MCP Server Directory

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

MCP server for self-hosted Jira instance with Personal Access Token authentication

Carbon MCP — UK Carbon Intensity API (free, no auth)

Security scanner that tests applications and infrastructure for vulnerabilities, generates SBOMs, and monitors projects using TypeScript and Go components.

Manage Clerk's authentication and user management organization management, session handling, and authorization features.

Personal knowledge platform that helps collect, organize, and recall information from various sources with end-to-end encryption and optional self-hosting.

Security harness that wraps MCP servers as stdio proxies with credential exfiltration prevention, DLP pattern matching, and SSRF protection.

Execute shell commands with strict security policies.

Remote Obsidian vault access over HTTPS with OAuth 2.0 authentication and Cloudflare Tunnel security.

Integrates with Socket's dependency security API to analyze npm and PyPI packages, returning detailed security and quality metrics for vulnerability assessment and dependency management.

Integrates with LLMs and AI agents, allowing you to perform various Auth0 management operations using natural language. For instance, you could simply ask Claude to create a new Auth0 app and get the domain and client ID.

Enables security professionals to inspect and analyze AWS infrastructure for security issues through natural language queries about GuardDuty findings, IAM permissions, S3 buckets, and CloudFront distributions.

Real-time OSINT intelligence platform for global security monitoring.

Integrates multiple AI text detection services to analyze content authenticity, writing style, and potential plagiarism.

Integrates with TIDAL music streaming service, enabling authentication, playlist management, and personalized music recommendations through natural language interactions.

Integrates with Descope's authentication platform to enable natural language-driven user management, authentication flows, and access control operations.

Security controls for 28 frameworks including ISO 27001, NIST, DORA, and PCI DSS with bidirectional mapping.

Enables secure hosting on Google Cloud Run with user-based IAM authentication, providing controlled access to custom servers over the internet for team collaboration.

Retrieves and cleans Microsoft Teams meeting transcripts via Microsoft Graph API with delegated OAuth 2.0 On-Behalf-Of authentication.

Integrates with Bitcoin SV blockchain to enable wallet operations, transaction management, and NFT interactions while maintaining local private key security

Self-hostable orchestration platform providing centralized management, routing, and multi-tenant access control for multiple MCP servers with enterprise-grade security and billing integration.

Integrates with REST APIs through OpenAPI specifications to fetch documentation, explore endpoints, execute authenticated requests, and validate responses with support for multiple authentication methods.

Wraps Nmap for automated security assessments with port scanning, host discovery, service detection, OS fingerprinting, and vulnerability scanning.

Bridges Java Management Extensions (JMX) with natural language monitoring and management of Java applications through their exposed MBeans, supporting both local JVM connections via the Attach API and remote JMX connections with authentication for multi-application management, MBean discovery, and operational control.

Integrates with Clerk authentication to enable secure interactions with protected API routes and server actions for AI-driven operations.

Unified gateway aggregating multiple MCP servers and API plugins behind a single authenticated endpoint.

Interactive security operations dashboards for alert triage, threat hunting, and case management.

Analyzes npm and Cargo packages for security risks through typosquatting detection, version analysis, and advisory scanning.

Analyzes Solidity smart contracts through AST parsing to trace function execution flows, variable interactions, state changes, and external contract calls for debugging and security auditing.

Integrates with Illumio's Policy Compute Engine API to enable workload management, label operations, and traffic analysis for zero trust security environments.

Interact with REST APIs with automatic authentication, token caching, and OpenAPI endpoint discovery.

Connects to self-hosted Jira instances using Personal Access Token authentication

Integrates with Microsoft Graph API to enforce CISA Directive 25-01 security controls for Microsoft 365, enabling automated policy management and compliance monitoring.

Integrates with AFL++ fuzzing framework for automated security testing through workspace management, instrumented binary compilation, corpus management, fuzzing campaign orchestration, and crash analysis.

Authorization proxy for MCP servers with JWT validation, policy engine, and behavioral anomaly detection.

Query session replays, friction reports, and UX analysis from a self-hosted Rerun collector via Bearer token authentication.

Security checkpoint that intercepts package installations to block vulnerable dependencies.

Encrypt and decrypt text using historical Enigma machine emulation.

Wraps Google Gemini CLI for cross-model queries using local OAuth with activity-based timeouts.

Automated LLM red teaming and security testing server that orchestrates asynchronous test runs against OpenAI-compatible endpoints with job lifecycle management and artifact storage.

Integrates with LicenseSpring's license management platform to enable software license activation, validation, consumption tracking, customer management, and trial key generation through dual API architecture with HMAC-SHA256 authentication.

Integrates with Azure cloud services to enable resource listing, management, and cost analysis through service principal authentication and the Azure Cost Management API

Secure bridge to OpenAI and Google Gemini APIs with multi-layer security protection including prompt injection detection, content filtering, input sanitization, and configurable rate limiting to prevent API abuse while maintaining access to all major models.

Integrates with Google Classroom to retrieve courses, announcements, and assignments using OAuth2 authentication, enabling students and educators to access classroom information without switching contexts.

Automates security assessment of Maven packages through decompilation and rule-based privacy violation detection for dependency compliance checking and supply chain risk analysis