US rental market data by zip: rent, cap rates, vacancy, hazard risk, rent trends. Free, no auth.

Discover, plan and run tools across your connected business systems through one OAuth MCP endpoint

Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data,

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

Sets up, manages, queries, and configures Cloud Firestore databases (Standard/Enterprise edition), including data modeling, security rules, indexes, and SDK integrations (Web, Python, iOS, Android, Flutter). Use when creating/listing Firestore databases, defining data models/indexes, writing SDK que

Use when the user wants to provision infrastructure or third-party services using Stripe Projects. Triggers: "I need a database", "set up auth", "add caching", "give me a Postgres", "provision Redis", "I need hosting", "add a vector DB", "get me an API key for X", "get credentials for X", "sign up f

Ephemeral data sandbox for AI workflows with guardrails and security

Enables AI assistants to import Canva share links as editable templates, read and update template layers (text, images, positions, styling), and render PNG, JPEG, WebP, or PDF variants from data — singly or in bulk up to 25 at a time. Connects via a remote OAuth endpoint, API key, or local stdio.

MCP server for CVE lookups: EchelonGraph scores, CISA KEV, EPSS, CWE, exploits, version and SBOM checks, vendor advisories, and per-CVE exposure derived from Shodan data. Shodan data is owned by Shodan, which holds its copyright (© Shodan). Keyless.

APICK Korean data, building register, simple-auth lookups, OCR, search, image, video and TTS

Explain an existing Convex app — data model + relationships, public vs internal functions, auth/ownership model, components, a request→data flow — read from the schema and function surface. Read-only.

Explain an existing Convex app — data model + relationships, public vs internal functions, auth/ownership model, components, a request→data flow — read from the schema and function surface. Read-only.

Enables AI assistants to read videos, official subtitles, comments, private messages, and live room/danmaku data, plus scan-QR login and admin-approved sending of replies, comments, and danmaku with writes disabled by default.

Gives any MCP client read-only access to Hyperliquid HIP-4 outcome market data from every deployer, including order books, fair lines with their sources, rule comparisons across deployers listing the same question, and the newest listings. Also surfaces fee-adjusted edge figures and listing order so users can scan markets, price questions, and check rule consistency.

Enables Claude to answer business questions against a company's retail database — sales summaries, top customers, inventory alerts, customer profiles, and plain-English queries — through read-only SQL tools plus a schema resource and reporting prompt. Access is governed by OAuth 2.1 roles and scopes, column-level PII masking, a SQL guard, rate limits, and audit logging.

Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.

Read-only Market Brew search engine modeling and AI visibility data via OAuth.

Australian NEM battery (BESS) data for AI agents: revenue, dispatch, FCAS, events. Free, no auth.

Manage Aderlo Cloud hosting: files, DNS, MySQL/PostgreSQL databases and WP-CLI over OAuth scopes.

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory safety, PII in logs, STRIDE/DREAD threat modeling, plus `gosec` SAST, race detection, and fuzz testing. A

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Ecommerce email MCP for Shopify/Woo — campaigns, automations, popups, analytics. OAuth.

Self-contained DeepSeek Harness (DSH) plugin for Provider/Auth login, model switching, image fallback, token/cost analytics, and same-port Web restart. Useful? A star helps.

Invoicing, expenses, accounting analytics. OAuth 2.1 dynamic client registration, no API key.