"Headroom open-notebook resources" matching MCP servers:

Open-source permission control plane for AI agents — scan, enforce, and audit every tool call with code-level policies that prompt injection can't bypass.

MCP server for auditing infrastructure-as-code attack paths, finding multi-hop chains from public internet to sensitive resources.

Enables MCP clients to query a Twingate network in read-only fashion for users, groups, resources, remote networks, connectors, devices, and access relationships.

An MCP server that brokers discovery and interaction with AAuth resources, providing a fixed set of tools for managing and invoking operations on registered resources.

MCP server that exposes OSSEC HIDS security monitoring capabilities as tools, resources, and prompts for AI assistants.

Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.

Open-source guardrails between AI agents and FHIR clinical data — PHI redaction, immutable audit, step-up auth, tenant isolation. MCP server + OpenAI/Gemini adapters. A healthclaw.io project.

An MCP server that provides AES-256-CBC encryption and decryption tools, resources, and prompts for use in VS Code Copilot Chat.

Enables interaction with the Admina API to manage and query organizational SaaS resources including devices, user identities, service integrations, and account information across multiple services.

An open experience layer for conversational AI - routes user intent into safe, consented, stateful experiences.

Enables managing Logto resources (users, applications, organizations, roles) via MCP clients like Cursor or Claude Desktop.

Enables read-only querying of Active Directory/LDAP resources such as users, groups, and computers, including group memberships, account status, and manager resolution.

Enables AI agents to directly manage Beyond Identity resources such as identities, groups, applications, SSO configurations, and credentials via natural language tool calls.

Enables managing Nginx Proxy Manager resources like proxy hosts, redirection hosts, streams, access lists, certificates, users, and settings through MCP, with automatic JWT refresh and configurable transport modes.

Security-focused MCP server for TP-Link Omada Open API workflows, enabling network management via natural language.

Enables AI assistants to manage multi-cloud resources (AWS, Azure, GCP) including resource operations, cost analysis, monitoring metrics, and security compliance checks through natural language commands.

Enables managing Polizei (Polisafe) Admin/RBAC API resources such as users, roles, permissions, scopes/tenants, invitations, OAuth clients, and profiles through MCP tools.

Enables read-only assessment of AWS environments by inventorying resources, running security and operational checks, and generating actionable reports with cost analysis. Designed for contractors with support for assume-role authentication using external IDs.

Enables Nest applications to expose decorated provider methods as MCP tools, resources, and prompts over Streamable HTTP or stdio, with Nest guards, interceptors, pipes, filters, OAuth 2.1 resource-server support, and an in-memory test client.

Enables AI assistants to manage Google Cloud NetApp Volumes resources including storage pools, volumes, snapshots, backups, and more through natural language.

Deterministic agentic data firewall that secures, monitors, and controls AI agent interactions with data and software via MCP, preventing data leaks.

Enables agents to check a site's post-quantum readiness and retrieve headline figures, the probe map, service status, and pricing through MCP tools and resources.

Open-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers

Official MCP server built into Casdoor, the open-source identity and access management (IAM) and single sign-on (SSO) platform. It exposes Casdoor's users and applications as MCP tools over a JSON-RPC endpoint at /api/mcp, with per-tool authorization driven by OAuth scopes, and can also act as an MCP gateway that proxies and authorizes agent access to upstream MCP servers.

MCP server that verifies proof-bound consequential execution at the edge, acting as the open trust anchor for the Actenon ecosystem. It validates PCCB proofs without issuing grants or making policy decisions.

This server enables interaction with SailPoint IdentityIQ through SCIM API endpoints, allowing MCP clients like Claude Desktop to manage identity resources using natural language.

Open-source MCP servers that give AI agents structured access to networking standards, device databases, and security data.

Enables MCP-compatible AI coding agents to retrieve shared skills, project architecture maps, vault secret statuses, handoff checkpoints, external MCP definitions, and code audit results on demand across multiple IDEs. It reduces context tokens and supports secure, cross-agent task continuity.

Enables AI agents to inspect, check, and audit signed offline spending authorizations, and to issue hash-chained receipts for each action taken against them. Enforces per-transaction, total, expiry, merchant, and human-approval constraints, returning allow, needs_human, or deny with the specific failing constraint.

Enables Django apps to expose ServiceSpec-defined services and selectors to agents as MCP tools, resources, and prompts over a single Streamable HTTP endpoint. Specs are registered directly, with no router, viewset, or API framework involved.