Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
Loading the directory
Loading the directory
Cursor reads ~/.cursor/mcp.json. A project can also commit .cursor/mcp.json.
mcp.json at the path for your OS.~/.cursor/mcp.json~/.cursor/mcp.json%USERPROFILE%\.cursor\mcp.jsonEvery server page builds a ready-to-paste JSON config for Cursor.
Servers that can be installed in this client.
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
SatNOGS DB: satellite transmitter and observation data.
Scans files for leaked secrets and API keys
Baselines an MCP server's tools and detects tool-definition changes after approval
Catches leaked credentials and PII in outbound LLM prompts
Read, audit and edit Warcraft III maps byte-faithfully
Public statistics for Ireland and the UK: housing, crime, health, economy, welfare, with caveats.
Count secret-like patterns in bounded local files without returning values, keys, paths,...
Compare local JSON schema shape fingerprints without returning property names, values, paths, or...
Register a SaaS app's customer hostnames, show their DNS records and checks, recheck or delete them.
Visible Electron browser driven by a semantic accessibility tree: 17 MCP tools, no screenshots.
Unofficial MCP server for the Mutagen SEO API: Wordstat frequencies, competition, semantic core
Build, compile, run and export FlagQuantum circuits locally. No credentials or outbound network.
Unofficial Windows WebView2 diagnostics and automation for Tauri 2.12 development builds.
Search and download free stock images from Pexels, Unsplash, and Pixabay.
Unknown author
Google search for agents: web, news, images, places, shopping, Scholar. Paid per call over x402.
Website audits for AI agents: GDPR consent, speed, WCAG, SPF/DMARC and AI-search readiness.
Counterparty checks, sanctions screening, company lookup and 360+ pay-per-call APIs over x402.
RSS in one place: direct feed parsing and rss2json conversion for any feed URL. No key required.
Local mail between coding-agent sessions on one machine; relays to a running Swarmail server.
Emissao, consulta e cancelamento de NF-e e NFS-e no Brasil para agentes de IA, via Focus NFe.
Draw and edit plane-geometry figures live on GeoGebra Calculator, with checks and screenshots.