Explore MCP servers
Discover Model Context Protocol servers from the official registry. Publisher metadata with transparent provenance — not a security certification.
Explore topics and recommendations
Find the right direction
Curated search shortcuts inferred from publisher descriptions, not independently verified capabilities.
Favorites stay in this browser. Save a server to see topic suggestions.
Press / to focus search
Matching servers
34 671 records · Registry listing ≠ independent verification by NexIP
io.github.55tarkun/geojp
io.github.55tarkun/geojp
MCP server for Japan geodata: cadastral lot numbers (chiban) and reverse geocoding, for AI agents.
io.github.4robot/hexadata-tools
io.github.4robot/hexadata-tools
15 deterministic validation tools for AI agents: tax IDs (15 countries), VAT, IBAN, LEI, HS codes.
io.github.4robot/hexadata
io.github.4robot/hexadata
Official public data as MCP tools: EU/US tenders, NPI Registry, UK Companies House, Mexico data.
io.github.4rgon4ut/sutra
io.github.4rgon4ut/sutra
Context Engineering Engine. Provides cognitive tools, memory structures, and agent patterns.
io.github.4hmetuyar/vulnerability-scanner
io.github.4hmetuyar/vulnerability-scanner
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
io.github.4hmetuyar/vector-store-scanner
io.github.4hmetuyar/vector-store-scanner
Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data
io.github.4hmetuyar/unbounded-consumption-auditor
io.github.4hmetuyar/unbounded-consumption-auditor
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
io.github.4hmetuyar/toxic-flow-auditor
io.github.4hmetuyar/toxic-flow-auditor
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
io.github.4hmetuyar/tool-poisoning-scanner
io.github.4hmetuyar/tool-poisoning-scanner
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
io.github.4hmetuyar/ssl-inspector
io.github.4hmetuyar/ssl-inspector
TLS certificate/cipher/protocol inspection
io.github.4hmetuyar/slopsquat-scanner
io.github.4hmetuyar/slopsquat-scanner
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
io.github.4hmetuyar/security-suite
io.github.4hmetuyar/security-suite
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
io.github.4hmetuyar/security-proxy
io.github.4hmetuyar/security-proxy
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
io.github.4hmetuyar/secret-scanner
io.github.4hmetuyar/secret-scanner
Scans files for leaked secrets and API keys
io.github.4hmetuyar/rug-pull-detector
io.github.4hmetuyar/rug-pull-detector
Baselines an MCP server's tools and detects tool-definition changes after approval
io.github.4hmetuyar/prompt-leak-scanner
io.github.4hmetuyar/prompt-leak-scanner
Catches leaked credentials and PII in outbound LLM prompts
io.github.4hmetuyar/prompt-injection-scanner
io.github.4hmetuyar/prompt-injection-scanner
Scans RAG content/scraped pages for indirect prompt injection
io.github.4hmetuyar/oauth-auditor
io.github.4hmetuyar/oauth-auditor
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
io.github.4hmetuyar/model-scanner
io.github.4hmetuyar/model-scanner
Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
io.github.4hmetuyar/memory-poisoning-scanner
io.github.4hmetuyar/memory-poisoning-scanner
Scans agent code for untrusted input poisoning persistent cross-session memory