"Archive of Our Own" matching MCP servers:

Honeypot threat intelligence for AI agents. Query 90 days of probe data from our sensor network: IP reputation, scanner classification, CVE probing trends, TLS/SSH/JA4 fingerprints. Free tier 500 credits/day, OAuth + bearer auth, streamable HTTP at https://mcp.honeylabs.net/mcp.

Enables MCP hosts such as Claude or Cursor to run multilateral consensus among AI agents of rival owners, enforcing deterministic red lines and max-min decisions over masked verdicts. It also produces tamper-evident SHA-256 receipts that each party can verify and replay against their own private preferences.

MAC-address (OUI) vendor lookup and router default-login directory for AI agents, backed by ssid.ai. Identify a device manufacturer from its MAC address, detect randomized/private addresses instead of reporting unknown, or fetch a router's default login IP and admin credentials — every field cited to the manufacturer's own documentation

Identity and credential governance for AI agents. Every agent gets its own cryptographic identity, scoped short-lived credentials per platform, human approval on sensitive actions, and an immutable audit log.

Enables AI agents to obtain permission before acting and verify afterward against destination systems' own records, confirming whether the permitted work actually happened.

Supply chain risk scoring for npm, PyPI, and GitHub repos

Provides read-only search and retrieval of archived emails, archive statistics, health, and ingestion sources, with an optional administrative toolset for user, role, reindexing, and queue management.

Enables AI agents to list visible objects, submit deletion requests into human-reviewed quarantine, and check the status of their own requests without granting delete, approve, or restore capabilities.

An MCP server for 7-Zip archive operations (list, extract, create) with dual-engine architecture and sandbox security features. Note: currently a learning project and not yet functional.

Enables AI coding agents to plan, policy-check, and cost-estimate Terraform changes while requiring human approval through Slack or CLI before any terraform apply can execute.

Give each local app its own private HTTPS address on your Tailscale network, and control who can reach it, from your AI agent through MCP.

Read-only Cloudflare MCP server for SOC investigation, exposing Cloudflare services like WAF, bot management, analytics, and Zero Trust for querying and discovery.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Provenance gateway for stdio MCP servers. Runs in front of any MCP server, drafts a policy per tool from the server's own schemas, and blocks a tools/call whose destination or content came from an untrusted tool result, regardless of wording. The blocked call is returned as an error result with the provenance chain. Python, Apache-2.0, pip install reasongate.

Enables pre-execution security checks and sandboxed execution for AI agent workflows, including prompt-injection detection, MCP rugpull and sampling abuse protection, untrusted tool-output sanitization, loop circuit breaking, SQL AST validation, PII redaction, and ephemeral Python execution.

MCP proxy that puts a deterministic gateway in front of any MCP server. Every critical tool argument (payee, amount, recipients) must resolve against a signed mandate or the user's own registries before a Cedar policy decides; step-ups are confirmed by the user through MCP elicitation, and every decision is a hash-chained receipt.

Connects AI clients to Tenable OT Security, exposing OT/ICS asset inventory, vulnerabilities, events, policies, and findings as read tools, with an opt-in dry-run write layer for asset edits and policy management.

Enables an AI agent to drive a real Chrome instance on a hidden Windows desktop, acting on accessibility element references instead of coordinates, with each session isolated on its own private desktop, profile, and ports. Credentials are typed into a masked popup and injected by an origin-bound, DPAPI-encrypted broker, so passwords never reach the model.

Enables read-only access to HackerOne Hacker API data including program policies, structured scopes, scope exclusions, hacktivity/prior art, and your own reports through MCP clients.

Enables deterministic reconstruction of complex tables from OCR bounding boxes, including multi-column layouts, merged headers, grid hierarchies, formula auditing, and PII redaction through MCP.