Search: audit
Search MCP servers and agent skills by name, description, category or topic — 170 results.
ogasurfproject-jpg/horizon-shield
Third-party auditor for Japanese construction & renovation estimates; flags overcharge and returns Bitcoin-anchored, verifiable signed receipts (PTKA). Remote MCP, no auth.
sailorpepe/undesirables-mcp-server
TCG collectibles + AI agent intelligence. 35+ tools: Vision AI card grading (PSA/Beckett prediction), Monte Carlo price simulation (Heston/Merton/Kou), AI music generation, local image generation (FLUX), TTS, RAG memory, SAST security auditing, and x402 Oracle API. 370K+ indexed products across 25 games. Install via `pip install undesirables-mcp-server`.
atakanelik34/Bilinc
Hosted agent memory that keeps an audit trail. Three tools — `commit_mem`, `recall`, `status` — where each write carries provenance (which run, tool, or operator produced it), contradictions with prior state surface as inspectable changes rather than silent overwrites, and a bad run is recovered from a snapshot instead of repaired by hand. `pip install -U bilinc`
maxaeo/maxaeo-ai-visibility-mcp
Local-first AI visibility, GEO/AEO, and llms.txt audit MCP server for Claude, Codex, Cursor, and other agents. Checks AI crawler access, robots, sitemap, canonical, metadata, noindex, and JSON-LD; returns local-only and technical foundation scores, top issues, and action plans. Install: `npx -y maxaeo-ai-visibility-mcp`.
AgentValet/AgentValet
Identity and credential governance broker for MCP servers. Issues scoped, short-lived credentials per agent to stop credential inheritance. Audit log, human approval gates, AIMS-aligned.
chrbailey/promptspeak-mcp-server
Pre-execution governance for AI agents. Intercepts and validates every agent tool call through an 8-stage pipeline before execution — risk classification, behavioral drift detection, hold queue for dangerous operations, and complete audit trail. 45 tools, 658 tests.
Pentagonal-ai/pentagonal
AI-powered smart contract security forge with 8-agent adversarial pen test. Generate, audit, fix, and compile contracts across 8 chains (Ethereum, Solana, Polygon, Base, Arbitrum, Optimism, BSC, Avalanche). Token intelligence with honeypot detection. x402 USDC payments for autonomous agents.
layervai/qurl-mcp
Mint, resolve, audit, and rotate expiring scope-limited access links (qURLs) for AI agents — secure URL gateway for the qURL API. 9 tools (create / resolve / list / get / delete / extend / update / mint-link / batch-create), 3 resources, 3 guided prompts. stdio transport, OIDC-attested npm provenance.
MARUCIE/authbox
Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access (scope, rate limits, time windows, step-up approval), 70+ API key providers, and hash-chain audit trail. Go + Next.js + TypeScript.
datanexusmcp/mcp-server
55 tools for verified public data lookups — CVE/SBOM security audits, licence compliance, patents, federal contracts, NPI provider lookups, nonprofit 990 filings, and domain intelligence. No API key required.
shyshlakov/pci-dss-mcp
PCI DSS v4.0.1 static-analysis MCP server for Go payment codebases. 12 scanners detect PAN/CVV exposure, weak crypto, missing audit logs, vulnerable deps, TLS misconfig, auth weaknesses, plus CycloneDX 1.6 SBOM generation - each finding mapped to the exact PCI requirement. AI-assisted triage via triage_findings. Keyless-signed multi-arch Docker image on ghcr.io.
ap311036/ews-meeting-mcp
Safely schedule Outlook meetings on on-prem Exchange EWS. Resolves attendees, discovers rooms, suggests slots, and requires preview-confirmed create/update/cancel writes with local credential handling and audit-friendly lifecycle records.
aegis-dq/aegis-dq
Agentic data quality framework that runs structured rules against warehouses (DuckDB, BigQuery, Athena, Databricks, Postgres), diagnoses failures with LLM root cause analysis, and proposes SQL remediations. Every LLM decision is audit-logged with cost and latency.
kascada/logmcp
Read-only log access for AI assistants over HTTPS. Whitelist log files on your Linux server; AI can search and read them without shell access. Token-authenticated, syslog-audited.
toan203/osv-ui
Visual CVE audit dashboard for npm, Python, Go, and Rust. Scan from Claude/Cursor, opens a browser UI for human review (human-in-the-loop), applies fixes with explicit confirmation. Powered by OSV.dev.
MyMedi-AI/mymedi-ai-mcp-server
Healthcare billing AI for agents: ICD-10/CPT/HCPCS code lookup (81,769 codes with RVU + OPPS pricing), prior auth prediction, medical NER, claims validation, denial-risk scoring, HIPAA compliance auditing, and NPI/drug enrichment. 20 tools, 10 free credits then pay-per-call via credits or anonymous USDC (x402). `npx @mymedi-ai/mcp-server`
jamjet-labs/jamjet-policy
MCP stdio interceptor (`@jamjet/mcp-shim`) that applies one YAML policy file (block / require_approval / audit / budget cap) to `tools/call` requests before they reach the real MCP server. The same policy also runs in Claude Code PreToolUse hooks (`@jamjet/claude-code-hook`), OpenAI Agents SDK guardrails (`@jamjet/openai-guardrail`), and JamJet's Python/TS SDKs — `jamjet audit show` tails every de
daedalusdevelopmentgroup/ddg-agent-payable-services
Pay-per-call x402 gateway: one MCP server for 90+ agent tools (utilities, DNS/WHOIS, blockchain RPC, market data, prediction markets, DEX data, security audits) plus an OpenAI-compatible LLM gateway. USDC on Base, free-trial calls per agent. `pip install ddg-agent-services-mcp` or remote `https://mcp.daedalusdevelopmentgroup.com/mcp`.
uxloom-dev/uxloom
Agent-native UI/UX design validation: model user journeys as state machines and prove what AI-generated screens are missing (unreachable states, missing empty/loading/error states, WCAG contrast, touch targets, localization overflow) before code exists — then verify the code implements the contract. Deterministic CI gates (`uxloom check`, `uxloom audit`), one-command setup (`npx uxloom init`).
AIops-tools/Nutanix-AIops
Governed Nutanix Prism Central v4 operations — cluster, VM (AHV + ESXi), storage, networking, snapshot/DR, alerts, and LCM (51 tools) with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.
RajeevSirohi/mcp-server-terraform
Safety-first Terraform operations: plan/apply/destroy with two-step confirmation gates, plan risk & cost analysis that flags expensive always-on resources (NAT gateways, EKS, Azure Firewall), drift detection, import/taint/refresh, provider auth pre-flight checks, and audit logging.
ankitkapur1992-hlido/hlido-mcp
Independent trust scores, claim audits, and comparisons for AI agents — queryable by your agent over MCP. Hosted Cloudflare Worker at hlido.eu/mcp (no install). Returns a 0–100 score, tier verdict, per-claim PASS/FAIL audit, and signed evidence for a reviewed agent. From [Hlido](https://hlido.eu).
BrianRWagner/ai-marketing-skills
17 marketing frameworks for cold outreach, homepage audit, social cards, and more
AutomateLab-tech/ai-seo-mcp
AI-SEO / AEO / GEO audit MCP for any public URL. Scores schema.org coverage, robots.txt and llms.txt health, canonical and OpenGraph setup, and AI-citation likelihood; suggests rewrites tuned for Answer Engine and Generative Engine surfaces. No vendor keys, no crawls of private data. Install: `npx -y @automatelab/ai-seo-mcp`.
rudraneel93/mcp-guardian
Security and governance proxy for MCP infrastructure. Enforces YAML-configurable policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features include OAuth 2.1/OIDC with RBAC, web dashboard with Prometheus metrics, payload normalization against encoding bypasses, semantic shell AST analysis, mTLS zero-trust netw
inkog-io/inkog-mcp
AI agent security scanner. Audits MCP servers for vulnerabilities, detects prompt injection, infinite loops, token bombing, and missing human oversight across 20+ frameworks. Maps findings to EU AI Act, OWASP LLM Top 10.
Vbj1808/retrieval-lens
Black-box flight recorder for RAG retrieval inside MCP agents. Logs chunks, scores, sources and rankings so you can audit, replay and diff retrieval runs.
ppcvote/misp-mcp-server
MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via [prompt-defense-audit](https://github.com/ppcvote/prompt-defense-audit). 8 read-only threat-intel tools (events, attributes, search, tags, feeds, galaxies). Scans every MISP response for adversarial seeding before returning to LLM. Tracks [MISP/MISP#10745](https://github.com/MISP/MISP/issues/10745). M
helbertparanhos/n8n-pro-mcp
Full-instance management for self-hosted n8n including queue mode: workflows, executions, tags, credentials, variables, projects, users, security audit and health monitoring (51 tools).
farukkolip/instapdown-mcp
Instagram creator toolkit MCP with 16 tools: Reels / video / Story / carousel / photo / profile-pic downloaders, Reels-to-MP3 audio extractor, engagement health check + weighted engagement-rate calculator, live hashtag search + 25 curated niches + creator hashtag audit, 900 Reels hook templates by niche and country, 22 Unicode font styles, best-time-to-post for 17 markets (Buffer 2026 verified dat
mambalabsdev/mcp-domain-deliverability-checker
Audits a domain email deliverability: SPF, DKIM, DMARC, MX, mail provider, DNS blacklist, catch-all, and domain age, returning a 0-100 health score via an Apify actor.
malinoto/tracepass-mcp-server
EU Digital Product Passport automation for AI agents. Create products, build and audit DPPs (battery, electronics, textiles, and more), set economic-operator parties, and read or capture GS1 EPCIS 2.0 supply-chain events via the TracePass platform. 6 tools, hosted (`https://ai.tracepass.eu/mcp`) or local. Install via `npx -y tracepass-mcp-server`.
vatnode/vatnode-mcp
Official MCP server for **EU VAT validation** via the EU Commission's VIES service + offline VAT rates for 45 European countries. Five tools: `validate_vat_number` (live VIES with company name, address, registration date, and optional consultation number for audit), `get_country_vat_rates`, `list_eu_vat_rates`, `check_vat_format`, `list_supported_countries`. Four of five tools work offline without
afghanfansmedia-ai/songcheck-mcp
Is this song AI or human? Detect AI-generated music (Suno, Udio) and media from any AI agent. Returns a verdict, AI-probability score, confidence, and provenance signals (Content Credentials / SynthID), plus scan_catalog to audit a whole music folder.
blinkingbit-oss/execkit
Stateful, structured, auditable shell sessions for AI agents over local, SSH, and Docker. Secret redaction, output budgeting, SSH host-key verification, and a loopback read-only browser viewer that streams the live transcript.
narekmalk/safedb-mcp
Secure MCP server for safe, read-only DB access by AI agents, with SQL guardrails, table allowlists, PII masking, and audit logs.
Nishant-Chaudhary5338/mcp-toolkit
9 MCP servers for React + TypeScript development automation — component scaffolding, dependency auditing, WCAG accessibility checking, test generation, TypeScript enforcement, and monorepo management. 134 tests, CI on Node 20+22.
forgemeshlabs/coinopai-mcp
Local stdio MCP server for x402-powered paid crypto intelligence: preflight checks, trade decisions with `decision_id`, later audit against real prices, risk state, signal history, and agent automation search over USDC micropayments on Base.
helbertparanhos/resend-email-mcp
The most complete Resend email MCP — full API coverage (75 tools) plus a unique debug/diagnostics layer: deliverability analysis, DNS troubleshooting, email inspection, bounce explanation, and account audit. `npx -y resend-email-mcp`.
vinaybhosle/agentstamp
Trust intelligence for AI agents — identity stamps, reputation scoring (0-100), registry, forensic audit trails, and A2A passports via x402 micropayments.
06ketan/substack-ops
Substack with **zero AI API keys**. 26 tools (posts, notes, comments, replies, reactions, restacks). Host LLM drafts via `propose_reply` → `confirm_reply` tokens. SQLite dedup, JSONL audit, dry-run default. Install: `uvx substack-ops mcp install cursor`.
Startvest-LLC/idealift-mcp-server
Decision intelligence MCP server with signal aggregation, RICE scoring, and decision audit trails. Captures product feedback from Slack, Teams, Discord, and GitHub.
girste/mcp-cybersec-watchdog
Comprehensive Linux server security audit with 89 CIS Benchmark controls, NIST 800-53, and PCI-DSS compliance checks. Real-time monitoring with anomaly detection across 23 analyzers: firewall, SSH, fail2ban, Docker, CVE, rootkit, SSL/TLS, filesystem, network, and more.
PCDCK/ozon-mcp
Knowledge-rich MCP server for the full Ozon Seller + Performance API (466 methods, 15 MCP tools). Auto-pagination over 4 cursor styles, subscription-tier pre-flight, rate-limit management with exponential back-off, and 13 curated analytical workflows (OOS risk, cabinet health, content audit, pricing, warehouse distribution). Russian + English BM25 search across the catalog.
AIops-tools/Postgres-AIops
Governed PostgreSQL DBA operations — slow-query, bloat, and blocking-lock RCA, index management, vacuum/analyze, and replication lag (35 tools) with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.
aos-standard/mcp-blast-radius
MCP Blast-Radius Auditor — static blast radius extraction and AOS `manifest.json` divergence gate (Oracle / Permitted / Prohibited). Stdio MCP (`mcp-blast-radius`) plus CI blocking gate (`mcp-blast-radius-gate`). Install: `pip install mcp-blast-radius==0.2.0` · [PyPI](https://pypi.org/project/mcp-blast-radius/0.2.0/)
sukrutkrdg/x402-bazaar-mcp
The Base token-safety toolkit for agents: the only B20 (Base-native token) freeze/seize/rug suite, plus pre-trade GO/HOLD/STOP gates, honeypot/sellability, wallet + approval audits, sign-guard, prices and Claude-written AI reports. 90+ pay-per-call tools over x402 (USDC on Base), free tier, no API keys. `npx x402-bazaar-mcp`
getaegis/aegis
Credential isolation proxy for AI agents. Injects secrets at the network boundary with domain restrictions, agent authentication, and audit logging. No SDK required — works as a transparent HTTP proxy or MCP server.