"Buy Me A Coffee" matching MCP servers:

Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.

Enables MCP clients to fetch the signed-in Microsoft Entra user's profile from Microsoft Graph via the GET /me endpoint using the provided bearer token.

An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.

Official reference MCP server for A202, the Verifiable Agreement Protocol for Agent-Led Commerce. Gives an agent the seven capabilities two organisations need to buy and sell directly: issue a mandate, check what an agent may do under it, approve an act needing a person, form an agreement, exchange obligations, verify a record by replay, and read the transaction record back.

MCP server for Speakeasy — Windows API emulation for binary analysis. It runs a .exe in a Wine-like sandbox and returns a structured API trace.

A local MCP server that lets AI agents read, create, and update end-to-end encrypted static.md notes, merging edits with people typing in the same note. Keys and plaintext stay on the user's computer, so the service only ever receives ciphertext, note ids, and titles.

MCP server for detecting publisher telemetry pipeline leaks in binary artifacts by scanning for sensitive strings like Sentry DSNs, Slack tokens, and AWS keys.

An MCP server that enables AI assistants to interact with Tenzir, a data pipeline engine for security operations, including executing pipeline queries, managing OCSF schemas, and generating parsers.

Mandatory human approval gate for autonomous AI agents. Before any critical, irreversible, or financially significant action executes — file deletion, production deployment, financial transaction — the agent calls oracle_validate. A human receives a real-time Telegram notification with full context and taps Approve or Reject. The agent waits for the decision before proceeding.

OS keychain secrets for AI coding agents, over MCP. Anchors credentials to the native vault (macOS Keychain, Linux Secret Service, Windows Credential Vault) and exposes them through 44 policy-governed tools: per-environment values, TTL, linked rotation, encrypted transfer bundles, redacted exec, and a tamper-evident audit log. Local-first, no cloud account.

Scans prompts for PII and masks or redacts sensitive data locally before sending to an LLM, supporting multiple anonymization modes.

Enables MCP-capable assistants to run read-only AI governance inventory checks, assemble Decision Packs, and validate signed Agent Trust Passports against pinned upstream tooling, returning every result as non-authorizing with authority_effect NONE.

A Model Context Protocol server that enables AI assistants to read and safely modify TP-Link Omada networks through capability-gated tools, with a default read-only profile and dry-run writes for security.

Zero-knowledge proof generation MCP server. AI agents can prove identity claims (Coinbase KYC, Country, Google OIDC, Google Workspace, Microsoft 365) without revealing personal data. Runs in AWS Nitro Enclave TEE with x402 USDC payments.

EU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs

PII detection agent

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

MCP server for angr — symbolic execution + CFG + reaching-definitions.

Lets AI agents and developers inspect and query local MySQL, Redis, and MongoDB instances over STDIO or authenticated loopback HTTP, with read-only defaults and allowlisted non-production writes that require explicit opt-in. Production connections always reject writes, and database-enforced read-only accounts are recommended.

Enables AI agents to query bug-bounty programs, scopes, rules, payouts, reports, statistics, and researcher rankings through the platform's public API, with optional private-program access via a session cookie.

Secure MCP server with API-key authentication, bcrypt-hashed keys, and SQLite storage. It protects tools like user listing and secure greetings, requiring a valid environment-set key.

Enables AI assistants to read identification verdicts, search history, summarize entities, explain risk scores, and verify webhook signatures through read-only tools over stdio or streamable HTTP.

Enables MCP-compatible AI clients to analyze Android APK and iOS IPA files for security issues through natural language, including permission auditing, API endpoint extraction, hardcoded secret detection, Firebase inspection, and third-party SDK enumeration.

A personal work twin for any AI agent. It briefs agents on the guidance you have confirmed, checks consequential actions against explicit, expiring grants and asks otherwise, and turns your corrections into lessons only you can confirm.

Azure PIM role activation MCP server allowing role activation through natural language, with support for saving frequently-used roles as favorites and activating them with a single command.

Institutional pre-trade honeypot simulation, buy/sell tax verifier, and liquidity lock proofs on Base and Solana.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables AI assistants to manage pfSense firewalls using 17 tools for system status, firewall rules, DHCP, DNS, monitoring, and service management via the pfSense REST API.

A Model Context Protocol (MCP) server that provides integration with the Have I Been Pwned API to check if your accounts or passwords have been compromised in data breaches.

Enables LLM clients to access DevSecOps tooling such as CI/CD pipeline status, vulnerability triage, log search, and dependency scanning through MCP, turning AI copilots into security-aware engineering partners.