MCP Server Directory

CERT-FR Security Advisories — buy per-query in-session (certfrwatch) com.a2awire/data-cert-fr-advisory-national-cert-alert

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

SYMBaiEX Evidence MCP com.symbaiex.www/evidence

Authenticated public evidence search, verification, research jobs, exports, and webhooks.

guide-registry guide.maintenanceleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Gastat io.github.pipeworx-io/gastat

GASTAT MCP — Saudi Arabia's General Authority for Statistics.

FindWeedNY com.findweedny/findweedny

Licensed NY cannabis dispensaries, brands, deals, license checks and lab-anchored reviews. No auth.

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

BrickTrack au.bricktrack/portfolio

Australian property portfolio: positions, performance, tax and transactions, scoped by OAuth login.

Rose Bounty org.agttglobal/rose-bounty

AI-agent trust infrastructure for discovery, authority, execution, verification, and receipts.

Stablecoin Scanner com.achivx/stablescan

Stablecoin risk for agents: freezes, OFAC, exposure, allowances, transfers, graph. 7 chains.

guide-registry guide.officeleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

OpenRevenue com.openrevenue/mcp

OpenRevenue analytics MCP: projects, stats, visitors, funnels, and goals via API key or OAuth.

Catches leaked credentials and PII in outbound LLM prompts

IT Security — Access Change Request Recertify — Alder Court Partners (b578285f) com.a2awire/benchmark-access-change-request-recertify-2026-09-15-b578285f

12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m

NAIF Gravity Diagnostic — Free MCP/API/Webhook Triage com.naifgravity/diagnostic

Free MCP, API auth, webhook and schema diagnostics with bounded checks and safe quote routing.

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

arctic qpon.arctic/arctic

Read Robinhood Chain live: scan a token, trace its deployer, list new launches.

Xtracticle com.xtracticle/xtracticle

Read public X (Twitter) posts, threads and X Articles as clean Markdown. Read-only, no auth.

Pay-per-call x402 gateway: agent tools, OpenAI-compatible LLM, market data, RPC, security audits.

WebStartHub services com.webstarthub/services

Public services, guide/FAQ search and estimates. Inquiry drafts require scoped authentication.

insumer com.insumermodel/insumer

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Free local micro-APIs: markdown cleaner, JSON validator, CSV-to-JSON, agent-config secret auditor.

numberRank dev.numberrank/numberrank

Is a phone number VoIP or a real carrier line? Line type, score and grade, free, no auth.

Median books com.medianfi/books

Read-only access to a Median customer's ledger, financial reports and transactions. OAuth sign-in.