"Applications or tools with full local file system access" matching MCP servers:

Self-hosted credential store and API proxy for AI agents. One Bearer token, all your services. Handles OAuth refresh, encrypted storage, audit logging, and per-agent permissioning.

Enables AI agents to interact with Nextcloud files only through human-approved, time-limited grants, with mandatory audit logging and no standing content access.

Enables AI agents to interact with Home Assistant through tiered, human-gated access: free reads and reversible comfort controls, while sensitive actions like locks, alarm, covers, and climate changes require per-operation human approval via Matrix.

Enables governed, AI-safe access to traveler data through three typed tools, enforcing consent, PII removal, provenance, and audit at the MCP boundary.

Enables read-only comparison of Stripe active entitlements against an application's effective access snapshots, returning matched, mismatch, or unknown results for agent-driven diagnostics.

Enables AI agents to securely read from and interact with Matrix and Microsoft Teams chat under scoped, expiring, human-approved grants, with per-operation approval for sending and editing messages and no free access to room content.

Enables safe file system operations including reading, writing, updating, and deleting files with built-in security safeguards, automatic backups, and comprehensive error handling. Provides directory listing, file metadata extraction, and protects against operations on system-critical paths.

Enables secure remote MCP server connections using Cloudflare Access OAuth, with user-authenticated tools on Cloudflare Workers.

A remote MCP server with built-in Access OAuth, enabling authenticated MCP connections via Cloudflare Access and conditional tool permissions.

A remote MCP server with Cloudflare Access OAuth authentication, deployable to Cloudflare Workers, enabling secure connections from MCP clients with identity-based access control.

Governance framework for LLM agents. Exposes seven mechanically-enforced rules plus tools for preflight file protection, audit-chain verification, session handoff and worklog templates, MCP config auditing, and an emergency kill switch.

A community MCP server for Cisco Secure Access that exposes the Secure Access REST API to AI clients as a curated catalog of tools for Admin, Deployments, Investigate, Policies, and Reports.

Enables AI assistants to list directories, read, write, and search files within a locked root directory, using resolve-then-validate path checks, size caps, and binary detection to prevent sandbox escapes.

Provides a human-in-the-loop security layer for AI agents by intercepting file operations, explaining them with a local LLM, and enforcing a deterministic policy that requires user approval for risky actions.

Enables AI agents to safely read, write, and search files within a whitelisted sandbox directory, rejecting any attempts to escape the sandbox.

Enables AI agents to investigate threats, pull reports, manage security policies, and administer deployment infrastructure through the Cisco Secure Access REST API.

Enables remote MCP connections with Cloudflare Access OAuth, providing tools like add and generateImage with user-based access control.

Enables remote MCP server with OAuth authentication using Cloudflare Access, allowing users to connect via sign-in with an identity provider.

An MCP server protected by Cloudflare Access as a self-hosted application, validating Access JWT and conditionally exposing tools based on user identity.

Enables agents to securely stage, validate, and submit binary data for on-premises storage, then list, inspect, process via registered server-side processors, and token-guarded delete those assets using opaque identifiers. Upload bytes travel over a separate data plane rather than through MCP JSON, with staging, validation, and prepare/apply/verify flows enforced throughout.

Enables remote MCP connections with Cloudflare Access OAuth authentication, providing tools like add and restricted image generation.

A Cloudflare Workers-based MCP server that enables secure remote connections using built-in OAuth authentication via Cloudflare Access. It provides identity-based access control for MCP tools and supports persistent state management through Durable Objects and SSE.

Enables cloud-based MCP clients to delegate privacy-sensitive or large-output tasks to a local LLM, returning sanitized placeholders or digested summaries so private data never leaves the user's network.

Post-quantum readiness for AI coding agents: scans code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and returns NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, with fix verification and dependency checks. Content-based, advisory tools only; runs local (npx @quantakrypto/mcp) or as a hosted OAuth endpoint.

Enables AI agents to pay per call for live package-safety and GitHub merge-readiness trust signals via the x402 protocol.

Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.

Enables a cloud orchestrator to query a local Ollama model over Tailscale or a LAN as a side-channel for drafts, summaries, and other helper output, with tools to list available models and to redact text. Answers leaving the server are passed through output-only DLP that masks card numbers, IBANs, emails, phone numbers, API keys, and similar secrets before they reach the cloud.

Fork of @cyanheads toolkit MCP server. Added encoding functions, removed system network functions.

Enables analysis of normalized scan findings as immune signals to discover co-occurring fleet threat patterns, synthesize non-executing defensive recipes, recall successful outcomes, and plan adjacent-cohort targeting via MCP tools.

Community MCP server for the Cymulate security validation platform. It exposes the full Cymulate REST API (337 endpoints) as 106 semantic tools for BAS, exposure validation, attack surface management, and platform administration.