"How to list an MCP server on a platform or directory" matching MCP servers:

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Enables AI agents to get evidence-backed allow, review, or block decisions before installing or invoking third-party tools, with trust-aware discovery, official docs search, and prediction-market risk preflight.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

A self-hosted platform that aggregates upstream MCP servers, OpenAPI imports, and remote device connectors behind a single endpoint per profile, with per-agent scoped authorization, tool/prompt/resource catalogs, and approval-based temporary permissions. It also lets administrators distribute skills and connectors to paired devices and export client configurations.

An internal MCP server providing Database (SQL execution) and Server (Linux SSH/SFTP) skills with 11 tools, enabling remote execution, risk control, and full audit via Claude Code or other clients.

MCP server that acts as an adapter to a shopping list web application, using OAuth 2.1 with Keycloak for secure authorization.

Demonstrates agent-native platform onboarding with human-in-the-loop API key provisioning, plus live usage and rate-limit queries via Anthropic Admin APIs.

MCP server for Argo CD and Vault that allows authenticated users to run CLI commands via GitLab SSO, with confirmation for dangerous operations and secret redaction from model context.

It enables AI agents to securely perform directory administration, automation, security auditing, health diagnostics, and compliance reporting with strict guardrails, write-approval workflows, and immutable audit logs.

Enables IDE plugins to authenticate and communicate with the YAAIF platform via MCP, bridging Cursor, VS Code, IntelliJ, Claude Code, Codex, and OpenCode.

An MCP server that manages a TODO list with user authentication via Stytch, enabling AI agents to interact with a full-stack application.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

A framework for building MCP servers with built-in enterprise capabilities such as authentication, authorization, telemetry, audit logging, and data classification, allowing domain developers to focus on business logic while maintaining governance and compliance.

Provides identity-aware tools for checking the current employee, finding employees and direct reports, and viewing access entitlements, with visibility limited to the caller and their direct reports.

Wraps multiple bug bounty platform APIs (HackerOne, Bugcrowd, etc.) behind a uniform MCP tool surface, enabling LLM agents to query programs, scope, and briefs across platforms through a single interface.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Enables support engineers to analyze tickets against a help center with cited retrieval, role-gated and human-confirmed actions, and safety-gated evaluation.

Provides real-time supply chain compromise intelligence from X, enabling coding agents to check packages and view recent incidents before adding dependencies.

MCP server for Azure resource management, AI Foundry, and Entra ID — inspect and operate Azure infrastructure through AI agents.

Enables AI agents to search, read, and write a shared tree of markdown articles hosted on Amazon S3, with per-folder and per-article permissions, attribution of every change to the signed-in user, and full version history. Agents get exactly the access granted to the person they act for, and cannot grant permissions or hard-delete content.

Enables authenticated organization members to submit, query, and manage schema-validated structured records directly from ChatGPT, with membership requests and approval workflows gating access. All operations are tenant-isolated, permission-checked, and audited, so records are only reachable by approved members of the owning organization.

An MCP server that enables conversational interaction with Wazuh SIEM, allowing users to investigate alerts, hunt threats, tune false positives, edit rules, and run security actions via natural language.

Enables approval-gated incident response workflows that gather evidence through read-only MCP tools, perform idempotent writes, and preserve a durable audit trail.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

Provides deterministic MCP tools for managing encrypted member profiles, including self/other lookups, responsible-person contacts, and birthday queries with privacy-focused local encryption.

Enables authenticated clients to discover and call tools for scoped file listing/searching, request client-side LLM sampling, and receive real-time progress/log notifications over stdio or secure Streamable HTTP, with tenant/user workspace isolation and a loopback browser dashboard.

Enables AgentBase agents to call read-only tools for employee directory, leave balances, purchase orders, and inventory levels while keeping enterprise data inside the data center.

Enables LLMs to manage Clerk applications, domains, application transfers, instance users, JWT templates, and instance configuration via the Clerk Platform API.

Read-only MCP server for narrowly scoped Google Workspace user lookups via the Admin SDK Directory API, providing user status, search, aliases, and summary tools with strict domain and trust-boundary controls.