MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Show All Verified domain Community Sort Stars Recent Name

Showing 1441 to 1470 of 1741

mcp-safeguard

com.cognivators/mcp-safeguard

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

Verified domain pypistdio security ai-models
mcp-scan

io.github.CodingSelim/mcp-scan

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Community npmstdio security
mcp-seatbelt

io.github.KryptosAI/mcp-seatbelt

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

Community npmstdio security
mcp-secret-scrub

io.github.sudo-ai-git/mcp-secret-scrub

Deterministic no-LLM MCP server that scrubs secrets before they reach an agent. Never leaks values.

Community pypistdio security
mcp-server

ai.marchward/mcp-server

Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

Verified domain npmstdio security
mcp-server

com.correctover/mcp-server

MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.

Verified domain npmstdio security
mcp-server

io.github.middleBrick/mcp-server

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

Community npmstdio ai-models api-integration security
mcp-server-auditor

io.github.4hmetuyar/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Community npmstdio security
mcp-server-auditor

io.github.GuardBee/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Community npmstdio security
mcp-server-security-audit

io.github.joepangallo/mcp-server-security-audit

Scan websites for security vulnerabilities, headers, TLS, and email security.

Community npmstdio security email
mcp-server-vault

io.github.AIWerk/mcp-server-vault

Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.

Community npmstdio security
mcp-shield

com.craftedtrust/mcp-shield

Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

Verified domain remotestreamable-http project-management search security
mcp-skill-sec

io.github.sudo-ai-git/mcp-skill-sec

Audit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.

Community pypistdio security
mcp-ssh-manager

io.github.bvisible/mcp-ssh-manager

SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail

Community npmstdio files health security
mcp-tenant-isolation

io.github.subodhkc/mcp-tenant-isolation

Static analysis scanner for MCP server code and multi-tenant SaaS applications.

Community npmstdio security
mcp-threatintel

io.github.aplaceforallmystuff/mcp-threatintel

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

Community npmstdio security
mcp-usage

io.github.Rixtayz/mcp-usage

Find out which MCP servers you actually use: local, read-only audit of Claude Code transcripts.

Community npmstdio ai-models security
mcp-warden

io.github.ermoluk/mcp-warden

Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.

Community npmstdio security
mcp-watchdog

io.github.bountyyfi/mcp-watchdog

MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.

Community pypistdio security
mcp-wcag-accessibility-audit

com.mambabuilt/mcp-wcag-accessibility-audit

Audit websites for WCAG issues with axe-core, plus EAA exposure signals and compliance page checks.

Verified domain npmstdio legal project-management security
mcpaudit

io.github.CloudCorpRecords/mcpaudit

Audit any MCP server: handshake, schemas, descriptions, error handling, scored.

Community npmstdio security
mcpbizapps

com.mcpbizapps/enterprise

Governed MCP gateway for business apps: roles, previews, approvals and one audit log.

Verified domain remotestreamable-http security
mcpcheck

io.github.joeyough/mcpcheck

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

Community remotestreamable-http security
mcpcheckup

io.github.fpetitit/mcpcheckup

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Community remotestreamable-http project-management security
mcpcut

io.github.RostislavMatov/mcpcut

Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

Community npmstdio security
mcpdeprecation-mcp

com.clauxel.mcpdeprecation/mcpdeprecation-mcp

Remote MCP for MCP tool deprecation receipt, structured receipts, audit logs, and reviewer-ready evi

Verified domain remotestreamable-http monitoring security
mcpm

io.github.getmcpm/cli

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

Community npmstdio ai-models developer-tools security
mcpprobe

tech.mcpprobe/scanner

Read-only MCP security data: check catalogue, public scan status and your own scan reports.

Verified domain remotestreamable-http security
mcpscopeconsent-mcp

com.clauxel.mcpscopeconsent/mcpscopeconsent-mcp

Remote MCP for MCP consent scope receipt, structured receipts, audit logs, and reviewer-ready eviden

Verified domain remotestreamable-http monitoring security
mcpsentry

io.github.Roshan6335/mcpsentry

Security scanner and runtime proxy for MCP servers.

Community npmstdio security

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.