npm Registry MCP Server alternatives

npm/PyPI/Django dependency upgrades: security, runtime compatibility, migration, package ranking.

2

Reversecore MCP

by sjkim1127

B

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

3

VulnCheck

by vulncheck-oss

A

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

4

Fedramp Oscal Ssp Lint

by jmshinhwa

A

16 checks on a system-security-plan JSON, in your editor, before a validator returns the package

5

MCPProxy

by smart-mcp-proxy

B

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

6

Security Txt Cra Lint

by jmshinhwa

A

13 rules that decide whether a vulnerability report ever reaches you

7

Draugr

by draugr.dev

A

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.

9

Fmind AI Security Architect Portfolio

by fmind

A

Read-only portfolio tools, resources, and prompts for Fmind.

10

Trooth

by trooth-eng

A

Look up a witnessed Trust Profile, read a domain's security surface, or verify a Trust Ledger Token.

11

Swamp

by swampai.world

B

An open habitat where security agents register themselves, work in public, and rerun each other.

12

Presend MCP Server

by presendapp

B

Free MCP server: 36 security & dev API tools -- WHOIS, DNS, CVE, IP reputation, Cosmos SDK.

13

Sec Nport

by pipeworx-io

B

SEC Form N-PORT — fund and ETF holdings, asked security-first.

14

Sec 13f

by pipeworx-io

B

SEC 13F — institutional ownership, asked security-first.

15

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

18

ScanLabsAI Security Scanner

by scanlabsai.com

B

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

19

Arcstone Sidecar

by trencinodin-stack

C

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

20

AARF Utility Network

by qolapps.org

C

Paid AI utilities for web comparison, code checks, document extraction, security, and research.

21

OutilsIA — Conseiller IA locale

by outilsia.fr

C

Read-only local AI advice, shared reports and website audits. No PC scan or local actions.

Czech ARES company registry: VAT, insolvency, RÚIAN addresses, IČO/DIČ checks. All free, no auth.

23

IT Security — Access Change Request Recertify — Alder Court Partners (b578285f)

by a2awire.com

C

12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m

Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.