MCP Server Directory

Black Label Customer Tools com.blacklabelbots/customer-tools

OAuth access to owned products, lead search, parcel search, and stored property audits.

slopcheck com.edgethirteen.www/slopcheck

Check a YouTube channel's recent uploads against YouTube's 2026 inauthentic-content policy.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

Bootlace AI SpendMap io.github.mtardy90-sudo/bootlace-ai-spendmap

Free-trial AI fleet spend meter. 100 calls or 14 days. No auth.

Claude Connector for Odoo io.github.technovision-dev/odoo-claude-connector

Permission-aware MCP server for Odoo 18/19. OAuth 2.1; each call runs as one named Odoo user.

SofortFax – Faxen mit KI (Login) de.sofortfax/fax-oauth

Fax from ChatGPT/Claude with OAuth sign-in: pay per fax or KI credits. DE/AT + 40 countries.

Agent Skill & Config Security Audit io.github.tylerscomic-lab/agent-skill-audit-mcp

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Agent Verifier guru.packet/agent-verifier

Test and debug your AI agent's Web Bot Auth (RFC 9421) signature: is it valid, and what to fix?

Mochii work graph com.chibitek/mochii

Mochii work graph: projects, tasks, meetings. Stiki OAuth. Not Nexus memory.

Sentry DSN Shape io.github.sadri-dridi/sentry-dsn-shape

Check a Sentry DSN shape. Secret discarded.

TeamShift io.teamshift/teamshift

Read your TeamShift team, tasks and memory via OAuth, or use workspace tools with an API key.

TOTP secret charset, secret discarded io.github.sadri-dridi/totp-shape

TOTP secret charset, secret discarded

MCP Scan — weekly registry health scans app.rowb.mcp-scan/weekly

Weekly scans of MCP servers for availability and consistency, with a public dashboard.

EarningsWatcher com.earnings-watcher/mcp

Options-implied earnings moves, 10y implied-vs-actual history, IV rush/crush, scanner, simulator.

LLM Red-Team Scanner dev.workers.manhliemcn4euwlu.llmrt-companion/llm-red-team-scanner

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

guide-registry guide.photographer/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

guide-registry com.dataengineerprofessional/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Scans agent code for untrusted input poisoning persistent cross-session memory

guide-registry guide.sportscoach/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Reads security headers and CSP line by line in your config file and names the lines that silently do

OpenRevenue com.openrevenue/mcp

OpenRevenue analytics MCP: projects, stats, visitors, funnels, and goals via API key or OAuth.

postingcheck com.edgethirteen.www/postingcheck

Scan a job posting against 16 US state/DC pay-transparency disclosure laws.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.