"How to read document contents" matching MCP servers:

Routes web requests from AI tools through Tor for anonymized fetching, with selective per-URL routing to bypass Tor-blocking sites.

Provides access to Atomic Red Team tests, enabling search, validation, and execution of atomic tests via natural language.

Lets AI agents check whether an EVM wallet address carries an EIP-7702 delegation across eight chains (Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis, Unichain) and learn how to obtain a deeper paid report with delegate bytecode heuristics and risk levels. Read-only, never touching private keys or seed phrases.

MCP server for sealing, verifying, and reading KNOBE Protocol v1 documents with human-confirmed authorship, ensuring document provenance and integrity.

Investigate fraud directly from Claude, Cursor, or any MCP-compatible client. Analyze suspicious activity with clear, evidence-backed verdicts. Pivot from a single signup to every account sharing the same device, IP address, or email inbox. Check entities against a cross-operator abuse network, review linked accounts, and efficiently process your fraud review queue. Read-only by default, with no r

Provides 8 financial-grade KYC identity verification tools for AI agents, including face comparison, liveness detection, document OCR, and risk media labeling.

A read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token.

Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. A seal proves a record existed at a time, not that its contents are true. Five tools over stdio with npx -y apex-psi-mcp — no account, no key, verification free forever.

Local-first MCP proxy with BM25 tool discovery, quarantine security, Docker isolation, OAuth support, activity logging, and web UI. Routes multiple upstream MCP servers through a single endpoint.

Enables MCP clients to derive and resolve W3C-compatible did:xrpl identifiers, check agent authorization, and look up XRP Ledger account, DID, and transaction data. It optionally supports guarded DID Document publishing using keychain-held signing seeds.

Enables reading and verifying C2PA Content Credentials from images and videos through both embedded manifests and invisible watermarks. Supports direct filesystem access, URL checking, and provides structured provenance data including creator identity, AI generation info, and content authenticity.

Enables AI assistants to shorten URLs with click tracking and to hand over credentials as self-destructing, one-time links whose contents are encrypted locally before transmission, so the recipient can open them exactly once. Also provides tools to list links, inspect secret metadata, revoke secrets immediately, and check account plan and rate limits.

Enables AI assistants to raise, submit, approve, amend, and cancel purchase orders and onboard suppliers in ERPNext or SAP S/4HANA while enforcing procurement controls such as duplicate detection, budget limits, split-purchase checks, price tolerances, and segregation of duties.

A data-loss-prevention (DLP) layer for AI agents that intercepts document reads, scans for sensitive data, and redacts or blocks it before it reaches the model, with audit logging.

Enables agents to locally validate and decode transparency-log receipts against a chosen trust root, checking exact payload inclusion, grant admission, and receipt contents without a backend, account, key, or network. It also reports sealing, split-view, append-authority, and attribution outcomes using read-only tools.

A secure email gateway MCP server that protects AI agents from prompt injection attacks by scanning emails for malicious instructions before they reach the agent.

Enables Claude, Cursor, VS Code, and other MCP clients to extract data from INE/IFE voting credentials and create one-time capture links so clients can photograph their document from a phone.

A security-hardened Postgres MCP server that enables LLM agents to run safe, read-only SQL queries with enforcement via SQL-AST inspection and read-only transactions.

Checks how long ago a package version was published and returns the newest version older than a minimum age (3 days by default), so an agent avoids brand new releases when adding dependencies. Also checks lockfiles across 15 ecosystems; read-only.

A demonstration server that reveals security risks by accessing sensitive environment variables, illustrating how MCP tools can potentially leak user data without explicit consent.

Provides read-only access to VeriLock document metadata and cryptographic evidence, enabling clients to list, retrieve, verify, and audit documents through the Model Context Protocol.

Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.

Enables any MCP client to look up CVE intelligence — severity summaries, filtered searches, and full per-CVE detail fusing NVD, MITRE-CNA pre-NVD, CISA KEV, EPSS, and GitHub GHSA data — alongside a Shodan-derived internet-exposure footprint showing how many internet-facing services run a version mapping to a given CVE. It is free, keyless, and read-only, and distinguishes verified zeros from unassessed or failed lookups.

Enables AI agents to list visible objects, submit deletion requests into human-reviewed quarantine, and check the status of their own requests without granting delete, approve, or restore capabilities.

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Enables MCP clients to safely inspect and query an explicitly allowlisted subset of a Postgres database through four read-only tools: a readiness check, table listing, column description, and typed row selection with filters, ordering, and paging. It runs over stdio for local clients or Streamable HTTP for separately managed ones, with bound parameters, bounded reads, and read-only transactions.

Enables AI coding agents to plan, policy-check, and cost-estimate Terraform changes while requiring human approval through Slack or CLI before any terraform apply can execute.

Local stdio MCP server with six tools for browser verification detection, authorized provider test-key and owned image/text actions, and task resumption in an existing Playwright/CDP session. Includes four demos with server validation.

Enables privacy-first, offline indexing and full-text search across local document workspaces while automatically redacting PII/secrets and enforcing path access controls before snippets reach LLMs.

Enables users to find and verify corporate emails, enrich company websites, score deliverability risk, audit domain email/SSL/RDAP security, and stress-test or optimize quantitative trading strategies. It exposes these capabilities as eight production MCP tools consumable from Claude Desktop, Cursor, Windsurf, Cline, Clay, and n8n.