MCP Server Directory

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

MCP Security & Vulnerability Auditor io.github.Ansarii/mcp-security-auditor

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Connect AI assistants to the Rubrik Security Cloud GraphQL API to discover, query, and automate.

PaperOffice AI io.github.paperoffice-ai/paperoffice-mcp

Document AI and headless DMS: OCR, IDP, search, workflows, signatures. EU-hosted, OAuth 2.1.

guide-registry guide.coachingleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Company filing and CVE evidence snapshots io.github.Stavros65/fishnet-company-cve

Company filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.

OptionWhales io.optionwhales/options-flow

US options flow & stock data: unusual activity, gamma levels, IV, earnings. OAuth sign-in or keys.

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

JENRIKS Photo Archive com.jenriks/photo-archive

Read-only MCP server over the JENRIKS daily photoblog: one photo per day since 2006. No auth.

Barcode Tools (decode, render, GTIN validate) io.github.appvantagelabs2-a11y/barcode

Decode, render, validate barcodes: QR, DataMatrix, EAN, UPC, PDF417. All tools free, no auth.

Read PDFs locally: text, pages, metadata, scan detection, layout, permissions, render, OCR.

genko.me me.genko/cms

Headless CMS. Search the docs and read, draft, publish, and schedule entries via OAuth.

Shipvela com.shipvela/shipvela

Create website projects, deploy GitHub sites and read logs/usage via remote OAuth MCP.

Kaption WhatsApp (Cloud) io.github.Kaption-AI/mcp-extension-remote

Use WhatsApp from AI apps through the Kaption extension. OAuth 2.1 relay that cannot read messages.

Pay-per-call x402 tools on Base: web extract/render, burn-once secret vault, chart, GeoTIFF

RatedWithAI accessibility checker com.ratedwithai/accessibility-checker

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.

Cited io.github.entradox/cited-visibility-scanner

AI-answer-engine visibility scans for local businesses, as agent tools

Authorizes MCP tool calls against a session policy, not one call at a time.

InvoiceParser Pro com.invoiceparserpro/ipp

Invoice PDFs, scans and photos to Excel, with the math checked: fields, line items and totals.

WhyVault io.whyvault/vault

Shared Markdown memory that every AI assistant can read and write. Hosted in the EU.

Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

FindWeedNY com.findweedny/findweedny

Licensed NY cannabis dispensaries, brands, deals, license checks and lab-anchored reviews. No auth.

QR Branding io.github.quartzondev/qr-branding

Generate branded, scan-validated QR codes (manual, AI, templates, Wi-Fi, vCard, geo).

Stemma kitchen.stemma/stemma

Recipes, meal plan, shopping list and pantry from the Stemma iOS app, with per-area OAuth scopes.