MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 391 to 420 of 1125

• NullWire-MCP

  io.github.VoxNode-ux/nullwire-mcp

  RAM-only HTTP debugging proxy and MCP server in Go. AI agents see salted tags, never secrets.

  Community api-integrationsecurity

• Nullcone Threat Intelligence

  io.github.maco144/nullcone

  Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

  Community remotestreamable-http security

• Nvd

  io.github.pipeworx-io/nvd

  NVD MCP — wraps the NIST National Vulnerability Database API.…

  Community npmremotestdio api-integrationdatabasessecurity

• OSV Dependency Vulnerability Check

  io.github.fairquery/osv-dependency-vulnerability-check

  Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

  Community developer-toolssecurity

• OT Intel API

  io.github.No3men60/ot-intel-api

  OT/ICS threat intel for AI agents: 40 tools, pay per call in USDC on Base via x402.

  Community remotestreamable-http api-integrationsecurity

• OWASP ZAP MCP Server

  io.github.pierre3/zap-mcp

  MCP server for OWASP ZAP vulnerability scanning with Docker management

  Community devopssecurity

• Oakallow

  io.github.oakallow/oakallow

  Runtime permission, approval, and audit layer for AI agent tool execution.

  Community remotestreamable-http security

• Odin

  io.github.BorgDevelopment/odin-mcp

  Read Odin security findings and remediation, link fix pull requests and track retests.

  Community npmremotestdio gitsecurity

• Offense

  io.github.offense-research/offense

  Security tools for coding agents: dependency advisory audits and evidence for remediation.

  Community remotestreamable-http security

• Omega x402 Security, Biomed & Escrow Intelligence MCP

  io.github.chusmias258-dev/omega-x402-mcp

  7 x402 v2 pay-per-call MCP tools for FDA/ChEMBL, token rug scan, Base escrow & wallet forensics.

  Community remotestreamable-http cryptosecurity

• OpenWrt MCP

  io.github.stanislav-testhub/openwrt-mcp

  MCP server that runs on an OpenWrt router: deny-by-default policy, audit log, rollback-armed changes

  Community security

• OpsecForge

  io.github.cyberdroid2077/opsecforge

  Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

  Community npmstdio api-integrationfilessecurity

• Osv Dev

  io.github.pipeworx-io/osv-dev

  OSV.dev — Google's open-source vulnerability database

  Community remotestreamable-http databasessecurity

• Overdrive Intel

  io.github.Looney-tic/intel-overdrive

  AI coding ecosystem intelligence — breaking changes, tools, security alerts from 900+ sources

  Community npmstdio security

• Oxiploitability

  io.github.abelreqma/oxiploitability-mcp

  Sourced, evidence-aware CVE research for CVEs, products, SBOMs and images via NVD, EPSS, KEV, OSV.

  Community imagesciencesecurity

• PCI DSS v4.0.1 Compliance Checker

  io.github.shyshlakov/pci-dss-mcp

  PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

  Community ocistdio legalpaymentssecurity

• PDF Accessibility Audit

  io.github.Veduis/pdf-a11y-audit

  Local-first PDF accessibility audits with cited findings and an offline HTML report.

  Community npmstdio documentssecurity

• PG1 Sovereign Threat Intelligence

  io.github.Project-Gifted1/pg1-threat-intel

  Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.

  Community remotestreamable-http cryptodeveloper-toolssecurity

• PII & Secret Redactor

  io.github.tylerscomic-lab/pii-redactor-mcp

  Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

  Community remotestreamable-http ai-modelssecurity

• PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder

  io.github.nouchix/pqc-khepra-mcp

  Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.

  Community ocistdio securitylegal

• PROCESIO

  io.github.Procesio-Externals/procesio-cli

  Lets your own AI assistant build, run, validate and audit PROCESIO processes, forms and documents.

  Community pypistdio documentssecurity

• PYRESEC - AI Code Security Auditing

  io.github.renaat-s/pyresec-agent

  AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

  Community remotestreamable-http security

• Page Scanner

  io.github.sbd530/page-scanner

  Capture a web page from your own Chrome as a PDF whose text is still text.

  Community npmstdio browserdocumentssecurity

• PageLens AI

  io.github.PageLens-AI/pagelensai-mcp-server

  AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

  Community remotestreamable-http securitymarketing

• Paladin Front PHP Rescue & Zero-PHP Migration MCP

  io.github.AGI-CEO/paladin-php-rescue-mcp

  PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

  Community remotestreamable-http contentsecurity

• Palveron MCP Server

  io.github.palveron/mcp-server

  Early access - AI governance gateway for MCP tool calls (policies, PII masking, audit).

  Community npmstdio security

• Panda Web Security Tools

  io.github.pandadad0214/panda-web-security-tools

  Site/email/agent safety from public data: SPF/DKIM, SEO, monitor, hidden-AI, WHOIS, links (6).

  Community pypistdio marketingsecurity

• PandaWard

  io.github.ratomirjovanovic/pandaward

  Local, evidence-based application security assessment with an evidence ledger and retests.

  Community security

• Pasportoo Website Audit

  io.github.galeaxe5/pasportoo-website-audit

  Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.

  Community remotestreamable-http security

• PassTunnel

  io.github.PassTunnel/passtunnel

  macOS OpenVPN/FortiGate VPN status, logs and diagnosis; read-only by default, never returns secrets

  Community monitoringsecurity

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.