MCP servers and skills: search, filter by where they run, and compare.
MCP server for CIRCL's Vulnerability-Lookup (CVE Search) — query CVE, CWE, CAPEC and vendor vulnerability data.
Node.jsMIT★ 11No key
Queries and retrieves active security findings, external exposures, toxic combinations, vulnerabilities, threats, and sensitive data risks from Security Command Center on Google Cloud. Use when retrie
OfficialSkillApache-2.0★ 21k in collectionNo key
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching t
OfficialSkillMIT★ 40k in collectionNo key
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills befo
OfficialPythonApache-2.0★ 20kNo key
Claude skill to generate & deploy Tenable Security Center Vulnerability Management and Remediation Planning dashboards and reports
SkillMIT★ 6No key
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "security news about", "attack surface of", "is this IP malicious", "what vulnera
OfficialSkillApache-2.0★ 275 in collectionNo key
MCP server for CVE vulnerability data via NIST National Vulnerability Database API
Hosted by authorMITFew starsNo key
🦡 codebadger is a containerized Model Context Protocol (MCP) server that gives AI agents and LLMs deep, queryable access to a codebase's structure and data flow through Joern Code Property Graphs (CP
SkillGPL-3.0★ 175No key
EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critical asset impact, enforces data residency, verifies suppliers, tracks inc
SkillGPL-3.0★ 13No key
Hardening skill for Solana cross-program invocations (CPI), with first-class coverage of the return-data spoofing exploit class. Claude Code / Codex skill for the Solana AI Kit.
SkillMIT★ 4Few starsNo key
13 production MCP servers for US government data — safety recalls, cybersecurity vulnerabilities, disasters, finance, and more
Hosted by authorMIT★ 6No key
Security analysis platform for Aiken smart contracts on Cardano: 75 detectors, SMT verification, transaction simulation
Node.jsMIT★ 2Few starsNo key
An experimental ModelContextProtocol server connecting LLMs to DefectDojo for AI-powered security workflows. Enables natural language interaction with vulnerability data, simplifies security analysis,
PythonMIT★ 17No key
Cerebro turns security, identity, cloud, SaaS, workflow, policy, and compliance data into evidence-backed context for people, coding agents, and automation.
GoApache-2.0★ 15No key
MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, version, SBOM and lockfile checks, vendor advisories, and per-C
Node.jsMIT★ 7No key
Real-time Python package and vulnerability data for AI coding agents
MCPLink only★ 1Few stars
Australian government open data as dated versions that never change, in the formats you and your AI need.
Hosted by authorAGPL-3.0★ 4Few starsNo key
MCP server exposing SQD Portal blockchain data to AI agents and Claude.
Node.jsMIT★ 2Few starsNo key
Package & dependency intelligence for AI coding agents. Free npm, PyPI and crates.io health, vulnerability, dependency-graph and download data over MCP; consolidated risk scores paid per-call in USDC
Node.jsMITFew starsNo key
Fairquery Agent Trust & Data Safety MCP: PII/secret redaction, email validation, sanctions screening, OSV vulnerability checks for AI agents. Free local tools + optional paid deep tools.
Node.jsMITFew starsNo key
Evidence-backed Solana audit skill for Claude Code and Agent Skills: report-backed taxonomy, workflows, checklists, and public finding corpus for Anchor and native Solana security reviews.
SkillMIT★ 4Few starsNo key
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
Hosted by authorNo licenseFew starsNo key
MCP server for managing Apidog test cases, scenarios, suites, and test data
Node.jsMIT★ 1Few starsNeeds a key
Zero-dependency skill sanitizer — scans agent skill markdown for prompt injection, jailbreaks, data exfiltration, and other red flags before installation.
SkillMITFew starsNo key
Who stands behind it
