Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.

POPCORN Witness Verifier
Published by GitHub account violetclaire
Verifies POPCORN-WITNESS/2.0 signed time and digest receipts against caller-supplied keys, so an assistant can check evidence that an action happened at a…

opsgate
Published by GitHub account polymatx
Policy-gated MCP server that lets an AI agent inspect and operate Linux servers through typed, audited tools instead of a shell.

Verdict — Send anything. Get the truth.
Published by GitHub account nrupala
A hosted MCP server that checks suspicious messages and links and returns a plain REAL, SUSPICIOUS or LIKELY SCAM verdict with the checks shown.

Boundra — Payment Approval Gateway for AI Agents
Published by GitHub account gobeyondfj-cmd
Boundra is a local MCP payment approval gateway that evaluates an agent's payment intents against a signed policy and returns allow, ask-a-human, or veto…

x402 Security & Alpha Oracle
Published by GitHub account ak10082247-max
Read-only pre-trade honeypot scanning and smart-money DEX intelligence for Solana and Base tokens, paid per call in USDC.

XRPL Token Guard
Published by GitHub account Riehnbean
A read-only MCP server that checks XRP Ledger tokens for impersonation and issuer risk, and checks wallets for drainer-style signer changes.

Netexpert Mcp
Published by GitHub account Omodaka9375
Local-network diagnostics and host security-posture MCP server with 31 tools for connectivity, DNS, LAN inventory, WiFi health and exposure checks.

Canonicalhash
Published by GitHub account Mlartab2
Remote MCP server that canonicalizes JSON, returns SHA-256 hashes, and issues EIP-712 signed attestations and receipts for agent actions.

Sn1per MCP Server: pentest, recon and attack surface scanning
Published by GitHub account 1N3
Local MCP server that lets an AI assistant drive a self-hosted Sn1per install to run scoped, audited pentest and recon scans and read the findings.
Site Qwality
com.siteqwalityOfficial publisher
Site Qwality's hosted MCP server, published by siteqwality.com; credential required; Streamable HTTP.
Atomadic MCP
tech.atomadicOfficial publisher
Atomadic's hosted MCP server, published by atomadic.tech; no sign-in required; Streamable HTTP; 68 tools.

Agent Receipt Verify
Published by GitHub account holistis
Verifies x402 payment endpoints and links agent payment receipts to their on-chain settlement, exposed as two MCP tools.

Sanctions Screening (OFAC, EU, UK, UN)
Published by GitHub account fairquery
A remote MCP server that lets an assistant fuzzy-screen people and company names against OFAC, EU, UK and UN sanctions lists.

OSV Dependency Vulnerability Check
Published by GitHub account fairquery
Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

Ratatosk Mcp
Published by GitHub account basphere
Serves CNCF release intelligence as MCP tools, letting an assistant check upgrade paths, browse typed release changes, and trace issues across releases.

LEGION Verify: MCP tool-list history
Published by GitHub account Legion33shadow
Read-only remote MCP server that checks whether an MCP server's tool list changed, using LEGION's signed transparency log and offline-verifiable proofs.

BinSight
Published by GitHub account Alessiolucini
BinSight statically analyzes binaries and any file locally, letting an assistant identify, inspect and diff them without executing them.

Sign and register statements on a Forestrie log
dev.forestrie
Signs statements and registers them on a Forestrie transparency log, verifies receipts, and can issue and pay for grants via x402 within caps.

WormaCeptor
com.wormaceptor
Local MCP server that lets an assistant inspect a running Android debug app: network traffic, crashes, logs, databases and preferences.
Connect by Tactivus
com.tactivus.connect
QuickBooks Online MCP server for accounting firms: multi-company access, approvals, audit log.
Real Crypto Signals: crypto scam warning lists
com.realcryptosignalsOfficial publisher
Checks websites and firm names against compiled regulator scam warning lists and returns official notices, sources and reporting agencies.

Moonsox
com.moonsoxOfficial publisher
Moonsox gives an AI agent a Trust identity, signed reputation cards and a Desk job board where it can claim and deliver paid work in SOL.

Faable — Deploy & Auth
com.faableOfficial publisher
Faable — Deploy & Auth's hosted MCP server, published by faable.com; credential required; Streamable HTTP.
ET Ducky
com.etduckyOfficial publisher
Read-only MCP access to an ET Ducky organization's endpoint agents, alerts and fleet summary for Windows and Linux devices.