2959 Model Context Protocol servers — searchable, rated, ready to install.
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Catches leaked credentials and PII in outbound LLM prompts
Read Alkemata articles and maps; submit reviewed proposals; create map content with authorization.
Check actions against fixed values using supplied numeric facts. Never authorizes or executes.
OAuth CRM tools for companies, deals, campaign insights and contact creation in FirstSales.
Authorizes MCP tool calls against a session policy, not one call at a time.
Stateless TS/JS compiler facts for agents: references, imports, impact. No repo index or OAuth.
Free local micro-APIs: markdown cleaner, JSON validator, CSV-to-JSON, agent-config secret auditor.
Decode, render, validate barcodes: QR, DataMatrix, EAN, UPC, PDF417. All tools free, no auth.
Create dynamic QR codes and re-point ones already printed, with bot-filtered scan analytics.
Read-only access to a Median customer's ledger, financial reports and transactions. OAuth sign-in.
Document AI and headless DMS: OCR, IDP, search, workflows, signatures. EU-hosted, OAuth 2.1.
Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Read Robinhood Chain live: scan a token, trace its deployer, list new launches.
Save, search, read, tag, and organize your bookmarks from AI assistants with OAuth sign-in.
Find the organization behind a MAC address or OUI prefix in the IEEE registries. No auth, no key.
Test and debug your AI agent's Web Bot Auth (RFC 9421) signature: is it valid, and what to fix?
Doppler API: projects, configs, secrets listing and download. Needs service or personal token.
WCAG 2.1 AA accessibility scanner (Playwright + axe-core) with grounded, browser-verified fixes.
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
YouTube discovery, transcripts, library search, and monitors with API keys or OAuth.
Recipes, meal plan, shopping list and pantry from the Stemma iOS app, with per-area OAuth scopes.
Scan a web page's markup for the WCAG failures ADA demand letters cite most often.
POST /mcp