"Local" matching MCP servers:

A deterministic, fail-closed MCP server that discovers approved local resources, plans bounded routes, and renders—but never executes—selected calls.

Enables cloud-based MCP clients to delegate privacy-sensitive or large-output tasks to a local LLM, returning sanitized placeholders or digested summaries so private data never leaves the user's network.

Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.

Enables a cloud orchestrator to query a local Ollama model over Tailscale or a LAN as a side-channel for drafts, summaries, and other helper output, with tools to list available models and to redact text. Answers leaving the server are passed through output-only DLP that masks card numbers, IBANs, emails, phone numbers, API keys, and similar secrets before they reach the cloud.

Generates, validates, and deploys CrowdSec WAF rules and scenarios through natural language.

A secure MCP server that allows Claude to read and write local files on your machine with explicit approval gating for each access.

Local-first MCP server for per-agent key management, generating and using signing keys without external KMS.

MCP server that provides local, de-identified access to a demo EMR database using a private LLM for de-identification, ensuring raw patient data stays local.

Enables ChatGPT Web Developer Mode to securely read, search, list, and edit files inside user-approved local folders, and optionally run approved developer commands on the user's Windows machine.

A security-focused Model Context Protocol server that enables controlled local tool execution through strict network firewalls, filesystem protections, and rate-limiting policies. It features a plugin-based architecture for progressive tool discovery and includes reference implementations for web searching and bug tracking.

Enables local synthetic-data evaluation of domain trustworthiness via five tools for reporting, verifying, and looking up domain signals, with conservative observation, rate limiting, and privacy-preserving logging.

Enables enterprise-managed authorization for MCP on Azure App Service, with deployable Entra OAuth and a local EMA ID-JAG lab exposing whoami and authorization_model tools.

Enables local, privacy-mode incident handoffs with four fixed questions, pattern-guarded redaction, human-review drafts, and optional in-memory data clearing.

A local, containerized MCP server that uses a local LLM to sanitize documents by removing or transforming PII before content is sent to public LLM services.

Enables safely inspecting and configuring Hikvision cameras via a local MCP server, with permission enforcement, read-only diagnostics, and supervised mutation flows.

Sits in front of any MCP server to enforce allow/ask/block policies on tool calls, paths, shell commands, and network domains, with local approval prompts and an audit log.

A zero-infrastructure, local proxy that wraps any stdio MCP server to add audit logging, policy enforcement with regex guards, and per-session/per-day budgets.

A local signing MCP server that lets Claude Code use private keys without ever exposing key material to the model's context window.

A local MCP server for Gmail with strict alias whitelisting, allowing AI clients to search, read, reply to, and send emails only from explicitly whitelisted alias addresses while keeping all other mailbox content unreachable.

Enables PII detection and anonymization using Microsoft Presidio with tools, resources, and prompts via MCP.