"Applications or tools with full local file system access" matching MCP servers:

Self-hosted credential store and API proxy for AI agents. One Bearer token, all your services. Handles OAuth refresh, encrypted storage, audit logging, and per-agent permissioning.

Enables secure remote MCP server connections using Cloudflare Access OAuth, with user-authenticated tools on Cloudflare Workers.

A remote MCP server with built-in Access OAuth, enabling authenticated MCP connections via Cloudflare Access and conditional tool permissions.

A remote MCP server with Cloudflare Access OAuth authentication, deployable to Cloudflare Workers, enabling secure connections from MCP clients with identity-based access control.

Governance framework for LLM agents. Exposes seven mechanically-enforced rules plus tools for preflight file protection, audit-chain verification, session handoff and worklog templates, MCP config auditing, and an emergency kill switch.

A community MCP server for Cisco Secure Access that exposes the Secure Access REST API to AI clients as a curated catalog of tools for Admin, Deployments, Investigate, Policies, and Reports.

Provides a human-in-the-loop security layer for AI agents by intercepting file operations, explaining them with a local LLM, and enforcing a deterministic policy that requires user approval for risky actions.

Enables safe file system operations including reading, writing, updating, and deleting files with built-in security safeguards, automatic backups, and comprehensive error handling. Provides directory listing, file metadata extraction, and protects against operations on system-critical paths.

Enables AI agents to investigate threats, pull reports, manage security policies, and administer deployment infrastructure through the Cisco Secure Access REST API.

Enables remote MCP connections with Cloudflare Access OAuth, providing tools like add and generateImage with user-based access control.

Enables remote MCP server with OAuth authentication using Cloudflare Access, allowing users to connect via sign-in with an identity provider.

An MCP server protected by Cloudflare Access as a self-hosted application, validating Access JWT and conditionally exposing tools based on user identity.

Enables remote MCP connections with Cloudflare Access OAuth authentication, providing tools like add and restricted image generation.

A Cloudflare Workers-based MCP server that enables secure remote connections using built-in OAuth authentication via Cloudflare Access. It provides identity-based access control for MCP tools and supports persistent state management through Durable Objects and SSE.

Post-quantum readiness for AI coding agents: scans code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and returns NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, with fix verification and dependency checks. Content-based, advisory tools only; runs local (npx @quantakrypto/mcp) or as a hosted OAuth endpoint.

Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.

Fork of @cyanheads toolkit MCP server. Added encoding functions, removed system network functions.

Community MCP server for the Cymulate security validation platform. It exposes the full Cymulate REST API (337 endpoints) as 106 semantic tools for BAS, exposure validation, attack surface management, and platform administration.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

Wraps the Remnawave API to provide per-operation MCP tools with mutation safety and data redaction, enabling secure interaction with Remnawave panel.