- Conduid
- Marketplace
- #cognis
MCP servers tagged cognis
137 live MCP servers tagged "cognis", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with cognis.
Crmsync
Bidirectional, idempotent sync of contacts/deals between a local SQLite source-of-truth and CRM APIs (HubSpot/Pipedrive/Salesforce) via one config.
Portfan
Summarize and diff nmap XML into prioritized, attackable findings
Ssltriage
Grade TLS config (protocols/ciphers/expiry) from openssl/sslyze output
Localmcphub
Registry, launcher & health dashboard for local MCP servers
Compliance Atlas
Condensed, cross-walked reference for SOC2, ISO 27001, NIST CSF/800-53/800-171, CMMC, GDPR, CCPA, HIPAA, PCI DSS, EU AI Act
Locateanything
Infer where a photo was taken using a local uncensored vision + reasoning model (OSINT/geoint, 100% local)
Cognis Digital
Config files for my GitHub profile.
Edgemesh
Cross-OS federated gateway unifying every OpenAI-compatible inference backend (Cognis fleet, Ollama, llama.cpp, vLLM) behind one /v1 endpoint
Windows Toolkit
Windows power-user starter kit — curated tools, 80+ shortcuts, one-command winget setup
Phishcheck
Score URLs/emails for phishing signals (lookalike, auth, intent)
Dnsrecon
Aggregate DNS recon (records, zone hints, takeover candidates)
Cookieaudit
Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump
Headerscan
Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump
Raisedeck
Build and maintain an investor-update + data-room manifest from a metrics YAML, rendering monthly MRR/burn/runway updates with consistent KPIs.
Baadiff
Scan a repo or infra manifest for HIPAA Security Rule gaps and produce a Business Associate readiness scorecard.
Agentsmith
Config-first scaffolding and orchestration for multi-agent workflows
Mcpscaffold
Scaffolder, validator & test harness for local MCP servers
Payloadlab
Static malicious payload analyzer — PE/ELF/LNK/macro/OneNote
Geoaoi
Area-of-interest geospatial helper: bounding boxes, geofence checks, and change-event diffs from coordinate logs.
Orgchart
Org charts and headcount plans generated from CSV / HRIS export
Vendorvet
Third-party / vendor risk questionnaires with SBOM cross-ref
K8saudit
Audit Kubernetes manifests against CIS-style security rules
Dpiaforge
DPIA and EU AI Act impact-assessment generator
Schemadrift
Schema-change detector and data-contract tests
Yaragen
Generate candidate YARA rules from sample files/strings
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Fhirlint
Validate FHIR R4/R5 resources and bundles against profiles (US Core, etc.) with precise, line-level error reporting.
Obscan
Conformance and security linter for Open Banking / FAPI APIs: validates OAuth flows, consent scopes, and PSD2 endpoints against the spec.
Mevscope
Replays a tx or address history to attribute sandwich, frontrun, and backrun MEV extraction with per-trade loss accounting.
Apidiff
Breaking-change detector for OpenAPI / GraphQL across commits
Paywatch
Recurring-charge and subscription detector from bank/Plaid CSV
Deeplinkfuzz
Fuzzes Android/iOS deep links, intents, and custom URL schemes against an emulator/device to surface unvalidated-redirect, injection, and component-hijack bugs.
Sanctscan
Screens counterparties and transactions against OFAC/EU/UN sanctions lists with fuzzy name matching and explainable hit scoring.
Webhookvty
Verifies and replays signed payment webhooks (Stripe/Adyen/PayPal/Plaid) locally, catching signature, idempotency, and replay-attack bugs.
Probesite
Synthetic uptime and Playwright checks exported to Prometheus
Dripcheck
Lint email sequences and drip campaigns for deliverability: SPF/DKIM/DMARC, link health, unsubscribe presence, and CAN-SPAM/GDPR compliance.
Apkpeek
One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
Honeyurl
Generate canary URLs/tokens + a matcher for trip events
Ssrfind
Find SSRF-prone sinks and unvalidated URL fetches in code
Memtriage
Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
Privacyspoof
AdGuard/uBlock blocklists + UA/geo/cookie/session spoofing with a browser compatibility matrix
Sbomgate
Continuous SBOM diff & vulnerability watch with maintainer-change tracking
Rtosmap
Statically map task structures, stack usage, and ISR call graphs in FreeRTOS/Zephyr firmware to flag stack overflows and priority-inversion risks.
Gasprofiler
Per-opcode and per-function gas profiler that flags unbounded loops, DoS-prone patterns, and regressions against a committed baseline.
Narrativediff
News bias & framing diff across 50+ outlets per event
Embedaudit
Embedding / vector-store drift and poisoning audit
Hookcraft
Generates ready-to-run Frida instrumentation scripts from a YAML intent (e.g. 'bypass SSL pinning', 'dump crypto keys') and verifies they attach to a target process.
Oraclewatch
Monitors price-oracle feeds for staleness, deviation, and manipulation exposure, simulating TWAP/spot attack profitability per pool.
Phiscrub
Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
Storagelens
Diffs and decodes contract storage layouts across proxy upgrades to catch storage-collision and uninitialized-slot bugs.