"UX Design Tools plugins for Hermes Desktop" matching MCP servers:

Network diagnostics tool for AI agents that provides DNS lookup, IP geolocation, SSL certificate inspection, WHOIS queries, and HTTP latency testing.

Enables coding agents to inspect and change Cloudflare zones, DNS, settings, analytics, Workers, Pages, storage, tunnels, and Email Routing. Read tools run without prompting, while write tools are gated by the host's permission rules.

Provides MCP servers for VPN control (NordVPN) and torrent lifecycle management via Jackett search and qBittorrent operations, plus a unified CLI.

Enables agents to call paid utilities for DNS/SSL checks, site status, summarization, keyphrase extraction, decision advice, data cleanup, claim verification, and grounding via per-call USDC payments over x402, with free discovery tools and no signup or API key.

Wraps the Remnawave API to provide per-operation MCP tools with mutation safety and data redaction, enabling secure interaction with Remnawave panel.

Provides 9 utility APIs for AI agents covering DNS, email, IP, QR, WHOIS, URL health, headers, text extraction, and tech detection, with x402 micropayments on Base.

An unofficial MCP server that connects AI assistants to Akamai APIs, providing tools for edge diagnostics, debugging, and network analysis.

Enables domain investors, webmasters, and autonomous agents to perform comprehensive domain audits including brand scoring, TLD tier analysis, and DNS connectivity checks, and to generate strategic brand suffixes and industry compound variations for portfolio expansion.

Enables n8n AI agents to manage MikroTik routers via SSH/SSE, providing tools for firewall, DNS, DHCP, WireGuard, interfaces, queues, backup, users, logs, and routes.

Enables a chat session's owner to reach any host through arbitrary HTTP methods with custom headers and bodies, raw TCP sockets, outbound WebSockets, and browser-grade scraping that solves challenges and discloses explicit failover routing.

Enables AI agents to run privacy-first network diagnostics (egress IP, proxies, DNS, port checks, security-header audits), handle authentication primitives like TOTP and disposable inboxes, and use developer utilities such as URL-to-markdown reading, webhook inspection, hashing, file/paste sharing, and read-only EVM RPC calls. All tools are free, require no API keys, and operate under a zero-log policy with automatic expiry.

MCP server for email deliverability: validate SPF/DKIM/DMARC/BIMI, check blacklists, test SMTP/IMAP, look up DNS, and generate ready-to-deploy records for any major email provider. Ships with two one-click prompts (audit-deliverability, setup-dns). Public, no auth.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

A secure MCP server for network diagnostics, providing tools like ping, traceroute, whois, nslookup, dig, nmap, curl, and netstat through natural language interfaces.

MCP server that lets AI agents use the Online Cyber Tools catalogue as a set of native MCP tools.

Governed reverse-proxy operations for Traefik, Caddy, and HAProxy — backend-health, cert-expiry, 5xx, and route-conflict RCA, with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

An MCP server for OpenShift Baremetal IPI cluster provisioning, allowing users to generate and validate install-config.yaml files, test BMC connectivity, validate networks, and manage cluster installation lifecycle.

Enables MCP clients to query proxy sub-accounts, traffic, pricing, and inventory, and to place orders, renew, and modify configurations after user confirmation.

Governed OPNsense + pfSense firewall operations — gateway-health, rule-shadow, and blocked-traffic RCA, with guarded rule/alias writes, unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

Governed network controller-layer operations (Cisco Meraki, plus Catalyst Center / Arista CVP / UniFi) — uplink loss/latency RCA, fleet health scoring, and config-template drift, with unbypassable audit logging (MCP + CLI), budget/runaway guards, and rollback.

Provides MCP tools for governed multi-vendor network device operations, including configuration management (backup, diff, merge, replace, rollback) and read-only queries (facts, interfaces, BGP, LLDP, ARP) via NAPALM, with optional NetBox source-of-truth integration.

MCP server for All-Inkl KAS API to manage DNS, domains, mailboxes, mail forwards, and databases, including database dumps via SSH+mysqldump.

Enables governed BIND 9 DNS operations and diagnostics through 23 MCP tools for zone validation, status checks, DNS queries, SOA comparison, and guarded write actions with auditing and budgets. It executes fixed rndc, named-checkconf, and dig commands without a shell and surfaces ambiguous write outcomes.

Provides 40 governed read tools for querying tenant and connector health, applications, access policies, shared objects, collections, DNS, identities, cloud integrations, and audit logs.

Enables users to audit a domain's email-authentication DNS configuration—covering SPF, DKIM, DMARC, MX, BIMI, MTA-STS, and TLS-RPT—and receive issues, recommendations, a 0–100 score, and A–F grade.

Operate packet-radio digipeater nodes from Claude and other MCP clients.

Enables AI agents to invoke tools over a mutually authenticated TLS endpoint, with server-side certificate and identity checks plus fail-closed per-tool authorization through Open Policy Agent.

Enables querying an F5 BIG-IP lab through read-only iControl REST calls, letting Claude inspect system and HA status, virtual servers, pool member health, monitors, and other objects via natural language. All tools are GET-only and paired with a read-only BIG-IP user role so nothing on the device can be changed.

Enables Claude to query and manage NetApp ONTAP storage clusters directly, with read-only mode by default and optional provisioning/deletion tools when enabled.

Routes web requests from AI tools through Tor for anonymized fetching, with selective per-URL routing to bypass Tor-blocking sites.

Uptime monitoring for websites, APIs, SSL certificates, domain expiry, ping and TCP/UDP ports. 15 tools to list, create, pause and delete monitors, pull incident timelines with error codes, and read hourly or daily uptime and response-time statistics.

A Model Context Protocol (MCP) server that exposes the full WhoisFreaks API suite as AI-callable tools. Works with Claude Desktop, Cursor, Windsurf, VS Code, Continue, Zed, and any other MCP-compatible AI client.

MCP (Model Context Protocol) server for rustunnel. Lets AI agents (Claude Code, Cursor, Windsurf) create and manage public tunnels to local services from inside an agent session.

Enables interaction with OPNsense firewalls through MCP tools for managing firewall rules, interfaces, DHCP leases, and system monitoring.

Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.

MCP server providing safe, structured network and security reconnaissance tools for AI agents, with graded JSON results.

Enables reading nginx configs, managing reverse proxy hosts, and handling SSL certificates via certbot, with read-only tools ready and mutating tools guarded as stubs.

Enables Claude and other MCP clients to discover and call 425 Hitachi VSP One Block REST API operations for storage management, with read-only safety by default, session handling, asynchronous jobs, downloads/uploads, and configurable direct tools.

Enables unified administrative control over Cloudflare, Porkbun, Docker, Proxmox VE, Nginx Proxy Manager/NPMPlus, Uptime Kuma, Authentik, and Coolify. Exposes service discovery and action execution through three MCP tools with roughly 150 cataloged operations for managing DNS, containers, VMs, proxies, monitors, users, and related infrastructure.

MCP server for ngsrv tunnels that exposes local HTTP ports on public HTTPS URLs, with tools for starting, listing, and stopping tunnels, and provisioning agent tokens.