"A service for sending emails" matching MCP servers:

Enables enterprise-managed authorization for MCP on Azure App Service, with deployable Entra OAuth and a local EMA ID-JAG lab exposing whoami and authorization_model tools.

Enables AI agents to securely access authenticated services (HTTP, SSH, SMTP) without exposing secrets, by acting as a server-side proxy that injects authentication.

Enables agents to read, create, and modify invitations for calendar events through a deny-by-default broker that validates OAuth bearer tokens and intersects server-owned per-subject, per-calendar grants with token scopes. Access is limited to a narrow, data-minimized calendar surface with idempotent writes and fail-closed authorization, rather than arbitrary service or network execution.

An MCP server that enables interaction with Xero's Identity Service API, providing OAuth 2 authentication and identity management capabilities through natural language commands.

Routes web requests from AI tools through Tor for anonymized fetching, with selective per-URL routing to bypass Tor-blocking sites.

Provides a local MCP server that exposes the check_prompt_injection tool to MCP clients, letting agents scan untrusted text (web pages, documents, tool outputs, emails) for prompt injection before passing it to another LLM.

An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.

Enables auditing emails for internal contradictions and reporting detected incoherences with literal textual evidence, without issuing a phishing verdict.

A thin MCP server that wraps provenance-receipts and quality-gate services as tools, enabling AI agents to certify content origin and score quality via Ed25519-signed receipts.

Self-hosted, multi-account Gmail MCP server for Claude and Codex over Streamable HTTP, with explicit account aliases, owner-only OAuth, and encrypted credential storage. Supports searching and reading email, creating drafts, and optional sending and label changes.

Visual CVE audit dashboard for npm, Python, Go, and Rust projects. Scans your project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against OSV.dev live data, opens a browser dashboard for human review, then applies fixes only after explicit confirmation. Supports multi-service monorepos in one command.

Enables users and AI agents to verify whether a crypto recipient address is an address-poisoning lookalike or has an invalid EIP-55 checksum before sending funds, and provides access to an on-chain history scan for suspicious transfers.

Quick-scan a smart contract for rug, honeypot, or centralization risk before sending funds. It combines verified source, live on-chain state, and heuristic Solidity analysis to return a SAFE/CAUTION/HIGH-RISK verdict.

A local MCP server that lets AI agents read, create, and update end-to-end encrypted static.md notes, merging edits with people typing in the same note. Keys and plaintext stay on the user's computer, so the service only ever receives ciphertext, note ids, and titles.

A free, open reputation registry for AI microservices: check a service's trust score before calling it and submit a rating afterward. Ratings can be backed by cryptographic receipts signed by the service and are recorded in a verifiable Merkle audit log.

Human-in-the-loop approval: a person approves the exact AI action with a passkey, and any service can check the signed approval offline.

Guardrail proxy for AI agents on SQL Server. Each statement runs as the caller's own login, a T-SQL parser blocks dangerous statements, and every statement is audited. Local stdio mode or a central Docker service.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables local spend caps and Ed25519-signed provenance receipts for AI agent tool calls, allowing any MCP host to gate model usage and independently verify signed decisions without sending prompts or content.

Local pseudonymisation MCP server that detects PII in text, replaces it with opaque tokens before sending to cloud LLMs, and restores tokens afterward.

AI-powered threat verification across 6 channels: phone numbers, URLs, text messages, emails, documents, and QR codes. Analyzes threats against 10M+ intelligence records from FTC, FCC, URLhaus, ThreatFox, and community reports, returning risk scores, verdicts, and detailed signals.

Secure credential management for AI agents — encrypted storage, auto-refresh, and rate limiting via a single MCP call. Supports OpenAI, Anthropic, Stripe, GitHub, Brave Search, Kalshi, Coinbase, plus generic API key and OAuth2 for any service.

AI Bill of Materials compliance tracking and SBOM generation for AI/ML systems

Provides MCP tools for Sytadel identity and access management, enabling user listing, service account management, session anomaly queries, policy generation, and access reviews.

Enables encrypted messaging via Signal, SimpleX, and Session through a unified API, supporting message sending, polling, and key management.

Reputation and trust scoring service for AI agents, exposed as an MCP server. Evaluate counterparties, report interactions, issue portable trust certificates, and detect Sybil attacks.

Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.

Checks email deliverability: audits a domain's SPF (including the 10-lookup limit), DKIM, DMARC and MX records with ranked fixes, checks a sending IP's reverse DNS and blocklist listings, and tests email headers against Gmail and Yahoo bulk sender requirements.

Mandatory human approval gate for autonomous AI agents. Before any critical, irreversible, or financially significant action executes — file deletion, production deployment, financial transaction — the agent calls oracle_validate. A human receives a real-time Telegram notification with full context and taps Approve or Reject. The agent waits for the decision before proceeding.

Provides a human-approval tool for MCP-compatible agents, pausing execution until a human approves or edits the action, with every decision logged.