"Exploring the term 'Make' or related resources" matching MCP servers:

Audits Make.com scenario blueprints before import, checking for hardcoded secrets, dangling references, plain-HTTP URLs, and other issues. Provides tools to inspect blueprint structure, trace module mappings, and generate a safety findings report.

A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.

Enables AI coding agents to run one-shot commands and copy single files to and from remote servers through The Bastion, which authenticates, authorizes, and records each action. Access is controlled by the bastion rather than allowlists or deny lists.

Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.

the-real-unifi-mcp License: MIT Node MCP SDK [![CI](https://github.com/mguttmann/the-real-unifi-mcp/actions

Local stdio MCP server for Bitwarden (Public API + Secrets Manager). 50+ admin tools for members, groups, collections, policies, licensing, projects, and secrets. For Claude Desktop / Claude Code.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

A verifying MCP gateway that pins approved tool manifests and skill files to content addresses, blocking tampered descriptions before they reach model context.

Enables autonomous agents and MCP-compatible clients to enforce policy-approved actions using risk tiers, reversible checkpoints, and token approval bounds.

Enables agents to audit and safeguard repositories by detecting dependency pinning issues, license compliance problems, hardcoded secrets, and dead code through MCP tools.

MCP server for AI agent identity — verify agents with Ed25519 signatures, check trust scores, sign and verify content, exchange encrypted messages. Built on the Agent Identity Protocol (AIP).

Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD security insights.

Enables AI agents to scan, redact, and govern sensitive data before sending it to external tools through DLP, secure chat, and shadow AI discovery tools.

A production-shaped starter for putting an MCP server in front of an existing app, with OAuth and enterprise SSO handled through Clerk, enabling AI assistants to act on your product on behalf of logged-in users.

A local gate that lets agents submit risky tool actions for policy evaluation and receive ALLOW, DENY, or REQUIRE_APPROVE decisions before executing irreversible side effects. It can also open human approval holds and record an activity trail without executing the side effect itself.

Enables an AI to risk-review Terraform and OpenTofu plan files over MCP stdio by summarizing plans, ranking dangerous changes, diffing resources with secrets masked, and comparing two plans without running Terraform.

Enables AI agents to inspect git working trees and history for exposed credentials without letting raw secrets reach the model, with false-positive filtering, baseline support, and remediation guidance.

Enables an AI agent to check whether a site is healthy and configured correctly by reading TLS certificates and classifying handshake failures, resolving DNS records from raw wire packets, tracing HTTP redirects and timings, and grading security headers with exact fixes. Every connection passes through an SSRF guard that vets and pins addresses so the agent cannot be aimed at internal networks.

Enables an AI to statically audit GitHub Actions workflow files, parsing YAML with accurate line numbers and reporting findings about on: key quirks, expression injection risks, unpinned actions, effective token permissions, and cron scheduling.

An MCP server that gives an AI agent long-term memory it cannot read. VaultZero is a privacy-first memory vault: this package embeds and encrypts every memory on your machine before it is sent, so the server stores ciphertext and vectors and never holds a key.

Enables LLMs to make HTTP requests with OAuth2, session cookies, retry logic, and cURL command generation, while providing security features like SSRF protection and TLS enforcement.

MCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.

Lets a coding agent lint a Dockerfile or Kubernetes manifest through the Shipshape API, returning an A–F grade, score, pass/fail status, and every finding with its line, fix, and reference. Catches issues like root in the final stage, unpinned base images, curl | sh, secrets in ENV/ARG, and Pod Security Standards, resources, and probes violations before handing work over.

Verifies agent actions against mandates via a single tool, returning allow, deny, or requires_approval receipts without executing the actions.

Enables MCP clients to query a Twingate network in read-only fashion for users, groups, resources, remote networks, connectors, devices, and access relationships.

Mandatory human approval gate for autonomous AI agents. Before any critical, irreversible, or financially significant action executes — file deletion, production deployment, financial transaction — the agent calls oracle_validate. A human receives a real-time Telegram notification with full context and taps Approve or Reject. The agent waits for the decision before proceeding.

Provides a human-approval tool for MCP-compatible agents, pausing execution until a human approves or edits the action, with every decision logged.

An MCP server that brokers discovery and interaction with AAuth resources, providing a fixed set of tools for managing and invoking operations on registered resources.