-mcp

  io.github.mrfentmen/doppler-mcp

  Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

  Community npmstdio api-integrationcryptosecurity

• draco

  com.thetempleofdoom.draco/draco

  Coding & security oracle grounded in 1855 real books. Cited answers via MCP.

  Verified domain remotestreamable-http security

• dvalincode

  io.github.arthurpanhku/dvalincode

  Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

  Community npmstdio ai-modelsapi-integrationsecurity

• eContract

  online.econtract/mcp

  Send contracts for e-signature, track signing, get signed PDFs and audit trails, verify any PDF.

  Verified domain remotestreamable-http documentssecurity

• ecoa

  dev.ecoa/ecoa

  Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

  Verified domain remotestreamable-http security

• eds-mcp-server

  io.github.focusgts/eds-mcp-server

  41 tools for Adobe Edge Delivery Services: read, audit, track, monitor, fix, publish, undo — safely.

  Community npmstdio security

• eidolon

  io.github.sudohnim/eidolon

  Privacy-first OSINT scanner: breaches, credentials, Shodan, username sweep. Scored PDF report.

  Community documentssecurity

• elicitation-auditor

  io.github.4hmetuyar/elicitation-auditor

  MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

  Community npmstdio security

• elicitation-auditor

  io.github.GuardBee/elicitation-auditor

  MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

  Community npmstdio security

• emisar

  dev.emisar/emisar

  Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.

  Verified domain remotestreamable-http security

• enigmagent-mcp

  io.github.Agnuxo1/enigmagent-mcp

  Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.

  Community npmstdio api-integrationsecurity

• enterprise-mcp-gateway

  io.github.BenjaminJ/enterprise-mcp-gateway

  Production-grade MCP Gateway in Go with RBAC, in-flight PII redaction, and audit logging.

  Community monitoringsecurity

• envcp

  dev.fentz.envcp/envcp

  Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

  Verified domain npmstdio security

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.