MCP Server Directory

Dotsy ai.dotsy/mcp

Build and publish static sites on Dotsy with draft-first MCP tools, OAuth Connect, and API keys.

Menlo com.menloinsurance/mcp

Complete a Menlo application, authorize carrier quote requests and answer quote follow-ups.

Malinois app.malinois/scan

Check a live app you own for public databases, leaked keys and exposed files.

Audit architecture, security, memory, and code quality in Flutter, Laravel, Node, Python, & Vue.

Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval

guide-registry guide.independence/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

Automaton Token Safety io.github.baianomarceloeduardo-jpg/automaton-token-safety-mcp

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

ColoringBookify com.coloringbookify/mcp

Create coloring pages and books. OAuth + Business plan required; AI generation uses credits.

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

Puts Approve/Deny on your phone before an agent acts, and waits for your fingerprint.

guide-registry guide.restaurantowner/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Manage FireKey browser profiles and browser lifecycles through an authenticated localhost API.

Avala io.github.avala-ai/avala

Read Physical AI datasets, projects, fleet and quality data. Requires authorized Avala access.

CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts) com.a2awire/data-cisa-advisory-ics-security-alert

CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.

Malwagon com.malwagon/malwagon

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

Injects secrets into shell commands at exec time; plaintext never reaches the LLM context

SpinHire iGaming Jobs io.spinhire/jobs

Live iGaming jobs — casino, betting, studios, affiliates — plus market data. No auth.

guide-registry guide.nonprofitleader/guide-registry

Read-only Bicycle Guide registry: published guides, homes, taxonomy, capability spine. No auth.

PDF to MD io.github.liuyan-wjy/pdf-to-md

Convert PDF documents to Markdown for AI agents through an authenticated remote MCP server.

Pay-per-call x402 services: repo scans, web research, site checks, page text. USDC on Base.

DrugAlpha 创新药投研 io.github.max-nobug/drugalpha-mcp

Company/drug identification and published biopharma catalysts. DrugAlpha OAuth account required.

Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card.

insumer com.insumermodel/insumer

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains.