"How to read and write in Microsoft Word" matching MCP servers:

Sits between an AI agent and its MCP servers. Reads pass, writes are checked against your lists, and a read-only server refuses every write.

Enables read-write management of Microsoft Intune devices and group memberships via the Microsoft Graph API, including device property updates, remote actions, and group membership changes.

Enables AI agents to query Microsoft Entra data using natural language, converting requests into Microsoft Graph API calls for read-only enterprise IT scenarios.

Connects LLMs and AI agents to enterprise Microsoft 365 environments, enabling administration across Exchange Online, Microsoft Graph, Entra ID, compliance, security, mailbox operations, and mail-flow diagnostics through 34 tools.

Enables searching for relevant tables and retrieving data from Microsoft Sentinel's data lake using natural language, supporting security hunting scenarios like password-spray detection and impossible travel checks.

Enables querying GitHub Security Advisories from a local cloned advisory database using tools like list_advisories and get_advisory.

Enables AI agents to turn raw calldata, transaction objects, JSON-RPC requests, EIP-712 typed data and personal_sign messages into short plain-English briefings covering what a request asks for, which risky allowances or permissions need attention, and what could not be verified. Runs entirely offline with no RPC, wallet, API key or safety verdict, using three read-only tools exposed to any MCP client.

A secure email gateway MCP server that protects AI agents from prompt injection attacks by scanning emails for malicious instructions before they reach the agent.

It enables AI agents to securely perform directory administration, automation, security auditing, health diagnostics, and compliance reporting with strict guardrails, write-approval workflows, and immutable audit logs.

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

This MCP server implements VariousPolicies according to CSA BOD 25-01 requirements for Microsoft 365 cloud services

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

Enables agents to run SELECT-only queries and inspect table metadata against configured databases via MCP Proxy, with timeouts, row and byte caps, and audit logging.

A FastMCP server that provides AI assistants with access to Microsoft Entra (Azure AD) directory services. It enables LLMs to search for users, groups, and check memberships using the Microsoft Graph API.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Provides secure access to Microsoft Entra ID (Azure AD) resources including users, devices, and applications through Microsoft Graph API. Enables querying organizational data with comprehensive audit logging to Azure Blob Storage.

Blocks AI coding assistants from installing non-existent packages and accessing non-existent files.

Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.

Enables MCP clients to safely inspect and query an explicitly allowlisted subset of a Postgres database through four read-only tools: a readiness check, table listing, column description, and typed row selection with filters, ordering, and paging. It runs over stdio for local clients or Streamable HTTP for separately managed ones, with bound parameters, bounded reads, and read-only transactions.

Provides comprehensive management of Microsoft 365 services including Exchange, SharePoint, Teams, Azure AD, Intune device management, security & compliance frameworks, and universal access to 1000+ Microsoft Graph API endpoints with advanced features like batch operations, delta queries, and real-time webhooks.

A Model Context Protocol server that enables secure interaction with Microsoft SQL Server databases, allowing AI assistants to list tables, read data, and execute SQL queries through a controlled interface.

Enables account-isolated, read-only access to a chosen Gmail account for searching mail, retrieving message and thread content, downloading attachments, and listing labels. It verifies the actual Google OAuth grant and account before starting and emits ready-to-use Codex or JSON MCP client configuration.

Provides read-only access to PostgreSQL databases via MCP, enforcing least-privilege roles, row-level security, masked views, and SQL AST guardrails to prevent data leakage and unauthorized operations, enabling AI agents to safely query sensitive production data.

Enables read-only inspection of a Zoho mailbox over a one-shot, outbound-only connection — listing accounts and folders, listing or searching messages, and retrieving message content and attachment metadata — plus bounded parsing of aggregate DMARC report attachments via a separate REST adapter. It performs no writes, sends, deletes, or read-marks, and requires a trusted private configuration envelope for pinned hosts, mailboxes, and credentials.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.

Authentik MCP provides seamless integration with Authentik's API, supporting both full-featured and diagnostic modes. These enable secure, automated user, group, and system management through MCP-compatible tools.

Enables an agent to read Slack channel history, threads, channel metadata and user info, and to search messages using your own account's browser session rather than a bot, with all access restricted to an explicit channel allowlist. Message sending, editing and deleting are deliberately not supported.

A secure MCP server that enables querying PostgreSQL databases through an SSH tunnel with enforced read-only access, connection pooling, and comprehensive data exploration tools.

Enables analytics agents to run validated read-only SQL against a warehouse API with enforced row limits, required JSON responses, and secret-safe audit metadata.

Enables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.