MCP Server Directory

Secret and credential management MCP — securely store, retrieve, manage API keys and tokens

auth-token-service io.github.mikerawsonnz/auth-token-service

Hash passwords with bcrypt and issue/verify JWT session tokens over A2A + MCP.

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Bright Security io.github.NeuraLegion/mcp

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

nexus-mcp io.github.nexus-api-lab/nexus-mcp

Japanese LLM security — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free.

Analyze repos of any size - security scanning code analysis monorepo support

Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.

TomeVault io.github.olijboyd/tomevault

Check AI instruction files, look up a company's record, and keep a dated record of your own.

Security-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools

Post-quantum secrets manager for AI agents. ML-KEM-768 + X25519 + AES-256-GCM.

Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.

Airports io.github.pipeworx-io/airports

Airports MCP — wraps AirportGap API (free, no auth required), plus a D1 copy of the OurAirports…

Search 200M+ papers, authors, citations, and recommendations via Semantic Scholar

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

ArchGraph dev.archgraph/mcp

Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.

Governs what AI agents do: tool calls, SQL, commands, files checked against policy before they run.

Datacite io.github.pipeworx-io/datacite

DataCite MCP — DOIs for research datasets (free, no auth)

Myagi - Open Agent Registry bot.myagi/openagent-registry

Score any website's AI-agent readiness. Open Agent Registry scanner + platform tools.

x402-paid domain verification for AI agents — trustscore, SSL, security headers, robots.

Exchange io.github.pipeworx-io/exchange

Exchange MCP — wraps the Frankfurter currency exchange API (free, no auth)

YouTube transcripts, metadata, timestamps, and AI summaries for AI agents. Auth: x-api-key.

Github io.github.pipeworx-io/github

GitHub MCP — wraps the GitHub public REST API (no auth required for public endpoints)

Trainzilla Coach MCP io.github.Trainzilla/trainzilla-mcp

Manage clients, plans, sessions, habits, and billing on Trainzilla via one-click OAuth.