"Desktop software without licensing requirements" matching MCP servers:

Enables AI agents to inspect and manage Windows software, including listing installed and running apps, searching catalogs, installing, upgrading, uninstalling, managing startup apps, exporting backups, and checking exploited vulnerabilities. It also supports a read-only mode for safe discovery.

Enables AI agents to control a Linux desktop and browser through governed tools for mouse, keyboard, windows, clipboard, screenshots, navigation, and page interaction, with policy verdicts, human confirmation, secret redaction, and an append-only audit trail.

Enables a local AI agent to check LINE compatibility and access status, list chats the user explicitly authorized, and read paginated message text and attachment metadata from selected LINE chats through a local stdio MCP connection with permission checks.

Enables MCP clients to securely connect to a paired Windows machine through a self-hosted Cloudflare relay and use its local filesystem and command-execution tools over Streamable HTTP and WebSocket.

MCP server for managing devices via JAMF Pro and Microsoft Intune APIs, enabling AI assistants to query and control device management tasks.

Enables AI assistants to manage software licenses through natural language commands by connecting to the ExisOne licensing platform.

Enables AI agents to execute provider tools through a self-hostable gateway with scoped keys, permissions, and accounting reservations.

Enables self-hosted remote access to a user-controlled device's approved filesystem roots, allowing clients to list directories, read and search files, inspect metadata, ping the agent, and list devices through an MCP tunnel.

Tamper-evident audit logging for AI decisions. Three tools (record_decision, verify_decision, list_decisions) write to a regulator-grade ledger built on AWS S3 Object Lock with 7-year retention. Designed for EU AI Act Article 12 and FCA SS1/23 evidence requirements. Try zero-config: npx audit-ledger-mcp boots in sandbox mode against a public hosted tenant.

SSWP MCP — Deterministic software attestation for AI-augmented development. Witness any repo through a 5-gate pipeline, adversarially probe dependencies, and produce self-verifying .sswp.json attestations. Fleet registry across 131 nodes with tamper-proof audit ledger and FTS5 search. Agent-native — one tool call from Hermes, Claude, or Cline.

Enables AI assistants to read live macOS processes and identify monitoring software, including Chinese enterprise EDR/DLP/MDM tools, through a read-only MCP server.

Verifies agent actions against mandates via a single tool, returning allow, deny, or requires_approval receipts without executing the actions.

Provides structured access to Veeam product network port requirements. Enables querying ports, generating topology diagrams, and producing firewall rule import files through natural language.

Checks email deliverability: audits a domain's SPF (including the 10-lookup limit), DKIM, DMARC and MX records with ranked fixes, checks a sending IP's reverse DNS and blocklist listings, and tests email headers against Gmail and Yahoo bulk sender requirements.

Enables coding agents to access approved user stories and acceptance criteria via MCP, with tools to list, retrieve, update, and check story requirements against the working tree.

Enables signing statements and registering them on a Forestrie transparency log under a held grant, then waiting for the seal and verifying the receipt. It can also issue child grants and pay canopy's x402 charge within configured caps or relay payment requirements.

Exposes the MITRE ATT\&CK framework to LLMs and AI assistants via the Model Context Protocol, enabling querying of techniques, tactics, groups, software, and mitigations.

MCP server for AWS Payment Cryptography that gives AI coding assistants direct access to the APC control plane and data plane, with embedded knowledge of payment standards, HSM vendor command sets, and PCI PIN v3.1 compliance requirements.

Gates every AI agent tool call against your policy before it runs, then writes a hash-chained, tamper-evident record of what was decided and what happened. Anyone can verify that record offline, without your software, your systems or any key you hold.

Read-only MCP server for the Action1 RMM REST API, enabling access to endpoints, missing updates, vulnerabilities, installed software, policies, automations, and reports.

Enables LLMs to perform software composition analysis including license detection, vulnerability assessment, SBOM generation, and policy validation using the SEMCL.ONE toolchain.

Exposes read-only AWS security-posture checks as MCP tools, letting Claude Desktop, Claude Code and Cursor run 14 severity-ranked checks across S3, EC2, RDS, IAM and CloudTrail, describe resources, and produce a scored summary with prioritized risks. It ships an offline fixture estate so every tool works without credentials, and switches to a live account via a single environment variable.

Checks public IPs, domains, CVE IDs and software versions for confirmed vulnerabilities and exposure, using NVD version ranges, CISA KEV, EPSS, distro backports and published exploits. All API keys are optional.

Enables AI-native access to the MITRE ATT\&CK framework, allowing LLMs and agents to query techniques, threat groups, software, and generate ATT\&CK Navigator layers for threat intelligence and security workflows.

Enables AI assistants to query Cork's cyber-insurance API for MSPs, including client warranty status, cyber scores, risk/compliance events, software vulnerabilities, integrations, invoices, and installer metadata via MCP tools.

Enables AI assistants to check software end-of-life dates and support status using the endoflife.date API, providing accurate information on software lifecycle, security status, and upgrade recommendations in real-time.

Performs vulnerability scans using Trivy to generate Software Bill of Materials (SBOM) in CycloneDX format. It enables automated security auditing and dependency tracking through the Model Context Protocol.

Converts natural language security requirements into validated Cerbos YAML policies with automated testing and red-team analysis, enabling AI governance with zero-trust guardrails for tool calls, data access, and compliance frameworks.

This MCP server implements VariousPolicies according to CSA BOD 25-01 requirements for Microsoft 365 cloud services

Lets AI assistants manage software license keys end to end, including issuing, suspending, revoking, freeing machines and IPs, blocking leaked keys, looking up customers, building automations, reading validation stats, and adding license checks to code.

Enables AI assistants to inspect FOSSA organizations and answer software composition analysis questions through a read-only MCP server.

Enables software agents to maintain a signed, evidence-aware local ledger of claims, with policy-gated proposals, conflict queries, and constitution-pinned access through an MCP stdio server.

Enables read-only inspection of local Windows and Linux systems for host, resource, network, service, software, identity, startup, certificate, SSH key metadata, and environment-variable name evidence through MCP tools. It normalizes platform outputs into stable schemas while avoiding arbitrary shell execution, credential reads, secret values, or remediation.

Enables managing Logto resources (users, applications, organizations, roles) via MCP clients like Cursor or Claude Desktop.

Enables MCP-compatible assistants to query Ecuadorian legislation and perform local static audits of software repositories for privacy, security, and compliance risks.

Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.

A Model Context Protocol server that performs Trivy scans to generate Software Bill of Materials (SBOM) in CycloneDX format.

Enables orchestrating secure software development pipelines with domain-specific compliance (HIPAA, PCI-DSS, etc.), generating pseudocode, threat models, and CI/CD from user stories via natural language.

Provides comprehensive HIPAA compliance guidance for developers building healthcare applications. Offers tools to identify PHI, understand encryption requirements, navigate business associate rules, and ensure compliance with HIPAA Security and Privacy Rules.

Verifies VerixID proof-of-existence records by Record ID and optionally proves ownership with an Ownership Key, without requiring the original file.