"Design Resources and Prototyping Best Practices" matching MCP servers:

A Model Context Protocol (MCP) server for producing better Terraform through CLI analysis (tflint, checkov, trivy, kics, infracost), best-practice guidance from terraform-best-practices.com, cloud provider recommendations (Azure, AWS, GCP), and Terraform Registry resource and module guidance.

It allows an assistant to query the OpenSSF Best Practices Badge website (BadgeApp) to inspect project criteria and progress. The server enables the preparation of draft answers and the generation of proposed updates for user review.

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

Deterministic secret, PII and PHI checks for your CLI, git hooks, CI and MCP, with editable scaffolds for NIST SSDF, ISO 27001 and India's DPDP Act.

A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.

A portable Agent Skill for defensive software design, implementation, review, and verification. It routes agents to focused guidance for the trust boundaries that actually change, from a bounded fix to an architecture review or staged brownfield rollout.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.

A wrapper for mcp-remote that provides secure authentication for protected MCP servers using Adobe IMS or Okta OAuth flows. It features automated token management, validation, and background refreshing for seamless access to remote resources.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Validates URLs and checks their reputation to help identify AI hallucinations and verify web page authenticity.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables control and monitoring of an ADT Control / Alarm.com security system from MCP-compatible hosts, including checking system and device state, reviewing activity, and safely arming, disarming, locking, or adjusting devices through confirmation-gated actions and a local audit trail.

A local MCP server that provides a safe plan-and-execute workflow for AI coding assistants, storing plans and tasks, and executing agent commands with an allow-list for security.

Enables generating secure passwords, exposing password policies, and providing reusable prompt templates for secure password creation through MCP primitives.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

Enables AI agents to discover and invoke backend tools over MCP JSON-RPC while enforcing 3-legged OAuth 2.0 identity propagation, role-based access control, and protocol transcoding to REST APIs.

Enables agents to read and report, and to carry human-authored updates into systems of record after human consent, while structurally preventing autonomous writes of commitments like owners, due dates, or statuses.

Enables users to audit a domain's email-authentication DNS configuration—covering SPF, DKIM, DMARC, MX, BIMI, MTA-STS, and TLS-RPT—and receive issues, recommendations, a 0–100 score, and A–F grade.

Enables enterprise MCP clients and partner agents to execute tenant-isolated underwriting, claims, and compliance workflows with durable step checkpointing, evidence-grounded tool calls, and deterministic PDF citation receipts. It supports A2A task dispatch and MCP JSON-RPC operations while blocking cross-tenant access and ungrounded deliverables.

Prepares and validates an authenticated PipMCP connection so AI coding agents can discover and call hosted provider tools with schemas, scopes, and approval controls.

Enables auditing and monitoring of AI agent MCP tool calls, with behavioral anomaly detection, lab-scoped red-team simulation, and Telegram notifications.

Enables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.

Enables automated review and analysis of network security controls (AWS Security Groups, Network ACLs) using natural language queries. Supports NSC configuration reviews, network segmentation testing, and identifying security gaps through conversational LLM interaction.

Provides governed MCP tools for querying optionally restricted Microsoft Sentinel/Log Analytics tables and optional Defender XDR hunting data, retrieving incidents and entities, and—for agent identities only—adding attributed incident comments, with Entra ID authentication, KQL validation, rate limits, and redacted audit logging.

Enables AI-powered threat modeling with tools for creating threat models, analyzing security threats, generating security controls, and validating architecture against best practices.

A deployable MCP server template for Cloudflare Workers that provides Google OAuth authentication and comprehensive analytics tracking of tool usage, performance metrics, and user behavior.

Stateless Streamable HTTP MCP endpoint with OAuth 2.1 authentication via Cloudflare Workers, supporting PKCE, DCR, and token introspection.

Demonstrates OAuth2/OIDC authentication for MCP servers using Asgardeo, with JWT validation and a sample weather tool to showcase secured API access.

MCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.

Enables MCP clients to query a Twingate network in read-only fashion for users, groups, resources, remote networks, connectors, devices, and access relationships.

An MCP server that brokers discovery and interaction with AAuth resources, providing a fixed set of tools for managing and invoking operations on registered resources.

MCP server that exposes OSSEC HIDS security monitoring capabilities as tools, resources, and prompts for AI assistants.

Enables MCP clients to scan nearby Wi-Fi networks with signal strength, channel, band and security details, inspect the current connection, and analyze channel congestion to recommend the best router channel while flagging open or weakly secured networks. Runs fully locally and read-only with zero dependencies across macOS, Windows and Linux.

Enables Claude to scan a website's HTTP security headers and receive an A–F grade against OWASP best practices, including per-header pass/warn/fail results and copy-paste fixes for missing headers.

Enables AI agents and MCP clients to perform read-only SQL Server DBA investigations across health, performance, backups, jobs, security, and schema design. It allows the AI to suggest fixes, but SQL Server permissions and tool checks prevent any database changes.

Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.

An MCP server that provides AES-256-CBC encryption and decryption tools, resources, and prompts for use in VS Code Copilot Chat.

Enables interaction with the Admina API to manage and query organizational SaaS resources including devices, user identities, service integrations, and account information across multiple services.

Enables managing Logto resources (users, applications, organizations, roles) via MCP clients like Cursor or Claude Desktop.

Enables read-only querying of Active Directory/LDAP resources such as users, groups, and computers, including group memberships, account status, and manager resolution.