"Known" matching MCP servers:

Enables checking IP addresses against the GreyNoise API to determine if they are internet background noise, known benign services, or potentially targeted threats.

Enables AI-assisted remote server diagnostics by auto-executing known read-only commands and routing high-risk changes to a real human for approval through DingTalk interactive cards. It uses structured argv instead of shell strings, default-deny policy, and HMAC-signed agent execution with hash-chained auditing so the model never holds SSH keys or approval power.