"Full Stack Web Application Development" matching MCP servers:

Free seven-tool proof loop for MCP agents: scoped sessions, bounded authorization, typed outcomes, evidence-bound claims, and tamper-evident local closure. Upgrade to Complete Local for durable memory, recovery, signed traces, release verification, and multi-agent workflows.

Retired snapshot of the former 15-tool Apache-2.0 beta. Use Living Stack Community for the free seven-tool proof edition; Complete Local is the paid runtime with memory, recovery, signed traces, release verification, and multi-agent workflows.

Enables AI-assisted development of CodeQL queries for security analysis through the Model Context Protocol. Provides tools for compiling, testing, and executing CodeQL queries across multiple programming languages.

An MCP server that lets an AI agent probe a live URL and confirm whether sensitive files (e.g., .git, .env, source maps) are genuinely served by fetching and validating the content, avoiding false positives.

Enables live website health checks including TLS, HTTPS, and security headers, returning an A-F grade with specific fixes.

Enables AI agents to audit URLs for security headers, generate CSP Level 3 policies, compute SRI hashes, evaluate WCAG 2.2 contrast, and remediate headers.

A Node.js-based frontend security audit tool that performs comprehensive dependency security audits for both local projects and remote repositories. Generates detailed Markdown reports with vulnerability detection, risk assessment, and fix recommendations.

Enables AI agents to read any web page as clean Markdown and inspect its metadata, structure and technology stack, plus check redirects, TLS certificates, security headers, robots.txt, sitemaps, feeds, domains, SEO, broken links, email authentication (SPF/DMARC/DKIM) and SSO (SAML/OIDC). It also provides developer utilities such as cron, regex, color, Unicode and time-zone tools along with Hyperliquid perpetuals market data, all hosted remotely on Apify with pay-per-call pricing.

Enables controlled, evidence-first web application penetration testing and bug bounty workflows, including scope enforcement, reconnaissance, human-approved surface triage, OWASP WSTG test execution, and SHA-256 evidence capture.

Enables an assistant to classify returned fields, judge the current audience, and route only safe content to public speech while protected values are diverted into a short-lived, profile-bound, one-time private handoff. It also explains each privacy decision and records redacted receipts with honest deletion status, backed by a fail-closed policy engine that never passes protected values to optional model or authorization services.

Provides OAuth-protected remote access to an existing Open Brain, forwarding approved tool calls from Gemini Spark and Perplexity web clients without altering the upstream system.

Guardrails for AI coding agents that enforces rules via compliance receipts, blocking destructive actions and syncing rules across all AI tools.

Enables MCP agents to derive action-independent intent addresses, decode AE-128 envelope structure, and verify envelopes offline with caller-supplied keys while rejecting malformed or tampered frames fail-closed.

Connects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.

Enables Node 20+ developers to stand up single-file, zero-dependency MCP stdio servers whose destructive tools stay disabled by default, answering calls with a refusal and a dry-run preview until an environment variable turns them on. Also provides truthful empty/error results, secret redaction in logs, guarded stdout, and per-tool timeouts and cancellation.

MCP server enabling AI coding agents to seal work into cryptographically signed ProofPackets and verify them, catching forged completion claims and enforcing spec-bound acceptance criteria.

Enables an AI agent to perform read-only inspection of Palo Alto Networks Panorama and PAN-OS firewalls for monitoring and troubleshooting, including inventory, health, network, logs, and policy queries. It communicates via the PAN-OS XML API over HTTPS and does not allow configuration changes.

Enables cloud AI agents to safely work on a Mac through MCP-style JSON-RPC by providing approval-gated command execution, jailed file access, signed requests, and a tamper-evident audit log. Risky actions require on-device approval, while files remain confined to a chosen folder with recoverable writes and deletions.

Python MCP server that bridges VS Code Copilot agents to the Firm Gateway ecosystem.

Enforces a deterministic execution boundary where protected side effects occur only after a separate, single-use authorization condition is satisfied, preventing untrusted or nondeterministic producers from causing actuation without explicit consent.

Adaptive security for AI agents: assess inputs for prompt injection, scan outputs for credential/PII leaks, teach new attack patterns to semantic memory, harden prompts, and monitor metrics. Runs locally via MCP stdio.

A web application for securely managing GitHub tokens and providing centralized access to various development tools integrated with GitHub accounts.

A governed MCP server for digital-forensics and incident-response (DFIR) work, exposing curated forensic tools (Volatility 3, Plaso, RegRipper, etc.) through a single FastMCP HTTP endpoint with bearer-token authentication and tamper-evident audit logging.

Exposes reverse engineering capabilities via MCP protocol, enabling AI agents to automatically detect, analyze, trace, and deobfuscate JSVMP protected JavaScript code.

MCP server for AI governance — push compliance evidence to Mima from any agent, any stack, 4 lines of config. One tool call maps to EU AI Act, ISO 42001, SOC 2, and NIST AI RMF simultaneously. Your readiness score updates automatically.

A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).

Enables querying Microsoft Entra first-party application scope metadata, including searching applications by name, ID, scope, and FOCI/public-client status.

GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.

Cognitive security for AI-assisted development, preventing dangerous commands and large AI code rewrites when fatigued.

Trust, identity, and reputation infrastructure for AI agents. Register agents with W3C DID (Ed25519), check EigenTrust reputation scores, submit peer attestations, search agents by capability, and verify IPFS-anchored audit trails. 11 tools.