- Conduid
- Marketplace
- cognis-digital
MCP servers by cognis-digital
cognis-digital publishes 91 live MCP servers on GitHub. Listed by trust score; the score reflects each repository's own health, security checks, and documentation.
Oraclewatch
Monitors price-oracle feeds for staleness, deviation, and manipulation exposure, simulating TWAP/spot attack profitability per pool.
Phiscrub
Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
Storagelens
Diffs and decodes contract storage layouts across proxy upgrades to catch storage-collision and uninitialized-slot bugs.
Introbot
Find warm-intro paths through your team's combined network graph and draft double-opt-in intro requests from a single contacts manifest.
Trackblock
Family phone stalkerware audit — MVT-class iOS/Android forensics
Lineagemap
Column-level lineage extracted from SQL and dbt
Promptmirror
Prompt-injection & indirect-injection scanner for any LLM context input
Toolguard
Runtime allowlist and policy for agent tool-calls
Envdoctor
.env validator, secret-presence and config-drift checker
Frameworkmap
Crosswalk controls across NIST, ISO 27001, SOC 2, CMMC, PCI
Dirsight
Analyze web content-discovery output (ffuf/gobuster) into ranked endpoints
Auditrail
Tamper-evident audit-log aggregator with hash-chained attestation
Ghaudit
Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
Graphqlmap
Analyze GraphQL introspection for risky fields, depth, and authz gaps
Cspbuilder
Generate and audit a Content-Security-Policy from a page's resources
Dnsaudit
DNS posture & misconfiguration scanner — SPF/DKIM/DMARC/DNSSEC/CAA
Semsift
Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
Depgraph
Dependency risk visualizer — Scorecard + OSV + typosquat + maintainer signals
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Promptpack
Versioned prompt / template registry with A/B and rollbacks
Edrgap
EDR coverage & bypass detector — reconciles MDM + EDR + AD inventories
Redpath
Active Directory attack path mapper — minimum-cost paths + remediation priority
Iso20022
Validates, lints, and diffs ISO 20022 / pacs / camt payment messages and translates legacy MT into MX with schema-aware errors.
Adversa
LLM red-team harness — OWASP LLM Top 10 + MITRE ATLAS attack packs
Statuskit
Self-hosted status page with incident timeline and subscribers
Prefetchparse
Surface program-execution evidence from Windows Prefetch exports
Hallumark
LLM hallucination & grounding auditor for RAG systems
Checkpoint AI
NIST AI RMF / EU AI Act / ISO 42001 self-assessment & SSP generator
Cipherdetect
Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
Ttphunt
Hunt MITRE ATT&CK techniques across logs with a rule pack
Runbookgen
Incident runbook and SOP generator from templates
Rugradar
Rug-pull, token-safety and honeypot risk checks for Solana and EVM tokens. $0.01 per call.
Apiseclint
Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
Iamlint
Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations
S3sniff
Flag risky cloud-bucket ACLs/policies from a listing or policy JSON
Quotecraft
Proposal / quote / SOW generator — YAML to branded PDF
Certpatrol
TLS cert lifecycle & rogue-issuance watch via Certificate Transparency
Claimtrace
Misinformation provenance tracer — earliest-known appearance graph
Coldforge
Render personalized cold-outreach sequences from Markdown templates + a contacts CSV, with spam-score linting and per-send dry-run preview.
Mcpauth
Drop-in token-auth gateway in front of unauthenticated MCP servers