MCP server for CVE lookups: EchelonGraph scores, CISA KEV, EPSS, CWE, exploits, version and SBOM checks, vendor advisories, and per-CVE exposure derived from Shodan data. Shodan data is owned by Shodan, which holds its copyright (© Shodan). Keyless.

Health check for React Native and Expo apps: upgrade blockers, App Store and Google Play rejections, crash risks, security (OWASP MASVS), accessibility and performance, with a step-by-step upgrade plan.

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Clerk authentication router. Use when user asks about Clerk CLI operations, adding authentication, setting up Clerk, custom sign-in flows, Swift or native iOS auth, native Android auth, Next.js patterns, React patterns, Vue patterns, Nuxt patterns, Astro patterns, TanStack Start patterns, Expo patte

Exposes JSON-RPC 2.0 tools that let AI agents scan Base L2 lending positions approaching liquidation, simulate flash-loan-backed debt rescue plans, and generate the calldata needed to repay Morpho Blue and Aave v3 debt while avoiding the 5% penalty. Agents and builders can also attach a referral wallet to collect an instant 0.05% USDC revenue share paid atomically in the same block.

Connects to LibTV's canvas and media platform to create and edit canvases and nodes, generate images, videos, audio and speech, manage screenplays and storyboards, and run timeline edits and exports. Authorization happens once via a WeChat QR scan using OAuth 2.1 with PKCE, after which tokens are stored locally and refreshed automatically.

Enables agents to probe URLs and classify bot-wall responses with vendor and signal evidence, perform offline classification, scan for exposed key-like material, and run owner-side access audits through stdio tools.

Exposes explicitly approved local Windows stdio and loopback HTTP MCP backends through a single OAuth-protected remote HTTPS MCP endpoint, letting a mobile AI client invoke whitelisted tools with namespacing, PKCE-based authorization, and per-tool permissions.

Turns any OpenAPI 3.x spec into an MCP server that exposes one validated tool per API operation, so AI agents can discover and call a REST API over stdio or Streamable HTTP. It is read-only by default, with allow/deny lists, environment-based auth, timeouts and response truncation for safe agent access.

Enables auditing GitHub Actions workflows for security problems directly from an MCP client, returning a risk score and findings with file:line evidence, attack narratives, and fixes. Also exposes the full rule catalog and a one-call demo that writes and scans a deliberately broken workflow.

Enables building zero-dependency Model Context Protocol servers over the Streamable HTTP transport, exposing typed tools, resources and URI templates, prompts, background tasks, and OAuth-protected endpoints. It can be mounted into FastAPI, Starlette, Flask, Django or any ASGI/WSGI app, or run standalone on the Python standard library alone.

Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

Interrogez vos projets ArchiCollab : plans, annotations, équipe. Répondez et exportez le PDF. OAuth.

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.