"American Express" matching MCP servers:

A minimal example MCP server using Express and Clerk for authentication, exposing a streamable HTTP endpoint for MCP clients.

Validates Latin American tax, ID and bank numbers (CUIT, CUIL, CPF, CNPJ, RFC, CURP, RUT, NIT, RUC, CLABE, CBU) with exact check-digit rules.

GCHQ CyberChef's 504 data-transformation operations as MCP tools — encryption, encoding, compression and forensics — w/ 19 analysis tools for work a single operation cannot express, such as: hash identification, RSA and ECDSA attacks, XOR key-length recovery, cipher solving, X.509 chain validation and NIST post-quantum identification (ML-KEM/ML-DSA/SLH-DSA).

Enables scanning Express.js route surfaces for inventory and audit, classifying routes as public/authenticated.

A security-first MCP (Model Context Protocol) backend built with Node.js and Express, featuring hardening, rate limiting, structured logging, and Docker support.

MCP server for the DPYC ecosystem that certifies North American operators using the Lightning network, enabling regional certification and audit trails with low latency.

A reference implementation of an MCP server built with Express that integrates full OAuth 2.1 authorization and RFC9728 protected resource metadata. It enables secure, authenticated communication between MCP clients and servers using streamable HTTP transport and built-in authorization flows.

Enables users to express agent tool-call access rules in plain English or Spanish, which are converted into Cedar policies that are only enforced after passing a multi-stage proof. Each proposed tool call is then gated with ALLOW or DENY plus the ids of the policies that decided it.