"Fluent Bit" matching MCP servers:

Local-first encrypted key-value vault for securely storing and retrieving secrets like API keys using AES-GCM 256-bit encryption and a PIN.

Enables AI assistants to inspect employee access, list failed onboarding events, and retry provisioning operations.

Enables MCP clients to read and, when explicitly enabled, modify Hudu IT documentation—companies, articles, assets, asset layouts, and password resources—through curated read tools, bounded paginated list operations, and policy-gated write/delete dispatch over the node-hudu SDK. Supports stdio and HTTP transports with per-caller credentials, read-only defaults, secret-read restrictions, resource-level search scoping, and redaction of credential fields.

Enables AI coding agents to reduce context window bloat by filtering noisy Git diffs, summarizing structural AST changes, simulating merges, and masking high-entropy secrets before they reach the model.

Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.

Provides tools for autonomous CVE detection, enrichment, and remediation across managed repositories using GHSA and NVD data. It enables automated triage and pull request creation for dependency fixes based on configurable severity policies.

MCP server for securely managing GitHub & GitLab credentials in an encrypted vault, allowing AI agents to retrieve tokens by org or group name automatically.

A production-ready MCP server template with OAuth 2.1, RBAC, and audit logging for building secure, observable tool servers.

Provides an OAuth 2.1 authorization and login layer plus tool registration for MCP connectors, so a connector can be added to Claude clients with only a URL and password. It also shapes tool names, descriptions and input schemas for what Claude clients actually display, returning compact results and readable error messages.

Scans public URLs for compliance and security issues such as leaked API keys, exposed files, missing privacy pages, and security headers, helping developers identify gaps before launch.

Enables users to score credential strength using NIST-style bit entropy and keyspace calculations, estimate GPU brute-force cracking timelines, audit cross-account password reuse blast radius, and perform k-anonymity SHA-256 prefix privacy checks without exposing secrets.

Enables MCP clients to securely connect to your data through a remote deployment with OAuth 2.1 and PKCE, configurable sign-in, read/write consent, and audit logging. It exposes public tools without sign-in and authenticated tools that respect each user's permissions while validating arguments and recording every call.

Enables users to compute credential bit entropy and GPU brute-force cracking timelines, audit cross-account password reuse exposure, and perform k-anonymity hash-prefix privacy checks without leaking credentials.

Lets Claude Code sign in through Microsoft Entra ID and call infrastructure tools, while privileged actions stay blocked until a human approves that exact request on a web page. Grants are bound to the user, tool, and arguments, expire automatically, and can be revoked, so a valid token alone never grants standing access to production changes.

A production-minded MCP server kit that provides OAuth 2.1/PKCE authentication, rate limiting, scope-gated tools, and two-phase confirmation for building secure MCP servers with custom tools, identity, and storage.

Enables developers to build and run authenticated FastMCP servers with worker-thread execution for blocking tools, liveness probes, collision-safe file staging, and optional PDF/OCR helpers.

A local-first FastAPI and MCP safety kit for turning internal HTTP APIs into controlled MCP tools, with per-tool scopes, quotas, audit events, and default-deny web-access boundaries.

An authenticated MCP app that calls Microsoft Graph API via OBO flow and renders interactive Fluent UI widgets inside M365 Copilot Chat.

Enables Claude AI to access and run over 150 integrated cybersecurity tools through a public ngrok tunnel, supporting agentic security workflows via MCP.

Mints short-lived, scoped GitHub App installation tokens on demand for AI agents to access git repositories or the GitHub API.

An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.

MCP server for LobsterVault, enabling AI agents to securely store, retrieve, manage, and share encrypted secrets with KMS envelope encryption, including environment variable injection.

A prompt-injection-aware MCP server demonstrating guardrails for agentic tool use, including permission tiers, untrusted-content quarantine, and heuristic injection detection, with a fictional ticket-triage assistant.

MCP server for integrating with Grizzly SMS platform to rent virtual numbers, receive SMS verification codes, and manage activations directly from AI assistants like Cursor, Claude Desktop, and OpenClaw.

Enables AI assistants to read the free public ICHI API via MCP stdio, retrieving the current Internet Cyber Health Index, recent critical alerts, and source health with structured JSON results and graceful error reporting.

Enables Microsoft Copilot Studio to manage Snipe-IT assets, inventory, users, licenses, reporting, and administration through 29 semantic tools, including read/write lifecycle operations and guarded deletion.

Tenant-bound MCP server for agent spend authorization, policy guardrails, evidence, escrow settlement, and portable receipts. Works with Cursor and Claude Code via stdio; npm (@paybond/kit) and Python (paybond-kit).

Pit Officer sits between your AI agent and your broker or exchange account and checks every order before it is sent. Limits an AI agent cannot change: order size, order rate and a profit-and-loss stop. Block the account to stop new orders. The agent connects over MCP; read-only tools are on by default, and you choose which order tools it may call.

A fork of Playwright MCP that adds PhiShark preflight and browser-deep security checks to block or warn on phishing and high-risk pages.

An open experience layer for conversational AI - routes user intent into safe, consented, stateful experiences.