MCP Server Directory

guide-registry guide.selfhelp/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Who can change a Solana program or EVM contract, dependency advisories, scans. Paid per call (x402).

Rose Bounty org.agttglobal/rose-bounty

AI-agent trust infrastructure for discovery, authority, execution, verification, and receipts.

guide-registry guide.officeleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

13 rules that decide whether a vulnerability report ever reaches you

Free local micro-APIs: markdown cleaner, JSON validator, CSV-to-JSON, agent-config secret auditor.

CERT-FR Security Advisories — buy per-query in-session (certfrwatch) com.a2awire/data-cert-fr-advisory-national-cert-alert

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

Median books com.medianfi/books

Read-only access to a Median customer's ledger, financial reports and transactions. OAuth sign-in.

Czech Company Registry (ARES) Tools io.github.appvantagelabs2-a11y/czid

Czech ARES company registry: VAT, insolvency, RÚIAN addresses, IČO/DIČ checks. All free, no auth.

DomainDNA dev.workers.cybermax-tools.cybermax/domaindna-api

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

Doppler API: projects, configs, secrets listing and download. Needs service or personal token.

Mails.ai — Agent Email ai.mails/agent-email

A real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

guide-registry guide.counselor/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

accessproof com.edgethirteen.www/accessproof

Scan a web page's markup for the WCAG failures ADA demand letters cite most often.

insumer com.insumermodel/insumer

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.

Agent Card Health Check io.github.kadopi/agent-card-health-check

Free no-storage MCP that checks A2A Agent Card connection readiness for authorized targets.

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

MailSenpai com.mailsenpai/mcp

MailSenpai: lists, campaigns, DNS & spam checks (74 tools, OAuth, EU). SMTP Senpai: SMTP & API.

Authorizes MCP tool calls against a session policy, not one call at a time.

Trent ai.trent/trent

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Debian Security Advisories — buy per-query in-session (debianwatch) com.a2awire/data-debian-security-advisory-dsa-linux

Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.