Search a curated directory of agent tools, MCP servers, APIs, protocols and skills. No auth.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

DeepSeek Harness coding-subscription OAuth: SuperGrok/Grok Build, ChatGPT Plus Codex, Kimi Code, Claude Code. Fixes AUTH API key is invalid, INVALID_REPLAY_STATE, grok-4.6 xhigh, Kimi Bearer vs x-api-key.

Ecommerce email MCP for Shopify/Woo — campaigns, automations, popups, analytics. OAuth.

掌上 dsh — the standalone mobile surface for the dsh web GUI: scan-to-pair device trust, the /m/ phone UI, the /m/api RPC channel with realtime SSE mux bridge, and a polished desktop pairing panel. Extracted from dsh-remote-web-ui (M1, behavior-identical)

A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabilities with a per-class knowledge base, chains findings into escalations, verifies real impact, and reports to README/JSON/SARIF/doc/PDF.

Use when writing Playwright tests, fixing flaky tests, debugging failures, implementing Page Object Model, configuring CI/CD, optimizing performance, mocking APIs, handling authentication or OAuth, testing accessibility (axe-core), file uploads/downloads, date/time mocking, WebSockets, geolocation,

Invoicing, expenses, accounting analytics. OAuth 2.1 dynamic client registration, no API key.

Gate a build on browser fingerprint regressions with liarjs - save a baseline scan as JSON, diff later runs against it, and fail the job when the consistency score falls below a floor. Use when asked to add a fingerprint or headless-detection check to GitHub Actions, GitLab CI or another pipeline, t

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

Convex code reviewer — security, auth, validators, performance, and pattern checks for code in a convex/ directory. Use to review or audit Convex functions before shipping.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Enables Claude to brief self-hosted GrokBot bots through their webhook routines and then collect their replies in the same thread, with tools for waiting on replies, checking the inbox, and reading conversations. It includes a self-hosted dashboard for registering bots, managing encrypted webhook keys and tokens, and connecting Claude apps over OAuth or API tokens.

Enables agents to analyze OpenAPI contracts for deterministic integration risks, plan auth, sync, action, and webhook candidates, and diff contract versions for likely breaking changes through read-only tools.

Enables Claude and ChatGPT to manage Motion tasks through one shared API core, including capturing next actions, preserving resume context, checking duplicates, and reporting scheduling health. It serves local stdio clients and OAuth-protected Streamable HTTP clients.

Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

Enables Claude to read and manage Apple Business API resources such as devices, device management services, users, groups, apps, blueprints, configurations, and audit events through OAuth 2 authentication. Write and destructive operations are gated behind flags and require a two-step preview-and-confirm flow, with guardrails and local audit logging.

Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.

Enables agents to retrieve structured, pre-published readings of the current geopolitical-risk picture, with in-band freshness and staleness metadata, through a no-auth read-only endpoint.

Build and publish static sites on Dotsy with draft-first MCP tools, OAuth Connect, and API keys.

Make podcast episodes, series and shows from your mail, notes, files and code. Sign in with OAuth.