diff --git a/README.md b/README.md index 0311b66f6..02a7eb1be 100644 --- a/README.md +++ b/README.md @@ -3187,6 +3187,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [gautam-u/sieve-mcp](https://github.com/gautam-u/sieve-mcp) [![gautam-u/sieve-mcp MCP server](https://glama.ai/mcp/servers/gautam-u/sieve-mcp/badges/score.svg)](https://glama.ai/mcp/servers/gautam-u/sieve-mcp) 🏠 🍎 - Local AI chat history secret scanner for macOS. Finds API keys and secrets leaked into Claude Code, Cursor, Copilot Chat, Cline, Codex, Gemini CLI, and other AI tool transcripts. 9 MCP tools: findings list with redacted previews, boolean secret detection (`sieve_check_text`), placeholder-only redaction (`sieve_redact_text` returns `sieve://project/key`, never raw values), vault-backed command execution, and scan health. Local-only stdio transport, macOS Keychain vault, no plaintext secrets in any tool response. [Mac App Store](https://apps.apple.com/app/sieve-ai-secret-scanner/id6747506504). - [yessGlory17/job-verify](https://github.com/yessGlory17/job-verify) [![yessGlory17/job-verify MCP server](https://glama.ai/mcp/servers/yessGlory17/job-verify/badges/score.svg)](https://glama.ai/mcp/servers/yessGlory17/job-verify) 🐍 ☁️ 🍎 🪟 🐧 - Check whether a recruiter or job offer is a scam before you reply. Extracts entities (company, links, email, phone, wallets) from a pasted message and cross-checks company registration, domain age, look-alike/typosquat domains, phishing & malware blocklists, email deliverability, crypto-scam databases, and Internet Archive history — free OSINT, no API keys. - [shieldly-io/mcp](https://github.com/shieldly-io/mcp) [![shieldly-io/mcp MCP server](https://glama.ai/mcp/servers/shieldly-io/mcp/badges/score.svg)](https://glama.ai/mcp/servers/shieldly-io/mcp) 🎖️ 📇 ☁️ - Official [Shieldly](https://www.shieldly.io) MCP server: `analyze_iam_policy` and `analyze_cloudformation_template` tools flag AWS IAM privilege-escalation paths, wildcards, and over-permissive access. Free demo mode, no signup or API key needed. `npx -y @shieldly/mcp`. +- [OksigeniaSL/checker-mcp](https://github.com/OksigeniaSL/checker-mcp) [![OksigeniaSL/checker-mcp MCP server](https://glama.ai/mcp/servers/OksigeniaSL/checker-mcp/badges/score.svg)](https://glama.ai/mcp/servers/OksigeniaSL/checker-mcp) 📇 🏠 - Domain security & privacy checker: 17 live checks (SPF, DMARC, DKIM, DNSSEC, TLS, CAA, security headers) scored 0-100 with remediation. Local-first, zero telemetry. In the official MCP Registry as `com.oksigenia/checker-mcp`; npm `@oksigenia/checker-mcp`. - [mcpindex-ai/mcp-server-mcpindex](https://github.com/mcpindex-ai/mcp-server-mcpindex) [![mcp-server-mcpindex MCP server](https://glama.ai/mcp/servers/mcpindex-ai/mcp-server-mcpindex/badges/score.svg)](https://glama.ai/mcp/servers/mcpindex-ai/mcp-server-mcpindex) 📇 ☁️ 🍎 🪟 🐧 - Find MCP servers by natural-language task and get advisory trust screens (check_tool_trust, assess_server) before you connect. The directory client for mcpindex.ai; advisory, not a safety verdict. - [calllint/calllint](https://github.com/calllint/calllint) [![calllint/calllint MCP server](https://glama.ai/mcp/servers/calllint/calllint/badges/score.svg)](https://glama.ai/mcp/servers/calllint/calllint) 📇 🏠 - Pre-flight security linter for MCP servers, agent tools, and skills. Scans a config *before* it runs — offline, deterministic, evidence-backed — and returns SAFE / REVIEW / BLOCK / UNKNOWN verdicts without executing the server it judges. CLI (`npx calllint scan`), MCP server (`npx calllint-mcp`), SARIF + CI gate. UNKNOWN is never SAFE.