Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.

Cowboy MCP
Published by GitHub account februality
Self-hosted WordPress MCP server exposing up to 203 tools so an assistant can manage a WordPress site, with per-change undo and checkpoints.

Hash Encoding Direct Credits
Published by GitHub account PGhannmmn
Remote MCP endpoint offering deterministic SHA, HMAC, Base64 and JWT decoding tools, paid for with prepaid USDC credits on Base.
Tools
dev.workers.sebastiaan-ba3.mcpgatewayOfficial publisher
A remote MCP server offering paid x402 token safety and HTTP security-header reports plus free llms.txt and AI-crawler robots.txt checks.
Tanod
dev.tanodOfficial publisher
Offers many pay-per-call tools so an assistant can scan contracts, read on-chain data, search the web, extract documents and run assorted validation lookups.
DMCA.com Cases
com.dmcaOfficial publisher
Lets an assistant manage DMCA.com takedown, DIY and compliance cases: list and fetch cases, create them, update them, and pull site reports.

Agent Pay Mcp
com.deepfirstsearch
Lets an MCP agent pay x402 APIs in USDC on Base, with spending limited to owner-configured merchants, prices and caps.
Attestari
ai.attestariOfficial publisher
Attestari returns a verdict on an npm or PyPI package version so an assistant can check a package before installing it.

Lockbox
run.lockboxOfficial publisher
Remote Lockbox connector that lets an assistant hand API keys and private files to another person's agent with end-to-end encryption.

sebbi.pro - the proof layer for AI
pro.sebbiOfficial publisher
sebbi.pro scores AI decisions, seals them in a tamper-evident chain timestamped to Bitcoin, and runs 755 compliance checks across 32 frameworks.

Armadoc
link.armadoc
Armadoc is a local stdio MCP server and CLI that lets an assistant list, decrypt and send end-to-end encrypted documents, with the private key staying on your 機

VendorWatch
Published by GitHub account sergiomaldo
VendorWatch lets an assistant look up vendor compliance profiles — DPA coverage, subprocessors, certifications, data locations and AI use — from a hosted remote

rowstile
Published by GitHub account rowstile
Checks, tests, proves and reviews a rowstile access policy that compiles to Postgres row-level security, and pushes it to a development database.

IRL Gateway
Published by GitHub account horkos-labs
A local MCP gateway that lets an AI agent place spot market orders only within a registered trading mandate, sealing each rationale and reconciling fills.

AI Crawler Access Check
Published by GitHub account hamzawamiqhq
A remote MCP server that checks whether major AI crawlers such as GPTBot, ClaudeBot and PerplexityBot can actually reach a given site.

R/IV — Verify Claims, Citations & Agent Actions
Published by GitHub account duranivrobert-glitch
A remote verification service that lets an assistant check claims, citations, sources and agent actions and receive signed verification receipts.

Verified by NPC
Published by GitHub account bayo-de
Checks products, credentials, claims and agents against NPC Labs verification records through a local MCP server.

Shippable
Published by GitHub account Egarter
A local MCP server that scans AI-built apps for data leaks, exposed keys and unsafe edge functions.
Deepsleuth
Published by GitHub account DeepSleuth
Deterministic, no-LLM security scanner for MCP servers that audits manifests, source, runtime responses and install hooks, plus an inline proxy gate.

RugRadar
Published by GitHub account Darkjay123
A remote MCP server that lets an assistant run rule-based scam checks on crypto tokens across 64 networks, read-only and without a wallet or API key.

Brevet
Published by GitHub account BrightbeamAI
Local-first Python runtime that governs what an AI agent learns: it captures corrections, proposes rules, and lets humans promote, sign, release or recall them.
AgentWatch
dev.workers.agentwatch.agentwatchOfficial publisher
Read-only watchtower for AI agents on-chain: decoded activity receipts, plan-vs-execution fidelity, Safe audits and agent passports.
Knowledge Commons
com.metraipolisOfficial publisher
A remote knowledge commons where an assistant can search cited HTTP RFC clauses, check package and web-platform facts, and read or contribute to a public agent-
FrontierStack by Enfour, Inc.
app.frontierstackOfficial publisher
Lets an assistant monitor and administer Macs, servers, routers, DNS and TLS certificates through FrontierStack, with read-only access by default.

oec.sh
sh.oecOfficial publisher
Lets an assistant inspect and operate your oec.sh Odoo hosting organization: servers, projects, environments, logs, metrics, deploys, backups and tasks.