"Information about playwrights or the Playwright framework" matching MCP servers:

A framework for building MCP servers with built-in enterprise capabilities such as authentication, authorization, telemetry, audit logging, and data classification, allowing domain developers to focus on business logic while maintaining governance and compliance.

A minimal MCP server framework for single-owner production deployments using OAuth authorization code flow with PKCE, providing endpoints for MCP, authorization, token, and metadata.

Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.

A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.

Enables AI coding agents to run one-shot commands and copy single files to and from remote servers through The Bastion, which authenticates, authorizes, and records each action. Access is controlled by the bastion rather than allowlists or deny lists.

Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.

A fork of Playwright MCP that adds PhiShark preflight and browser-deep security checks to block or warn on phishing and high-risk pages.

the-real-unifi-mcp License: MIT Node MCP SDK [![CI](https://github.com/mguttmann/the-real-unifi-mcp/actions

Local stdio MCP server for Bitwarden (Public API + Secrets Manager). 50+ admin tools for members, groups, collections, policies, licensing, projects, and secrets. For Claude Desktop / Claude Code.

Enables secure remote access to a Playwright-based MCP server with authentication and role-based access control powered by Descope.

Enables creation of secure-by-default MCP servers with 5-layer validation to protect against injection, path traversal, and other attack vectors.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

Enables coding agents to drive a browser through an authenticated session while being unable to read the credential that created it, by running the browser process under a separate OS user and stripping unsafe code-execution tools. The agent interacts over MCP with a hardened, tool-filtered automation server seeded from a login helper's saved session.

Open-source MCP server: encrypted local keys and state, operator approval gates, a hash-chained log.

A verifying MCP gateway that pins approved tool manifests and skill files to content addresses, blocking tampered descriptions before they reach model context.

Enables autonomous agents and MCP-compatible clients to enforce policy-approved actions using risk tiers, reversible checkpoints, and token approval bounds.

Enables agents to audit and safeguard repositories by detecting dependency pinning issues, license compliance problems, hardcoded secrets, and dead code through MCP tools.

MCP server for AI agent identity — verify agents with Ed25519 signatures, check trust scores, sign and verify content, exchange encrypted messages. Built on the Agent Identity Protocol (AIP).

Enables users to query BloodHound Active Directory graph data using natural language, finding attack paths, Kerberoastable accounts, and other AD security insights.

Enables AI agents to scan, redact, and govern sensitive data before sending it to external tools through DLP, secure chat, and shadow AI discovery tools.

A production-shaped starter for putting an MCP server in front of an existing app, with OAuth and enterprise SSO handled through Clerk, enabling AI assistants to act on your product on behalf of logged-in users.

A local gate that lets agents submit risky tool actions for policy evaluation and receive ALLOW, DENY, or REQUIRE_APPROVE decisions before executing irreversible side effects. It can also open human approval holds and record an activity trail without executing the side effect itself.

Enables an AI to risk-review Terraform and OpenTofu plan files over MCP stdio by summarizing plans, ranking dangerous changes, diffing resources with secrets masked, and comparing two plans without running Terraform.

Enables AI agents to inspect git working trees and history for exposed credentials without letting raw secrets reach the model, with false-positive filtering, baseline support, and remediation guidance.

Enables an AI agent to check whether a site is healthy and configured correctly by reading TLS certificates and classifying handshake failures, resolving DNS records from raw wire packets, tracing HTTP redirects and timings, and grading security headers with exact fixes. Every connection passes through an SSRF guard that vets and pins addresses so the agent cannot be aimed at internal networks.

Enables an AI to statically audit GitHub Actions workflow files, parsing YAML with accurate line numbers and reporting findings about on: key quirks, expression injection risks, unpinned actions, effective token permissions, and cron scheduling.

Enables AI agents to run read-only AWS security audits and receive normalized, severity-ranked findings about account posture, such as stale access keys, missing MFA, public buckets, open security groups, and CloudTrail coverage.

Agent-friendly query layer over the ASD Information Security Manual, served via MCP. Enables agents to discover and interrogate ISM controls using plain language queries and coverage tracking for IRAP review.

Enables AI assistants to interact with security data pipelines and map data to the Open Cybersecurity Schema Framework (OCSF) through Tenzir. Provides seamless integration for processing and analyzing cybersecurity data using natural language.

Agent-readable feed of AI and agent tech news (framework releases, security advisories, compliance deadlines, classified hourly) and upcoming live events. Read anonymously; post items with a free API key.

A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.

A read-only MCP server for the Qualys PCI Merchant API that lets LLM assistants answer questions about PCI compliance posture, such as which hosts are failing PCI or listing high findings.

Enables MCP-compatible agents to query security checklists, protocols, and framework mappings to safely build and operate AI agents, with tools for checklist runs, protocol lookup, mapping lookup, and threat search.

Open-source .NET framework and server for Model Context Protocol (MCP) with enterprise OAuth 2.0/OIDC auth, per-tool MFA, OpenTelemetry, and health checks.

Orchestrates multiple AWS security services to provide comprehensive security assessments, threat analysis, and multi-framework compliance monitoring. It enables users to perform automated remediation recommendations and incident investigations through a unified Model Context Protocol interface.

An MCP server that exposes macOS-native device trust signals — the facts about a Mac that cannot be gathered from a Linux container or a cloud runner. All tools are strictly read-only.

Verifies agent actions against mandates via a single tool, returning allow, deny, or requires_approval receipts without executing the actions.

Mandatory human approval gate for autonomous AI agents. Before any critical, irreversible, or financially significant action executes — file deletion, production deployment, financial transaction — the agent calls oracle_validate. A human receives a real-time Telegram notification with full context and taps Approve or Reject. The agent waits for the decision before proceeding.