io.github.4hmetuyar/elicitation-auditor: MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Registered services and components
AI services, agent skills, MCP servers and open-source AI tools are recorded as separate kinds. Filter by kind, status and order, and open an entry to see its official source and last-checked date.
457 AI services currently indexed (discovery and verification are continuous)
Counted as one 'service' per product a user selects and contracts for (not per vendor). See /methodology for how we count and verify.
Verified: 0 / Partial: 457 / Unknown: 0 / Last successful registry snapshot: 2026-11-08 23:50:35
Indexed by kind: AI services 457 / Agent skills 61 / MCP servers 33944 / Open-source AI tools 8321
Global discovery: last run 2026-11-09 01:53 UTC / next run due now (next scheduled run)
Updating the directory…
33944 entries (showing 11461–11490)
io.github.4hmetuyar/llm-redteam: Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
io.github.4hmetuyar/mcp-config-auditor: Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
io.github.4hmetuyar/mcp-server-auditor: Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
io.github.4hmetuyar/memory-poisoning-scanner: Scans agent code for untrusted input poisoning persistent cross-session memory
io.github.4hmetuyar/model-scanner: Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
io.github.4hmetuyar/oauth-auditor: Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
io.github.4hmetuyar/prompt-leak-scanner: Catches leaked credentials and PII in outbound LLM prompts
io.github.4hmetuyar/rug-pull-detector: Baselines an MCP server's tools and detects tool-definition changes after approval
io.github.4hmetuyar/secret-scanner: Scans files for leaked secrets and API keys
io.github.4hmetuyar/security-proxy: MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
io.github.4hmetuyar/security-suite: Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
io.github.4hmetuyar/slopsquat-scanner: Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
io.github.4hmetuyar/ssl-inspector: TLS certificate/cipher/protocol inspection
io.github.4hmetuyar/tool-poisoning-scanner: Scans MCP tool definitions for hidden instructions and confused-deputy sinks
io.github.4hmetuyar/toxic-flow-auditor: Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
io.github.4hmetuyar/unbounded-consumption-auditor: Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
io.github.4hmetuyar/vector-store-scanner: Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data
io.github.4hmetuyar/vulnerability-scanner: Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
io.github.4lador/leantime-mcp: Unofficial MCP server for Leantime: 42 agent-first tools, backup/restore, dry-run validation
io.github.4R9UN/mcp-kql-server: Execute KQL in AI prompts via NL2KQL with schema discovery and Azure Data Explorer integration
io.github.4rgon4ut/sutra: Context Engineering Engine. Provides cognitive tools, memory structures, and agent patterns.
io.github.54yyyu/zotero-mcp: Search, read, annotate, and add to your Zotero research library, local or web.
io.github.557tggwysr-ui/golfpriceai: Live UK golf equipment prices, price history and genuine price drops from GolfPrice AI.
io.github.55tarkun/geojp: MCP server for Japan geodata: cadastral lot numbers (chiban) and reverse geocoding, for AI agents.
io.github.5ak3t/frontdeskchat: AI front desk for your website: read chats, bookings and analytics, and draft desks you approve.
io.github.5uper0/parley: Multi-party decisions for agents: red lines rejected in code, max-min pick, SHA-256 receipt. Stdlib.
io.github.5zjk5/colorwaykit: Verified color tokens for AI coding agents: one brand hex in, WCAG/APCA-measured themes out.
io.github.6figr-com/jobgpt-mcp-server: Job search automation, auto apply, resume builder, application tracking, and recruiter outreach
io.github.6ixtyy/switchbord: Free live router for paid agent APIs (x402, MPP): the best working seller for a task, plus backups.