MCP Servers
Model Context Protocol servers that give AI agents access to tools and data — sourced from the official MCP registry and ranked by GitHub stars.
loci
Scoped memory for coding agents: picks the right project, answers in scope, or abstains.
Session Forge
Persistent memory and session intelligence for AI coding assistants. Zero config.
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log
DNS record enumeration, misconfiguration and dangling-subdomain detection
Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Scans agent code for untrusted input poisoning persistent cross-session memory
Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Baselines an MCP server's tools and detects tool-definition changes after approval
Security proxy between an MCP client and server: prompt injection and drift detection
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
io.github.7nashinick/norwegian-data-mcp
Norwegian public data: companies, statistics, exchange rates, addresses, property. Zero API keys.
io.github.930m310n/geomelon-mcp
MCP server for the Geomelon geographic API — stdio and remote HTTP transports
io.github.930m310n/mcp
MCP server for the Geomelon geographic API — stdio and remote HTTP transports