Explore MCP Servers & Agent Skills

io.github.4hmetuyar/tool-poisoning-scanner

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

io.github.4hmetuyar/ssl-inspector

TLS certificate/cipher/protocol inspection

io.github.4hmetuyar/slopsquat-scanner

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

io.github.4hmetuyar/security-suite

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

io.github.4hmetuyar/rug-pull-detector

Baselines an MCP server's tools and detects tool-definition changes after approval

io.github.4hmetuyar/oauth-auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

io.github.4hmetuyar/model-scanner

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

io.github.4hmetuyar/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

io.github.4hmetuyar/mcp-config-auditor

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

io.github.4hmetuyar/llm-redteam

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

io.github.4hmetuyar/dependency-auditor

CVE scanning for npm/pip/cargo dependencies via OSV

io.github.4hmetuyar/db-gateway

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

io.github.4hmetuyar/ai-code-scanner

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

io.github.4hmetuyar/agent-graph-auditor

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

io.github.4hmetuyar/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

io.github.Servosity/superops-mcp

Every SuperOps PSA+RMM entity in your terminal, plus a local SQLite mirror that answers

io.github.4hmetuyar/unbounded-consumption-auditor

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

io.github.Thingscorp/thatmgmt-mcp

MCP server for ThatMgmt: domain availability, quotes, registration prep. Crypto checkout.

io.github.liza-studio/skillmem

Skill memory for coding agents: learn, recall, reinforce, decay. Local SQLite, no API key.

io.github.Servosity/datagate-mcp

DataGate telecom billing lookups - customers, agreements, invoices, and more - for any MCP agent.

io.github.loopg/pramana-mcp

Read your recorded AI agent runs, and what changed when you swapped a model or prompt.

io.github.Servosity/cove-mcp

Fleet-wide Cove Data Protection backup health, billing, and storage trends from your terminal.

io.github.CapMonsterCloud/capmonster-mcp-captcha-solver

CapMonster Cloud MCP server — AI captcha solver for reCAPTCHA, Turnstile & DataDome for AI agents.

io.github.nanisadw3/banxico

Mexico's official economic data from Banxico: USD/MXN, inflation, UDIS, TIIE and reserves.