MCP server directory
59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.
Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.
Showing 151 to 180 of 616
-
Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database
com.exploit-intel/eip-mcp
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
-
FDIC BankFind Institutional Financial Health Audit
io.ceadigital/fdic-bank-health-audit
Query official FDIC BankFind institution financial health, assets, deposits, and CERT status.
-
FEDLIN Scanners
com.fedlin/fedlin-mcp-server
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
-
FET112
com.fet112/fet112
Security intelligence for AI agents monitoring Ethereum before actions.
-
FHI MCP Server Security Audit
dev.workers.fhi-llc-1118.polished-truth-c514/fhi-x402-security-tools
Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.
-
FIRST EPSS CVE Exploit Score & OSV Vulnerability Audit
io.ceadigital/epss-cve-exploit-score
Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.
-
Fallax
io.fallax/fallax
Fallax is a phishing simulation and security awareness training platform. Read your results.
-
Feldspar free repository security scan
com.project-feldspar/scan
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
-
Femtos
xyz.femtos/mcp
Hyperliquid data on HyperCore, HyperEVM, Elysium: balances, prices, trades, token security, bridges
-
FillTrust security questionnaire corpus
com.filltrust/questions
Guidance for answering vendor security questionnaires. Every result carries the page it came from.
-
Finance Ops — Application Audit — Northgate Services Group (6e0ad047)
com.a2awire/benchmark-application-audit-2026-10-01-6e0ad047
Free to compete: testnet faucet funds everything. 12 synthetic application exception cases:…
-
Finance Ops — Launch Recurring Bill Audit — Northgate Services Group (ebc0f6a3)
com.a2awire/benchmark-launch-recurring-bill-audit-2026-09-16-ebc0f6a3
Free to compete: testnet faucet funds everything. 12 synthetic launch recurring bill exception…
-
Finance Ops — Report Audit — Northgate Services Group (b9e5e630)
com.a2awire/benchmark-report-audit-2026-09-21-b9e5e630
Free to compete: testnet faucet funds everything. 12 synthetic report exception cases: duplicate…
-
FixedIn
dev.fixedin/fixedin
Actively exploited? End of life? Which version fixes it? CVE verdicts for server software.
-
Flare
dev.flarehq/security
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
-
FlawPilot
com.flawpilot/mcp
Scan websites and code for security, performance and SEO issues from your AI assistant.
-
FlightQueue
com.flightqueue/flightqueue
Airport security wait times, forecasts, FAA delays, EES border queues and baggage stats.
-
Fluxito
app.fluxito/fluxito
Hosted MCP server for marketing analytics: plan tracking, draft GTM tags, audit tags. Free in beta
-
Food Compliance Agency — R638 COA & Hygiene Audits
za.co.foodcompliance/foodcompliance-mcp
South African R638 Certificate of Acceptability (COA) food safety compliance and audit tools.
-
Framekeep Public Discovery
com.framekeep/public
Read-only discovery of Framekeep capabilities, security boundaries, and public resources.
-
Freysa Security
dev.freysa.economic-agent-369/freysa-intelligence
Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight.
-
Front Sentinel
com.frontsentinel/domain-security
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
-
Fullmakt
ai.fullmakt/fullmakt
Credential broker for AI agents: scoped, revocable API access with policy enforcement and audit.
-
Fwozen
com.fwozen/fwozen
Freeze and unfreeze merges across a GitHub organization, with an audit trail.
-
GEO Scanner
de.agundur/geo-scanner
Checks whether a website is readable and citable by AI systems (ChatGPT, Claude, Perplexity, etc.)
-
GeekWala Dependency Scanner
com.geekwala/dependency-scanner
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
-
Gentkey
com.gentkey/mcp
One MCP URL for all your connectors — scoped writes, enforced constraints, and a full audit trail.
-
GhOsT77 crypto data + security
com.onrender.ghost77-agent/ghost77
Read-only crypto tools via x402 (USDC/Base): Hyperliquid, DD, DeFi, rugs, bridges. +security reviews
-
Glossa
dev.getglossa/glossa
AI-native translation management: push translation files, translate, review and audit strings.
-
Gluo
dev.gluo/gluo
Free agent tools, no sign-in: browser flows, test inboxes, web extract, site and security scans.
Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.