Skip to main content
Glama
115,941 servers. Updated

Matching MCP tools:

Matching MCP Connectors:

"Information about enclave-gateway" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    B
    quality
    B
    maintenance
    Governed MCP server (stdio & HTTP) and CLI orchestrator for isolated network enclaves: routes commands, 4 MiB delta file transfers, and TCP tunnels through a QEMU Windows VPN Appliance and an RDP Bastion (\tsclient) to multi-hop SSH target nodes, with policy-controlled routing, command guard, secret scrubbing, and hash-linked audit logs.
    18
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to request passwords, API keys, passkeys, and other secrets from a person through one-time links encrypted in the browser, then store them in a local vault the agent can use without ever seeing them. Secrets can be referenced in commands and outputs are redacted, so agents can sign in or call APIs without exposing credentials in chat.
    22 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    AI gateway to unify authentication and expose internal APIs as MCP tools. Supports SSO, JWT, and basic auth with auto-refresh.
    6
    9 npm
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Governed MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Acts as an intermediary between LLMs and other MCP servers, centralizing management, sanitizing sensitive information, and providing a unified interface for discovering and interacting with proxied MCPs.
    397
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enterprise MCP gateway providing unified tools for hardware telemetry/performance benchmarking, zero-trust security auditing, AES-256-GCM encrypted storage, HMAC payload verification, and Amazon Bedrock media generation.
    -
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to read and send email, handle attachments and manage calendar invitations through their own IMAP/SMTP mailboxes, with per-mailbox sender and recipient allow lists and automatic HTML-to-Markdown conversion. It runs as a single self-hosted Docker container, exposing the same tools over MCP and REST.
    2
    15
    13
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    This MCP server preserves a Bearer principal on every tool call and SSE frame, rotates vaulted credentials in place, and enforces per-tool allowlists for agents.
    3
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Enables LLMs to safely query databases through a secure gateway that masks PII, enforces role-based table access, rate limits requests, and logs all queries, with Prisma support.
    4
    762 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP proxy that enforces policy on every tool call, blocking or flagging actions before they reach downstream MCP servers.
    1
    47 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Tamper-evident audit trail for AI agent tool calls. Cryptographically signed, hash-chained records that prove what your agents did.
    3
    19 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Provides a security governance layer for AI agents to safely access upstream MCP servers, enforcing tool-level RBAC, parameter constraints, authentication via static tokens or OIDC, and tamper-evident audit logging.
    2
    1
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Finds MCP servers in the MCP Rating index and connects to them on demand, proxying their tools under namespaced names and notifying the client when tools change. Each server gets a short environment allowlist plus only the variables you name for it, so other API keys in your environment aren't passed on. Files aren't isolated unless you opt into Docker containers.
    13
    167 npm
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables policy-governed MCP interactions with deterministic authorization, tenant isolation, minimized PII exposure, and human approval gates for sensitive mutations, while producing structured audit events.
    3
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    Enables AI agents to run local, deadline-aware format and PII checks before acting, with an optional safety classifier that runs only when suspicious text can be checked in time. It provides allow/redact/block verdicts plus status and load-simulation tools for MCP clients such as Claude Code and Cursor.
    5
    -
  • F
    license
    A
    quality
    B
    maintenance
    Enables natural language querying of Tanium assets, vulnerabilities, patches, and deployment information through the Tanium Gateway GraphQL API, integrating with MCP hosts like Claude Desktop, Cursor, VS Code, and Gemini CLI.
    21
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Zero trust gateway for MCP servers. Aggregate, filter, and securely access MCP tools from anywhere without VPNs, open ports, or exposed endpoints. Built on OpenZiti, zrok, and Agora with cryptographic identity, mTLS, per-client isolation, and tool-level permission control.
    55
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides governed, read-only PostgreSQL access for AI agents via MCP. Enforces schema/table allowlists, query limits, and audit events.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Secure MCP protocol proxy with OAuth2 + Dynamic Client Registration (DCR), JWT auth, RBAC, rate limiting, multi-server aggregation, and a monitoring/admin dashboard.
    106 PyPI
    13
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents and MCP clients to safely access upstream MCP servers through centralized policy enforcement, including allow/deny/approval decisions, schema pinning, circuit breakers, and audit logging.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP-based AI agents to route tool calls through governance without code changes, checking each call against a mandate and allowing, refusing, or holding for approval while keeping tool API keys out of the AI app.
    69 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to safely connect to MCP servers by sanitizing sensitive data in tool results and restoring it in tool arguments, so the model never sees PII while downstream tools still receive real values.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Governs any stdio MCP server by interposing between the agent and the server, enforcing policy on every tools/call and refusing denied actions before they reach the upstream server.
    14 npm
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to place spot market orders on a paper or ccxt exchange account only when the trade fits a pre-registered mandate, sealing a hash of the agent's rationale into a tamper-evident trace and reconciling the authorized intent against the actual fill. It also exposes the mandate, quotes, balances, and trade trace/journal records as tools, failing closed whenever policy checks are unreachable.
    64 PyPI
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    An MCP routing proxy that prevents LLMs from executing unintended tools. It securely curates, filters, and routes tools from multiple backend MCP servers. (LLMが意図しないツールを実行するのを防ぐMCPルーティングプロキシ。複数のバックエンドMCPサーバーからのツールを安全にキュレーション、フィルタリング、ルーティングします。)
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to connect to tools and data through a governed MCP endpoint with agent identity, scoped permissions, guardrails, and full audit trails. Access is user-controlled and can be revoked instantly, with every tool call logged by agent identity and timestamp.
    MIT