security-headers-csp-lint alternatives

1

MCPProxy

by smart-mcp-proxy

B

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

2

dns-doctor

by dnsdoctor.dev

A

Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.

3

Reversecore MCP

by sjkim1127

B

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

4

secobserve-mcp

by nh4ttruong

B

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

5

Draugr

by draugr.dev

A

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

6

VulnCheck

by vulncheck-oss

A

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

7

Trooth

by trooth-eng

A

Look up a witnessed Trust Profile, read a domain's security surface, or verify a Trust Ledger Token.

8

Swamp

by swampai.world

B

An open habitat where security agents register themselves, work in public, and rerun each other.

9

Presend MCP Server

by presendapp

B

Free MCP server: 36 security & dev API tools -- WHOIS, DNS, CVE, IP reputation, Cosmos SDK.

10

Sec Nport

by pipeworx-io

B

SEC Form N-PORT — fund and ETF holdings, asked security-first.

11

Sec 13f

by pipeworx-io

B

SEC 13F — institutional ownership, asked security-first.

12

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

14

Electron MCP Server

by YawLabs

B

Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

16

paxaver-mcp

by Smartoire

B

MCP adapter for the Paxaver school community platform. Streamable HTTP, OAuth 2.1, capability auth.

17

mcp-ticket-demo

by markusvankempen

B

MCP server demo — tickets, schema discovery, auth, and PII gating. stdio + HTTP.

18

arcstone-mcp-sidecar

by trencinodin-stack

C

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

19

b/cited

by bcited.ai

B

AEO tools: scan any URL for AI-citation readiness, read the public leaderboard and citation panel.

20

Katla

by katla.app

B

GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.

21

AARF Utility Network

by qolapps.org

C

Paid AI utilities for web comparison, code checks, document extraction, security, and research.

22

SpinHire iGaming Jobs

by spinhire.io

C

Live iGaming jobs — casino, betting, studios, affiliates — plus market data. No auth.

23

numberRank

by numberrank.dev

C

Is a phone number VoIP or a real carrier line? Line type, score and grade, free, no auth.

Signed proof-of-time, 30-day stash, live NOAA surf data. No auth. The hut keeps honest clocks.