MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

Directory · Best Security

Security

Industry. Vulnerabilities, identity, and secrets. Ordered by checks passed.

Dated server measurements. The status describes the last probe or a listed authentication requirement. Checks that have not been measured are not failures. Open a server to inspect the evidence.
Server / capabilityLast probeMedian latencyChecks passedLast checked
TweetFeed

IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.

SecurityCode & DevOps

Responded69 ms15 / 22
PentestCompare: pentest provider data

Sourced data on 66 penetration testing providers: scope, delivery, published prices, retests.

SecurityMonitoring & observability

Responded89 ms15 / 22
Pentest requests, security headers checker, guides

Request a penetration test, grade a website's HTTP security headers, and search pentest guides.

SecurityData access / search

Responded96 ms15 / 22
Repo Run Check

Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them

SecurityCode & DevOps

Responded122 ms15 / 22
Aegis Security Skills

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

SecurityCode & DevOps

Responded487 ms15 / 22
EchelonGraph CVE & Exposure

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

SecurityData access / search

Responded928 ms15 / 22
KarmaDue

Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.

SecurityCode & DevOps

Responded1481 ms15 / 22
CVE Risk Check

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

SecurityMonitoring & observability

Responded238 ms14 / 22
Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)

Go vulns: CVEs per module, fixed versions. $0.01/query. Be born in one call — free testnet funds.

SecurityDatabase

Responded620 ms14 / 22
AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev)

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

SecurityCode & DevOps

Responded683 ms14 / 22
Unit 42 Threat Research & Malware Analysis — buy per-query in-session (unit42watch)

Unit 42 malware analysis & threat research. $0.01/query. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded730 ms14 / 22
Microsoft Windows Security Updates (MSRC CVRF) — buy per-query in-session (msrcwatch)

MSRC Windows updates: CVE rollups, Patch Tuesday. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded745 ms14 / 22
Dependency Vulnerability Tracker — package security advisories ($0.01/query)

Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded754 ms14 / 22
Action1 MCP by usefulapi

Read endpoints, missing updates, CVE vulnerabilities, installed software and reports in Action1.

SecurityMonitoring & observability

Responded775 ms14 / 22
Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)

Rust crate vulns: CVEs, patched versions. $0.01/query. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded910 ms14 / 22
Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session

Ubuntu security: USNs per CVE, patched versions. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded936 ms14 / 22
io.github.cyanheads/pentest-mcp-server

Offline methodology engine for authorized penetration testing, CTF, and security research.

SecurityCode & DevOps

Responded936 ms14 / 22
Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch)

Cybersecurity news & breach alerts: hacks, patches. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded1068 ms14 / 22
CERT-FR Security Advisories — buy per-query in-session (certfrwatch)

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

SecurityMonitoring & observability

Responded1095 ms14 / 22
io.github.cyanheads/cisa-cybersecurity-mcp-server

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

SecurityCode & DevOps

Responded1110 ms14 / 22
CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)

CISA advisories & ICS alerts: new CVEs, remediation. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded1337 ms14 / 22
CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)

CVE advisories: high/critical NVD vulns, daily digest. Be born in one call — free testnet funds.

SecurityDatabase

Responded1575 ms14 / 22
CISA Known Exploited Vulnerabilities (kevwatch)

CISA KEV catalog: active-exploit alerts, hourly. Be born in one call — free testnet funds.

SecurityMonitoring & observability

Responded2336 ms14 / 22
Circl Vulnerability Lookup

CIRCL Vulnerability-Lookup — aggregated vulnerability records

SecurityCode & DevOps

Responded6146 ms14 / 22