"Land Rover" matching MCP servers:

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Umbra is the trust layer for AI-generated code. It scores any repo 0-100 with file:line evidence (security, slop, Docker-verified build/boot, and claim receipts that catch agents lying about tests), and guards agent file writes mid-stream blocking leaked keys, alg:none JWTs, and git-hook plants before they land. Tools: scan_repo, guard_content, get_score.

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

Enables agents to perform Schnorr zero-knowledge identification and cryptographic attestation through a native MCP interface, including commitment-challenge-response proofs, JWT validation, Merkle inclusion checks, and replay protection.

Enables AI agents to create orders, capture payments, issue refunds and send payouts against the PayPal sandbox through four guarded MCP tools, where every call is authenticated, validated, risk-scored and policy-checked, risky actions wait for human approval, and all state changes land in a tamper-evident hash-chained audit log.

A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.

Enables AI agents to get a second signature on writes to systems of record by proxying MCP servers, fetching affected records, deriving comparisons in code, and using Jev to warn or hold doubtful calls before they land.

A ModelContextProvider server that enables secure querying of Red Hat internal groups API using client certificate authentication.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Local execution gate and stdio MCP proxy for AI agents, with tool policies, expiring leases, approvals and operator kill. Starts with two read-only setup tools; protection requires a trusted downstream server and private operator configuration. Not an OS sandbox. Apache-2.0.

Enables generating secure passwords, exposing password policies, and providing reusable prompt templates for secure password creation through MCP primitives.

Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.

Enables deterministic request screening and, after native owner approval, fixed-target DeadBolt enforcement actions such as kill, deny, revoke, and evidence retrieval through local stdio MCP. Model analysis can advise but cannot approve actions.

Enables AI agents to discover and invoke backend tools over MCP JSON-RPC while enforcing 3-legged OAuth 2.0 identity propagation, role-based access control, and protocol transcoding to REST APIs.

Enables agents to read and report, and to carry human-authored updates into systems of record after human consent, while structurally preventing autonomous writes of commitments like owners, due dates, or statuses.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.

Enables enterprise MCP clients and partner agents to execute tenant-isolated underwriting, claims, and compliance workflows with durable step checkpointing, evidence-grounded tool calls, and deterministic PDF citation receipts. It supports A2A task dispatch and MCP JSON-RPC operations while blocking cross-tenant access and ungrounded deliverables.

A wrapper for mcp-remote that provides secure authentication for protected MCP servers using Adobe IMS or Okta OAuth flows. It features automated token management, validation, and background refreshing for seamless access to remote resources.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Enables secure, controlled access to existing relational databases via MCP, with API key authorization, read/write permissions, table-level allow/deny lists, SQL validation, rate limiting, audit logging, and a web management console. Supports PostgreSQL, MySQL, SQLite, SQL Server, and Oracle.

Enables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.

Enables automated review and analysis of network security controls (AWS Security Groups, Network ACLs) using natural language queries. Supports NSC configuration reviews, network segmentation testing, and identifying security gaps through conversational LLM interaction.

Enables authenticated natural-language interaction with the CoSMeTIC zero-knowledge proof service by exposing tools to request proofs, check status, download proofs, and verify results, while managing job and session state.

Validates URLs and checks their reputation to help identify AI hallucinations and verify web page authenticity.

Provides governed MCP tools for querying optionally restricted Microsoft Sentinel/Log Analytics tables and optional Defender XDR hunting data, retrieving incidents and entities, and—for agent identities only—adding attributed incident comments, with Entra ID authentication, KQL validation, rate limits, and redacted audit logging.

Enables agents to look up indicators of compromise, check URLs against a bundled phishing feed plus advisory heuristics, screen arbitrary text, and list campaigns — each verdict returned as inert data with campaign and MITRE ATT&CK context, never fetching or executing anything.

AI-powered memory dump analysis using Volatility 3 for digital forensics investigations. Enables process analysis, malware detection, network forensics, timeline generation, and anomaly detection with support for Claude, Llama, and other LLMs.

A deployable MCP server template for Cloudflare Workers that provides Google OAuth authentication and comprehensive analytics tracking of tool usage, performance metrics, and user behavior.

Stateless Streamable HTTP MCP endpoint with OAuth 2.1 authentication via Cloudflare Workers, supporting PKCE, DCR, and token introspection.

Exposes AI-augmented network reconnaissance and evasion capabilities as callable FastMCP tools, enabling natural language orchestration of host discovery, service fingerprinting, CVE mapping, and attack chain synthesis.