Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.
20 servers across security & testing, finance & commerce, developer tools & repos, cloud & devops, email, data science & ml and e-commerce. The largest is Import Guardian.
Security & Testing · Finance & Commerce · Developer Tools & Repos · Cloud & DevOps · Email · Data Science & ML · E-commerce
20 MCP servers, most downloaded first. 20 of 20 are free to start.
Security quick-scan for smart contracts, as an MCP tool and a pay-per-call x402 endpoint. Given an address+chain (or Solidity source) it
Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-references known CVE/GHSA advisories
Live multi-chain on-chain data in ONE call for AI agents: a wallet's portfolio (native + ERC-20 + USD value) across
Audit the LICENSE of every npm dependency before you ship. Resolves each dependency's real license from the live npm registry and flags
Audit a package-lock.json for supply-chain attacks BEFORE npm install. Cross-checks every resolved dependency against the live npm
Live web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does a real TLS handshake to grade
Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…)
Live IP & domain reputation as an MCP tool and a pay-per-call x402 endpoint: geolocation, ASN/organisation, network type
Email & domain deliverability doctor: live SPF, DKIM, DMARC, MX and DNS health check for any domain, as an MCP tool and a pay-per-call x402
Audit a wallet's active ERC-20 token approvals for drain risk — the #1 way DeFi wallets get emptied. Flags unlimited allowances to EOAs
US municipal development cost: aggregated impact + water/sewer tap fees per jurisdiction
The rest either hold an API key issued by the publisher or ask for nothing.
Listed without a verification tick. Read the listing before installing.