Security & Monitoring MCP Servers
Security, identity, secrets, compliance, testing, logs, monitoring, alerts, and observability.
LinkPreflight
Published by GitHub account linkpreflight
Remote MCP server that lets an assistant vet a URL before clicking, citing or fetching it, returning status, redirects, dead/parked domains and phishing flags.
Lumi Trades: x402 seller checks and test-buys
Published by GitHub account cypher-osiris
Lumi Trades checks x402 sellers before an assistant pays them, returning allow/warn/block verdicts, vendor scores and reports, with optional per-call crypto…
Tracewatch
Published by GitHub account CloudCorpRecords
Tracks security scan results for local repos over time, letting an assistant diff scans, trace findings to commits and PRs, and report health trends.
Mcpvet
Published by GitHub account CloudCorpRecords
Pre-install vetting for MCP servers, skill directories and npm packages, returning a VETTED, REVIEW or DO-NOT-INSTALL verdict with evidence.
Flowcheck
Published by GitHub account CloudCorpRecords
Statically audits GitHub Actions workflow files for least-privilege problems and proposes hardened per-job permissions blocks.
Depguard
Published by GitHub account CloudCorpRecords
Depguard grades npm dependency changes in a repo diff — install scripts, typosquats, downgrades, lockfile drift — and returns CLEAR/REVIEW/HIGH-RISK verdicts.
Boundra — Payment Approval Gateway for AI Agents
io.boundraOfficial publisher
Payment approval gateway that lets an AI agent ask a signed policy whether a payment should be allowed, denied, or sent to the user for approval.
Agent Tools
dev.workers.jbarkules.agent-toolsOfficial publisher
Remote MCP server of pay-per-call utilities: email risk checks, PDF/OCR extraction, web-to-markdown, domain and IP lookups, FX rates and date tools.
AdRails
dev.adrails
Self-hosted Google Ads MCP server that lets an AI agent read campaigns and propose capped, reviewed ad changes on your own credentials.
Speakeasy Platform MCP
com.speakeasy.aiOfficial publisher
Remote Speakeasy AI Control Plane endpoint that lets an assistant manage and observe MCP servers, skills and assistants under central policy.
DPOLens
com.dpolensOfficial publisher
DPOLens's hosted MCP server, published by dpolens.com; no sign-in required; Streamable HTTP; 4 tools.
Chaink9
com.chaink9Official publisher
Checks crypto tokens on BSC, Ethereum, Base and Arc for traps by really buying and selling them on a forked chain; paid per call in USDC/USDT.
AcidPeak
com.acidpeakOfficial publisher
Read-only vulnerability intelligence: look up CVEs, exploitation evidence, fixes, breach notices and Linux package status from AcidPeak's tracked data.
CounterpartyCheck
co.youraitoolsOfficial publisher
Checks an EVM or Solana address before you pay or interact with it, returning an ok, caution or block verdict with reasons.
unripe
Published by GitHub account texWoW
Checks how recently a package version was published, so an assistant can avoid adding or locking dependencies that are too new.
CARBON
Published by GitHub account jarbon
CARBON Core's MCP server gives a coding agent a risk-based AI testing harness with local evidence reports, run through the Jay test-manager persona.
All's Well
io.alls-wellOfficial publisher
All's Well's hosted MCP server, published by alls-well.io; credential required; Streamable HTTP.
Silent tool-failure outcome monitor
com.textforagentsOfficial publisher
Remote MCP endpoint that checks agent tool calls against outcome contracts mined from clean traces and reports silent failures with recovery receipts.
Sampling Quota Guard
com.textforagentsOfficial publisher
Remote MCP server that meters sampling requests per server, enforces a fail-closed allowance and scope clamp, and issues pre-connect verdicts.
Namespace guard for merged toolboxes
com.textforagentsOfficial publisher
Remote MCP service that audits merged MCP toolboxes for tool-name collisions and returns trust-graded, signed routing verdicts and receipts.
MCP OAuth remediation verification
com.textforagentsOfficial publisher
Remote MCP endpoint that returns three-leg OAuth remediation verdicts for MCP servers, checked behaviourally against a canary server.
Agent Continuity Bond
com.textforagentsOfficial publisher
Remote MCP server for creating and managing witnessed-liveness "continuity bonds" with collateral, premiums, heartbeats and dual-condition payouts.
ShipLatch
com.shiplatchOfficial publisher
ShipLatch runs a free passive security scan on a public web app URL and returns a grade, issue counts and issue types.
Quant Agent Shop
com.quantagentshopOfficial publisher
A paid-per-call remote toolkit for web search, page fetching, research, PDFs, company and domain checks, SEO audits, sanctions screening and weather.