"Access private Notion pages after logging in" matching MCP servers:

Enables MCP clients to securely connect to a paired Windows machine through a self-hosted Cloudflare relay and use its local filesystem and command-execution tools over Streamable HTTP and WebSocket.

Enables Notion AI to read and modify files in a single local PC folder and, in full mode, run commands and Codex, Claude Code, or Gemini CLI agents, with user confirmation for each action.

Enables cloud services with MCP support, such as Notion AI, to read, search, edit, create, and delete files within a single designated folder on your computer, and to run only allowed commands.

Enables Codex to manage a local Claude Code companion through MCP, implementing a dual-agent workflow where Codex handles reasoning and review while Claude Code performs engineering tasks.

Enables AI agents to remotely execute terminal commands and perform filesystem operations on the host machine, with secure authentication and optional ngrok tunneling for integration with Notion and other clients.

Provides AI assistants with access to Linux man pages for searching, retrieving, and exploring system documentation.

Enables a Notion MCP Agent to work as a local coding agent by exposing local files, shell, git, and patch-style editing over MCP, plus delegated long-running tasks via local Codex or Claude. It also supports managing local MCP services and Cloudflare tunnels through a native macOS console.

A Windows MCP server for personal Notion Agent integration, providing file read, search, and modification tools in a selected workspace, with an optional trusted developer mode for Python, Git, Node, etc.

Ephemeral MicroVM-isolated code execution for AI agents. Run Python, Node, or bash — fresh hardware-isolated VM per call, hard-purged after. No state persists between calls.

Provides the current date in multiple formats (e.g., European, ISO, US) via a simple MCP tool.

Lets an AI assistant look after Android TV boxes, phones and watches over ADB: find devices on the network, see the screen, tap and type, install apps. Package changes are dry-run first, with a protected set read off the device and one-call rollback.

Enables AI assistants to understand lab topologies, follow operational principles, and interact with real network devices through observable terminals while keeping private access information hidden.

A self-hosted MCP server providing a governed interface for AI agents to interact with local Docker infrastructure, featuring a two-phase confirm protocol for state-changing operations and append-only audit logging.

Enables cloud-based MCP clients to delegate privacy-sensitive or large-output tasks to a local LLM, returning sanitized placeholders or digested summaries so private data never leaves the user's network.

Arch MCP provides three main capabilities: * Access to Arch Wiki, AUR packages, official repos, and installed packages * Search, analyze, and securely install packages with built-in 50+ safety checks * Guided workflows for troubleshooting, security audits, and dependency analysis

Developers: Search your zsh, bash, or fish shell history from Claude Code, Cline, Cursor, Zed, or any MCP client using tools like search_history (full-text with timestamp/CWD/exit code), recent_in_dir, failed_commands, and command_chains for multi-step sequences. Reindex after new activity. Local-only SQLite FTS5 with secrets redacted before storage.

A tool for detecting and cleaning Java memory shells via local or SSH remote execution. It enables AI agents to scan Java processes, analyze suspicious class code, and safely remove memory shells after user confirmation.

agentic_ssh is written in Rust and specifically engineered to provide agent-hardened, token-efficient, and asynchronous SSH orchestrations for AI agents. It automatically discovers hosts from your local SSH configurations, manages connection heartbeats, handles silent network dropouts, and supports detached background job scheduling with isolated session logging

Connects AI tools to local dev servers, enabling them to view pages, call APIs, read/edit files, and run commands with safety guardrails.

Enables Claude to work with iTerm2 terminal sessions by staging commands for user approval, executing them after approval, creating new tabs, and returning only new output.

Enables running SPICE netlists with ngspice in batch mode and returning .meas results as JSON.

Enables MCP clients to drive Kali Linux ethical hacking tools for authorized penetration testing, with enforced engagement scope, exploitation gating, and full audit logging.

Lets Claude Code drive a Qodalis CLI server, exposing that server's CLI commands, filesystem, data explorer, jobs, and plugin tools with the configured account's permissions. It handles token or password sign-in, automatic reconnection after drops, read-only filtering, and client-side allow/deny lists.

Bridges Claude AI to a live Unreal Engine 5 editor session, enabling natural language control of scene inspection, modification, logging, source search, console commands, and C++ class scaffolding.

Runs AI-generated code in secure Firecracker microVMs with opt-in network policy enforcement, PII scanning, prompt injection defense, and audit logging. Exposes MCP tools for running commands, managing files, and the full sandbox lifecycle.

Enables remote command execution and SFTP file upload or download from any MCP client without a local SSH client, SCP, or PuTTY installed. Supports password or private key authentication with SHA256 host fingerprint verification, timeouts, output limits, and multiple configured server instances.

Enables LLM agents to run commands, manage interactive or background sessions, and transfer files on remote hosts under policy-based authorization, command classification, approval gates, and full audit logging. Supports per-host profiles with role-based rules, streaming file transfers that keep bytes out of model context, and a configurable approval policy for destructive or privileged work.

Read-only access to your local shell history and AI coding agent sessions: search past commands, recent failures and what fixed them, assess a command's risk, and see what each agent session changed in git.

Sandboxed bash execution MCP server for AI agents, using an in-memory virtual filesystem overlay to prevent real filesystem damage, with configurable network access, timeouts, and optional Python/JS runtimes.

Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.