MCP server directory

59888 public MCP servers from the official MCP Registry (26001 from verified domains, 33887 community). Search, filter, copy a setup snippet. Nothing here is installed by cosmic-mcp.

Community listing. Not installed or verified by cosmic-mcp. Check the source before you run anything.

Search servers

Search

Showing 391 to 420 of 616

• ShipLatch

  com.shiplatch/scanner

  Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

  Verified domain remotestreamable-http securityapi-integrationfiles

• ShipReady Metrics

  com.shipreadymetrics/public-scan

  Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

  Verified domain remotestreamable-http data-analyticsgitsecurity

• ShipSafe — Independent security verification

  co.ship-safe/scanner

  Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

  Verified domain npmremotestdio security

• SignatureForever

  com.signatureforever/email-signatures

  Audit and build email signatures that survive Gmail, Outlook desktop and Apple Mail.

  Verified domain remotestreamable-http emailsecurity

• SimplyScan

  io.simplyscan/simplyscan

  Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

  Verified domain remotestreamable-http securitymarketing

• Sinthoma

  br.com.sinthoma/conector

  Read-only Sinthoma clinical connector: patients, sessions and prep; OAuth consent and audit.

  Verified domain remotestreamable-http healthidentitysecurity

• Site Doctor — WordPress diagnosis

  pro.syswp.sitedoctor/diagnosis

  Read-only WordPress diagnosis for AI: security, performance, forms and downtime, with evidence.

  Verified domain remotestreamable-http contentsecurity

• Site SEO & AI Crawler Audit

  app.openkrill/site-check

  Check public pages for SEO tags, AI crawler rules, AI citation signals and landing page conversion.

  Verified domain remotestreamable-http marketingscrapingsecurity

• Sitejar Web Compliance Scanner

  app.sitejar/mcp

  Scan a web page for accessibility, security, privacy, quality and SEO issues, with fixes.

  Verified domain remotestreamable-http securitylegalmarketing

• Skarn

  com.getskarn/skarn

  Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

  Verified domain npmstdio security

• SkillTotal

  ai.skilltotal/skilltotal

  Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

  Verified domain pypistdio security

• SkillsSafe Security Scanner

  com.skillssafe/scanner

  AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.

  Verified domain npmremotestdio securityai-models

• Skycloak

  io.skycloak/skycloak-mcp

  Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.

  Verified domain remotestreamable-http identitysecurity

• Smartsheet Audit (x402)

  com.solutionsbradshaw/smartsheet-audit

  Smartsheet workflow audit: free preview, full report $0.10 USDC on Base via x402.

  Verified domain remotestreamable-http securityautomation

• Softkiln Deploy

  com.softkiln/deploy

  Host apps built with AI: deploy to a live HTTPS URL, custom domains, secrets and backups.

  Verified domain remotestreamable-http devopssecurity

• SourceVault Gateway

  ai.sourcevault/gateway

  Governed access to private code for coding agents: policy, redaction, audit chain, provenance.

  Verified domain security

• SqlCertForge

  com.detentpoint/sqlcertforge

  SQL Server and SSRS TLS certificate binding, rotation and audit. Read-only tools free.

  Verified domain databasessecurity

• Stablecoin Scanner

  com.achivx/stablescan

  Stablecoin risk for agents: freezes, OFAC, exposure, allowances, transfers, graph. 7 chains.

  Verified domain remotestreamable-http security

• StackResolve

  dev.stackresolve/stackresolve

  Find, compare, and audit software for AI agents. Scored registry of tools and MCP servers.

  Verified domain remotestreamable-http security

• StackShield

  io.stackshield/stackshield

  External security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.

  Verified domain remotestreamable-http monitoringproject-managementsecurity

• Stackfacts

  dev.stackfacts/stackfacts

  Neutral, sourced, dated facts for choosing software: price, free tier, idle rules, security record.

  Verified domain remotestreamable-http security

• StateJar memory

  com.statejar/memory

  Verifiable memory for AI assistants: typed facts, content-addressed versions and an audit trail.

  Verified domain remotestreamable-http memorysecurity

• Stobox Intelligence & Tokenization

  io.stobox/intelligence-graph

  Source-linked RWA tokenization knowledge for any AI: security tokens, regulation and standards.

  Verified domain remotestreamable-http legalsecurity

• Storefront Check

  com.profitpather.tools/storefront-check

  Audit any storefront from outside: ad tags, dead-tag detection, AI crawler access, feed readiness.

  Verified domain remotestreamable-http newsscrapingsecurity

• Strategic Flow MCP

  tech.strategicflow/mcp

  Audit B2B SaaS lifecycle emails with the 7-point Decision Friction Model: score, patterns, fixes.

  Verified domain remotestreamable-http ai-modelssecurity

• Supplier Operations — Requisition Audit — Kestrel Procurement Co. (98e58b8b)

  com.a2awire/benchmark-requisition-audit-2026-09-11-98e58b8b

  Free to compete: testnet faucet funds everything. 12 synthetic requisition exception cases:…

  Verified domain remotestreamable-http security

• SurfacedBy AI Visibility & GEO Audit

  com.surfacedby/ai-visibility

  Free AI visibility and GEO audit: see what AI reads on your site and whether its answers cite you.

  Verified domain remotestreamable-http security

• Swamp

  world.swampai/swamp

  An open habitat where security agents register themselves, work in public, and rerun each other.

  Verified domain remotestreamable-http security

• SyteCheck

  com.sytecheck/sytecheck-mcp

  Scan a website for SEO, accessibility, performance and security issues, and read the report.

  Verified domain npmstdio marketingproject-managementsecurity

• TAP

  tech.human/tap

  Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

  Verified domain remotestreamable-http security

Source: the official MCP Registry (registry.modelcontextprotocol.io), refreshed daily, plus public GitHub data. "Verified domain" means the publisher proved the namespace's domain to the registry; it is not a review. Machine-readable: /v1/directory/servers.