Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Loading the directory
Loading the directory
Cursor reads ~/.cursor/mcp.json. A project can also commit .cursor/mcp.json. Cursor can run a local process over stdio or a remote HTTP or SSE endpoint. The config is JSON and the file to edit is mcp.json. MCPpedia currently has 41653 published MCP servers have an install config for Cursor. The highest trust scores right now are Repowise at 83, GitHub at 82, MCP for Adobe Premiere Pro at 79. Open a server and copy the Cursor tab, then fill in secrets yourself. MCPpedia never stores those values.
Cursor reads ~/.cursor/mcp.json. A project can also commit .cursor/mcp.json.
mcp.json at the path for your OS.~/.cursor/mcp.json~/.cursor/mcp.json%USERPROFILE%\.cursor\mcp.jsonEvery server page builds a ready-to-paste JSON config for Cursor.
Published servers with an install config for Cursor.
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit
Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Checks a remote MCP server against the Claude directory rules and guides its publication.
Baselines an MCP server's tools and detects tool-definition changes after approval
Australian sports odds from SockOdds API v1: bookmaker prices, best price and no-vig fair odds.
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Task automation via SQLite, desktop Local API, or Mindwtr Cloud; read-only by default.
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data
Private balance on Robinhood Chain for AI agents: send, swap and withdraw ETH, USDG and stocks.
Redact EU personal data (names, national IDs, IBANs) in text and files; restore it later.
Scan a website for SEO, accessibility, performance and security issues, and read the report.
Lightning-fast Windows file search for AI agents via voidtools Everything's real-time NTFS index
Order limits, phone approvals and a kill switch in front of any broker or exchange MCP server.
Build an agent tool once; ship it as Agent Skills, MCP servers, Agent Plugins / Claude / Codex
Search TrustList rankings of software, IT services and B2B firms, and cite them. Read-only, no key.
Routes each task to the few skills, MCP servers and tools that fit it.
Foresee what git commands and multi-step changes will do, as calibrated probabilities
iCloud Calendar over CalDAV: list, create, update, move and delete events. Optional read-only mode.
Encrypted local ledger of structured user state, shared across every MCP-aware AI tool.