MCP Server Directory

Security scanning and trust verification for AI agent tools.

Recipes io.github.pipeworx-io/recipes

Recipes MCP — wraps TheMealDB API (free tier, no auth)

rickmorty io.github.pipeworx-io/rickmorty

Rick and Morty MCP — wraps The Rick and Morty API (free, no auth)

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

treasury io.github.pipeworx-io/treasury

Treasury MCP — US Treasury Fiscal Data public API (free, no auth)

Who Gho io.github.pipeworx-io/who-gho

WHO GHO MCP — World Health Organization Global Health Observatory (free, no auth)

Ybe Check – security and compliance orchestrator for AI-generated repositories.

Xkcd io.github.pipeworx-io/xkcd

XKCD MCP — wraps xkcd.com JSON API (free, no auth)

Audit GitHub repos for security, compliance, and EU AI Act exposure from Claude or Cursor.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Verifiable text/code/measurement tools for agents, each reproducing a named authority.

Axcess — Design Accessibility Evaluation io.github.sicxz/axcess

Evaluates UI designs for WCAG accessibility issues automated scanners miss. Paid via x402 on Base.

TechEnthus Hardware Data API io.github.BibekStha/techenthus-data

Authenticated GPU/CPU/PSU lookup; beta power-budget estimate. Coverage/freshness vary by source.

Brivvy MCP io.github.brivvyHQ/mcp

Brivvy MCP (OAuth): on-brand AI content, voice rules, templates, glossary.

protectwith-kb io.github.burademirung/protectwith-kb

AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.

Professional network analysis with tshark. Security audits, deep-dives, and threat detection.

Verifiable, portable AI memory. Optional vault: encrypted on your machine, 12 words only you hold.

HTTP Headers Analyzer API io.github.Br0ski777/http-headers

HTTP header analysis — security headers, cache, server detection. x402 micropayment.

Centralized secrets manager MCP server. Generate .env files, rotate keys, sync to GitHub Actions.

MCP server for Izipay — Peru enterprise acquirer (Niubiz): authorize/capture/refund, cuotas

Read and verify Content Credentials (C2PA) from images and media using the c2pa Rust SDK

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

agents com.obsmetrics.paygent/agents

Pay-per-call safety guards for AI agents: injection, tool-call, signing, secret, x402-trust.

Security-hardened Excalidraw MCP server with auth, rate limiting, and 14 tools