MCP server directory
59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.
Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.
Showing 301 to 330 of 1741
-
DepScout
io.github.yc-droid/depscout
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
-
Dependency Vulnerability Check (OSV)
io.github.brunckel/dependency-vuln-check
Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.
-
Dependency Vulnerability Tracker — package security advisories ($0.01/query)
com.a2awire/data-dependency-vulnerability-malicious-package-security
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
-
Deploy to Agents
com.deploytoagents/server
Audit agent-distribution surfaces and create an evidence-based distribution plan.
-
Depsonar
com.soflution/depsonar
Dependency audits, live CVE scans, migration detection and stack health across 9 languages.
-
DexScreener DeFi Token Liquidity & Pair Security Audit
io.ceadigital/dexscreener-token-audit
Audit on-chain DEX token liquidity pairs, volume, price action, and FDV via DexScreener.
-
DiffSense
io.github.GoldenSupremeSaltedFish/diffsense
MR/PR risk audit MCP server: semantic diff + rule engine, strict read-only. Run as image or pip.
-
Diogenes Web3, DeFi & 402 Security MCP
io.github.stand-out-of-my-sun/diogenes-web3-security-mcp
Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.
-
Disney Lorcana TCG Collection
io.github.IcaroBichir/lorcana
MCP server for Disney Lorcana TCG: enrich collections, search cards, build decks, audit data.
-
Dmarc Spf Audit
io.github.Dawaxwx/dmarc-spf-audit
Complete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...
-
Docker Compose Audit
io.github.UnbearableDev/docker-compose-audit
Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.
-
Dockerfile Audit
io.github.UnbearableDev/dockerfile-audit
Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.
-
Dockerfile Lint
io.github.basitalisandhu/mcp-dockerfile-lint
Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.
-
Dockerfile Security Audit
io.github.tylerscomic-lab/dockerfile-audit-mcp
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
-
Domain Health
com.modernmustardseed/domain-health
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
-
Domain Lab
app.domainlab/domain-lab
Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.
-
Domain Security
io.github.OrtaMarco/domain-security-mcp-server
Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
-
DomainDNA
dev.workers.cybermax-tools.cybermax/domaindna-api
Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.
-
DomainDNA: Tech Stack Detector, WHOIS & Domain Age API
io.github.CyberMax-tools/domain-intel
DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.
-
DomainDNA: Tech Stack Detector, WHOIS & Domain Age API
io.github.shawmena-dotcom/domain-intel
DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.
-
DomainRef - domain and email security check
dev.domainref/domainref
Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.
-
DrUrls
com.drurls/drurls
Audit websites for SEO from your AI assistant: scores, issues with fixes, Google indexability
-
Dragons Eye Ransomware Claims
com.ransomware-tracker.api/dragonseye
Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).
-
Draugr
dev.draugr/draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
-
Drawbridge
sh.xorfox.drawbridge/server
Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.
-
Drone CI/CD MCP Server
io.github.yusiwen/drone-mcp-server
MCP server for Drone CI/CD: 45 tools for builds, repos, secrets, users and templates
-
DugganUSA CLI — Local STDIO MCP
io.github.pduggusa/dugganusa-cli
Local STDIO MCP for DugganUSA threat intel. 1.13M IOCs. Read-only. npm: dugganusa-cli.
-
E-Commerce — Refund Request Audit — Kestrel Outfitters (2b20046e)
com.a2awire/benchmark-refund-request-audit-2026-09-10-2b20046e
Free to compete: testnet faucet funds everything. 12 synthetic refund request exception cases:…
-
ELYREON Workflow Rescue
io.github.colt2822/workflow-rescue
Offline static analysis of n8n workflow exports: dead ends, cycles, missing triggers, secrets.
-
EPA EJScreen
com.olyport/ejscreen
Environmental justice screening indicators, pollution burden, and demographic vulnerability
Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.