"Information about notes or note-taking" matching MCP servers:

A deliberately insecure note management server designed to test security scanners and train developers by demonstrating common MCP vulnerabilities. It provides tools for creating, searching, and exporting notes while featuring intentional flaws like prompt injection and data leakage.

Enables security operations workflows by providing tools for CVSS 3.1 scoring, IOC extraction and defanging, email header triage, hash and JWT decoding, timestamp conversion, layered decoding, and CISA KEV lookups.

Enables engineers to estimate LLM costs, check GPU VRAM fit, audit MCP configs for security risks, and analyze network device config changes and compliance—all locally, with no account or telemetry.

Provides read-only network engineering analysis by parsing configs and logs to explain config changes, check CIS/PCI compliance, diagnose 802.1X issues, find embedded certificates, infer topology, and assess proposed changes before pushing them.

A deliberately vulnerable MCP server for practicing exploitation of tool poisoning, command injection, and path traversal. Includes fixed versions and an agent demo to reproduce the issues in a controlled environment.

Enables querying SAP Security Note metadata including Patch Day releases, CVSS scores, CVEs, affected components, and actively-exploited status via the Model Context Protocol.

Give secure read/write access to your Standard Notes vault — end-to-end encrypted, local stdio only, zero cloud middleman.

It enables MCP clients to authenticate with short-lived SPIFFE JWT-SVIDs as OAuth client credentials, obtaining audience-bound access tokens for scoped tool calls without static API keys.

Create and read burn-after-read encrypted notes. AES-256-GCM E2E encryption with self-destructing URLs for secure credential handoff between users and AI agents.

Enables AI agents to run read-only AWS security audits and receive normalized, severity-ranked findings about account posture, such as stale access keys, missing MFA, public buckets, open security groups, and CloudTrail coverage.

A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.

A Model Context Protocol (MCP) server for Socket integration, allowing AI assistants to efficiently check dependency vulnerability scores and security information.

MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via prompt-defense-audit

Enables natural-language queries about Azure resource compliance, including VM compliance, patch status, orphaned RBAC, and infrastructure health, through read-only MCP tools.

Enables local detection of protected health information in source code before it reaches LLM prompts, log statements, or analytics calls.

Detects and redacts sensitive personal information such as names, emails, phone numbers, ID numbers, and locations in text before it is processed by AI agents, using configurable mask, hash, or remove strategies.

Transparent Go proxy that intercepts, signs, rate-limits, redacts, and audits all MCP JSON-RPC tool calls without modifying client or server. Stores to JSONL or SQLite with HMAC-SHA256 signatures.

An MCP server for 7-Zip archive operations (list, extract, create) with dual-engine architecture and sandbox security features. Note: currently a learning project and not yet functional.

Exposes a tool surface for managing agent relationships and trust levels, enabling identity resolution, note saving, trust setting, and more, with data persisted to a specified directory.

Provides conversational access to a local CVE (Common Vulnerabilities and Exposures) database, enabling natural language queries to search vulnerabilities, retrieve detailed CVE information, and view security statistics.