Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Loading the directory
Loading the directory
Cursor reads ~/.cursor/mcp.json. A project can also commit .cursor/mcp.json. Cursor can run a local process over stdio or a remote HTTP or SSE endpoint. The config is JSON and the file to edit is mcp.json. MCPpedia currently has 42220 published MCP servers have an install config for Cursor. The highest trust scores right now are Repowise at 83, mcp-local-rag at 78, mcp-image at 78. Open a server and copy the Cursor tab, then fill in secrets yourself. MCPpedia never stores those values.
Cursor reads ~/.cursor/mcp.json. A project can also commit .cursor/mcp.json.
mcp.json at the path for your OS.~/.cursor/mcp.json~/.cursor/mcp.json%USERPROFILE%\.cursor\mcp.jsonEvery server page builds a ready-to-paste JSON config for Cursor.
Published servers with an install config for Cursor.
Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Offline, read-only auditing of MCP client configuration files with redacted findings
Predicts the DDL a dbt change will execute, before you run it. Reads files, not the warehouse.
MCP server for Weeek with full public API coverage: tasks, projects, CRM, time tracking.
Sweep MCP. Apify apify.com/fruitful_quintessence | Gumroad: https://atushi5.gumroad.com/l/kutuxe
Garmin Connect on Garmin's official Personal API: sleep, HRV, body battery, activities.
Daily stock screens, RS ratings, market breadth and group rankings for 12 markets. No API keys.
Persistence hook auditor: scan repos for auto-exec hooks, flag Shai-Hulud patterns.
An agent on call for the things nobody watches. Checks run free; your agent wakes only on a change.
App Store Optimization data for AI agents: keyword ranks, scores, competitors, charts
Indonesia-ready agents: NIK, phone, Rupiah, regions, postal codes, holidays, and PII masking.
Persistent working memory for AI agents: a knowledge graph with semantic search and decay.
Pay-per-call market news, CBR/MOEX/Rosstat data and Telegram tools; auto-pays USDC on Base via x402
Private x402 payments on Solana: shield, pay, and unshield USDC under caps you set.
DEPRECATED: no live endpoint (api.dock.tech does not resolve)
MCP server for the Inistate platform: module discovery, entry management, and activity submission.
Local crypto inventory for developers and AI agents; coverage and limits inside the CBOM.
DEPRECATED: no live endpoint (api.matera.com does not resolve)
The web as short, numbered text for AI agents: a lean browser interface over Playwright.
Generate Word documents locally with headings, paragraphs, and tables. No network and no key.
Local log forensics: compress logs into citable evidence with root-cause confidence tiers.
New Zealand cultural records from DigitalNZ. No key required.
Plan and send approved engagement on social platforms.
Production security for Node.js apps: investigate live attacks, block IPs, tune detections.