MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 1561 to 1590 of 1741

• raven-nest-mcp

  io.github.tidynest/raven-nest-mcp

  AI-driven penetration testing - 22 security tools behind safety-hardened MCP endpoints

  Community ocistdio securitytesting

• readme-canary

  io.github.brkd-h1/readme-canary

  Security research canary remote MCP server for owned-account testing.

  Community remotestreamable-http sciencesecuritytesting

• recon-kit-mcp

  io.github.nan786521/recon-kit-mcp

  Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

  Community pypistdio security

• regulatory-signals

  io.github.rikocr8orh8/regulatory-signals

  Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.

  Community npmstdio securityai-modelsgit

• release-gate

  io.github.VamsiSudhakaran1/release-gate

  Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

  Community pypistdio security

• repoward

  io.github.Sanoy24/repoward

  GitHub MCP server that blocks private-to-public leaks by agents, with approvals and audit.

  Community pypistdio gitsecurity

• rls-doctor

  io.github.subhajitlucky/rls-doctor

  Read-only Postgres/Supabase RLS audit with a rolled-back probe that proves who can read which rows.

  Community npmstdio security

• rootpilot-ssh-diagnose

  io.github.Easton-OU/rootpilot-ssh-diagnose

  Read-only SSH server diagnostics via a fixed 38-command whitelist; secrets redacted, no write path.

  Community npmstdio security

• rowstile

  io.github.rowstile/rowstile

  Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

  Community npmstdio databasessecuritytesting

• rqwstr

  io.github.Kjopstad-IT/rqwstr

  AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

  Community api-integrationsecuritytesting

• runeward

  io.github.Runewardd/runeward

  Governed execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.

  Community ocistdio security

• runtime

  com.formatho/runtime

  Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.

  Verified domain ociremotestdio security

• rustsdcmcp

  io.github.mechubsec/rustsdcmcp

  Juniper Security Director Cloud MCP server: scoped, audited change control. Rust.

  Community ocistdio security

• s-gw

  io.github.sgateway/s-gw

  Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

  Community npmstdio security

• safe-agent-mcp

  io.github.naoanao/safe-agent-mcp

  Audit API-key privileges, check idempotency patterns, explain AI-agent guard patterns. Read-only.

  Community pypistdio security

• safeinstall

  io.github.Mickdownunder/safeinstall

  Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

  Community npmstdio security

• scan-mcp

  io.github.jacksenechal/scan-mcp

  MCP server for scanner discovery and batch capture via SANE

  Community npmstdio security

• scanner

  org.directindex/scanner

  AI-agent readiness of business websites: scans, city indexes, assistants' answers, direct links.

  Verified domain remotestreamable-http security

• schemadriftgate-mcp

  com.clauxel.schemadriftgate/schemadriftgate-mcp

  Paid remote MCP for schema drift checks, approvals, receipts, and release audit logs.

  Verified domain remotestreamable-http monitoringsecurity

• scorebadge

  com.scorebadge/scorebadge

  Free website score for speed, SEO, security and AI search readiness, with the fixes.

  Verified domain remotestreamable-http marketingsearchsecurity

• sealkeep

  io.github.munhq/sealkeep

  Let AI agents use secrets without seeing them: inject into a command, redact the output.

  Community npmstdio security

• secenv-mcp

  io.github.chirag127/secenv-mcp

  Centralized secrets manager MCP server. Generate .env files, rotate keys, sync to GitHub Actions.

  Community filesgitsecurity

• secret-safe-env

  io.github.irrenwill/secret-safe-env

  Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

  Community npmstdio designsecurity

• secret-scanner

  io.github.4hmetuyar/secret-scanner

  Scans files for leaked secrets and API keys

  Community npmstdio api-integrationfilessecurity

• secret-scanner

  io.github.GuardBee/secret-scanner

  Scans files for leaked secrets and API keys

  Community npmstdio api-integrationfilessecurity

• secret-scanner

  tools.knurl/secret-scanner

  Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

  Verified domain remotestreamable-http filessecurity

• secretcarousel

  io.github.jyswee/secretcarousel

  Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.

  Community npmremotestdio communicationecommercesecurity

• sectora

  io.github.megabrainee/sectora

  Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

  Community remotestreamable-http securitydeveloper-tools

• secure-vault

  io.github.mdfifty50-boop/secure-vault

  Encrypted secrets and credential management for agents

  Community npmstdio security

• securecode

  io.github.juanisidoro/securecode

  Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

  Community npmstdio securityai-modelsmonitoring

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.