20,670 servers from the official MCP Registry, GitHub, npm, PyPI, Docker, and Smithery. 14,035 are remote. 111 answered with a tool list. Official registry servers show an Official badge. They sit in this list with everyone else.
Code review as an MCP server — structured reviews with OWASP security scanning.
MCP Server for understanding, managing & troubleshooting your GCP environment.
Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.
Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
Official GrabzIt MCP server for AI web scraping, screenshots, and PDF/DOCX generation.
Non-custodial USDC wallet on Base with spending limits enforced in code, not in a prompt.
Abnormal Security MCP: threats, search, remediation, ATO cases, vendor/BEC, and evidence download.
MCP server for Openlane GRC: controls, evidence, policies, risks, workflows, and approvals.
OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit
Query GreptimeDB metrics, logs and traces with SQL, TQL and RANGE. Manage pipelines and dashboards.
MCP server for the AniList GraphQL API — anime/manga search, details, and personal list management.
A simple MCP server example written in TypeScript that provides a multiplication tool.
MyAnimeList MCP server: Tenrai-powered reads plus official MAL personal-list management.
Steam store/game data (no key) plus player profiles, libraries and achievements (Steam Web API).
KVKK/GDPR/CCPA compliance checks for codebases
MCP server for Growi Finance — programmatic interaction with the GrowiHFVault on Arbitrum
Live layered dependency map for bottom-up development, drawn by the agent in a terminal pane.
Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs
KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log
DNS record enumeration, misconfiguration and dangling-subdomain detection
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Scans RAG content/scraped pages for indirect prompt injection
Catches leaked credentials and PII in outbound LLM prompts
Baselines an MCP server's tools and detects tool-definition changes after approval
Scans files for leaked secrets and API keys
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
TLS certificate/cipher/protocol inspection
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
Local quantum error correction tools; decoder output verified against H c = s (mod 2).
GoPeak — The most comprehensive MCP server for Godot Engine. 95+ tools, LSP, DAP, screenshots.