"How to obtain an API key" matching MCP servers:

Secure MCP server with API-key authentication, bcrypt-hashed keys, and SQLite storage. It protects tools like user listing and secure greetings, requiring a valid environment-set key.

Enables users to register a single one-line secret credential (such as a personal access token) that is stored encrypted and scoped to their exact user and persona pair, then let MCP tools retrieve and use that key to call an upstream service. Key names can be listed for status checks, but the secret value itself is only decrypted inside a tool at call time.

An MCP server that enables authentication and authorization with Google's OAuth2 API, allowing users to securely authenticate and access Google services through natural language interactions.

An MCP Server that enables interaction with Google Cloud's Data Loss Prevention (DLP) API, allowing users to discover, classify, and protect sensitive data through natural language commands.

An MCP server that provides natural language interaction with Google's Policy Troubleshooter API, allowing users to troubleshoot access denied errors and analyze IAM policies.

An MCP server that enables interaction with Xero's Identity Service API, providing OAuth 2 authentication and identity management capabilities through natural language commands.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

An MCP server that provides access to Google's Access Context Manager API, enabling management of service perimeters and access levels through natural language.

An MCP server that gives an AI agent long-term memory it cannot read. VaultZero is a privacy-first memory vault: this package embeds and encrypts every memory on your machine before it is sent, so the server stores ciphertext and vectors and never holds a key.

Routes web requests from AI tools through Tor for anonymized fetching, with selective per-URL routing to bypass Tor-blocking sites.

Local MCP decision gate for AI agents and CI/CD: check candidate actions against owner-controlled policy and proposal-bound evidence. Three read-only tools report admissible options, missing evidence, and SHA-256 receipts. No selection, execution, or DeltaX API key.

SOC2 Compliance AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.

Enables querying and analyzing Tenable Vulnerability Management audit logs, including activity summaries, API key usage, and anomaly detection through MCP tools.

Offline MCP server that checks and scans your own AI prompts and outputs against a local compliance rule corpus. Returns rule ID, severity, citation, and remediation per finding — no API key, Apache 2.0.

Screens the counterparty of an x402 payment before an agent pays it. One tool, screen_payment, checks address sanity, dynamic-payTo swaps, transport safety and your spend policy, then returns allow / review / block with the reasons — advisory only, and by default it runs with no key, no account and no network call.

Enables AI agents to explain regex patterns in plain English and statically assess ReDoS risk before shipping, without executing the pattern or requiring an API key.

Demonstrates agent-native platform onboarding with human-in-the-loop API key provisioning, plus live usage and rate-limit queries via Anthropic Admin APIs.

Lets an agent verify VSL settlement receipts entirely offline and produce signed triggers authorizing a settlement, with the signing key and endpoint fixed at start-up rather than passed in tool calls. When started with an endpoint and token, it can also request a receipt from an issuer, which is the only tool that touches the network.

Enables an AI agent to send files end-to-end encrypted, encrypting on the user's computer and keeping the download link key, password, and login away from the model.

Cybersecurity AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

Scans suspicious messages, URLs, and text for scams inside any MCP-compatible AI assistant. No signup or API key needed for anonymous use.

Lets AI agents check whether an EVM wallet address carries an EIP-7702 delegation across eight chains (Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis, Unichain) and learn how to obtain a deeper paid report with delegate bytecode heuristics and risk levels. Read-only, never touching private keys or seed phrases.

Enables AI agents to perform passive security scans on domains, checking email spoofing (DMARC/SPF/DKIM), TLS weaknesses, security headers, exposed files, and subdomain-takeover risk without needing an API key.

Enables AI agents to query Trino and Apache Pinot lakehouses under enforced governance, where every SQL statement is AST-validated, table-allowlisted, priced from the engine's own plan before it runs, and blocked or admitted against scan-byte and intermediate-row budgets. It also grounds agents with schema discovery tools, returns verified results with warnings instead of misleading answers, and records every tool call on an audit trail.

Version-accurate library docs for coding agents, with a supply-chain check of every dependency they add: known advisories, malware records, lookalike names and versions that do not exist. Runs locally over stdio with npx -y pinright; no account or API key.

Enables MCP-speaking agents to execute tool calls through an authorization gate, producing signed decision records and reconciled effect rows for accountability.

Human-in-the-loop approval: a person approves the exact AI action with a passkey, and any service can check the signed approval offline.

Connects MCP-compatible AI agents to the AGLedger API for change control, recording every change with signed, hash-chained records. Provides API pass-through tools and an offline audit verifier.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.

Agent-readable feed of AI and agent tech news (framework releases, security advisories, compliance deadlines, classified hourly) and upcoming live events. Read anonymously; post items with a free API key.

Secure credential management for AI agents — encrypted storage, auto-refresh, and rate limiting via a single MCP call. Supports OpenAI, Anthropic, Stripe, GitHub, Brave Search, Kalshi, Coinbase, plus generic API key and OAuth2 for any service.

Enables AI agents to self-verify their authorized scope, check risk scores, and log behavioral events via the Kakunin compliance API.

Zero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.

AI Bill of Materials compliance tracking and SBOM generation for AI/ML systems

Enables an AI agent to check whether contracts are covered by ERC-7730 descriptors, preview how transactions and typed-data signatures would appear to a person, and simulate execution outcomes before signing, without holding keys or submitting transactions.

Enables encrypted messaging via Signal, SimpleX, and Session through a unified API, supporting message sending, polling, and key management.

GhostHunt is an MCP server that scans your development machine for API keys, tokens, and credentials hiding in places you forgot to check.

Verifies agent actions against mandates via a single tool, returning allow, deny, or requires_approval receipts without executing the actions.