Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.
mcp-pin
Published by GitHub account GautamTalksDev
Read-only lookup tools over mcp-pin's signed public log, letting an assistant check whether a public MCP server's tool definitions changed and which local…
AtlaSent MCP Server
Published by GitHub account AtlaSent
AtlaSent MCP server adds authorize-before-execute checks to AI agents: risky actions are evaluated, held for human approval, and verified by permit before…
NAIF Gravity Diagnostic — Free MCP/API/Webhook Triage
com.naifgravityOfficial publisher
A hosted diagnostic service that checks MCP handshakes, API responses, JSON validity, and webhook signatures, with paid one-time reports.
ScriptProbe MCP
tech.thecompound
Lets an assistant check an npm package's install scripts and publisher changes before you install it.
Codebase Doctor
Published by GitHub account subhajitlucky
Read-only codebase auditor that lets a coding assistant scan a repository for secrets, dependency drift, RLS and auth issues, and get review verdicts with…
Website SEO Audit, Broken Links & Change Monitor (Apify, paid per audit)
Published by GitHub account ozzie-bagadirov
A remote Apify-hosted MCP server that crawls a website for broken links, redirects and SEO issues and lists changes since the previous run.
Disposable Email Checker
dev.workers.ara-v1.disposable-email-mcpOfficial publisher
A remote MCP server that lets an assistant check whether an email address or domain belongs to a known disposable or temporary email provider.
Wayza sign-up for AI agents
com.wayzaOfficial publisher
A keyless sign-up door that lets an AI agent register on Wayza, get its own address, card and connector key, and hand a claim link to its owner.
Ship Check
com.uxcontinuumOfficial publisher
Ship Check scans a deployed web app from the outside for exposed keys, open Supabase tables and missing security headers, and offers Continuum's paid review and
Jid: the trust API for AI agents
com.jidOfficial publisher
Jid is a remote trust API that lets an assistant verify businesses, screen leads and check email authenticity before paying, signing or buying.
offprompt
Published by GitHub account offprompt
Collects API keys, tokens and passwords from the human in a browser page and writes them to the project's .env, so the assistant only ever sees key names.
Backend Investigator
Published by GitHub account mrZedov
A read-only local MCP server that lets an assistant investigate backend health across Docker, Loki, Prometheus, PostgreSQL, Redis, BullMQ and GitHub deployments
Paianjenul: Romanian company lookups
Published by GitHub account emanueltns
Remote MCP server for Romanian company due diligence: ONRC registry profiles, ANAF financials, VAT status, sanctions screening and administrator links.
Security Headers
Published by GitHub account basitalisandhu
Fetches a public URL's response headers and grades CSP, HSTS, X-Frame-Options and other security headers, with per-header explanations.
Regex Lab
Published by GitHub account basitalisandhu
Local MCP server that tests JavaScript regular expressions against samples, explains patterns construct by construct, and probes for catastrophic backtracking.
OSV Advisories
Published by GitHub account basitalisandhu
Looks up known vulnerabilities in the OSV.dev database by package, version and ecosystem, and scans dependency lockfiles in batch.
OpenAPI Lint
Published by GitHub account basitalisandhu
Lints OpenAPI 3.x documents for missing security, responses, descriptions and versioning, and lets an assistant list and inspect operations.
JWT Tools
Published by GitHub account basitalisandhu
Local MCP server for JWT work: decode tokens without verification, flag risky algorithms and claims, verify signatures with a key, and mint test tokens.
MachineWitness
eu.machinewitnessOfficial publisher
A remote EU archive server that lets an assistant check whether a domain is observed, suggest domains, and order time-stamped records or extracts via payment.
SafeGrd
dev.safegrdOfficial publisher
SafeGrd lets an assistant read backups and Fire Drill results, and request a backup or restore test, for databases, files and mailboxes.
Sitegoalie
com.sitegoalieOfficial publisher
Remote MCP server for Sitegoalie that lets an assistant monitor and maintain client WordPress sites: updates, uptime, PHP errors, performance and reports.
booklint stamp
com.booklint
A remote service that issues signed timestamp receipts for a SHA-256 hash and verifies existing receipts against its published public keys.
Unit 42 Threat Research & Malware Analysis — buy per-query in-session (unit42watch)
com.a2awireOfficial publisher
Remote A2AWire endpoint that lets an assistant preview and buy per-query Unit 42 threat research and malware analysis data, plus register and manage agent jobs.
TestChimp
io.testchimpOfficial publisher
TestChimp QA platform server that lets an assistant query coverage, test plans, performance runs, releases and QA bot tasks for a project.