"Notes or documentation related to 'rag'" matching MCP servers:

MCP server that integrates Apache Ranger authorization with RAG, enforcing Ranger policies to control access to knowledge bases before forwarding queries to RAG Studio.

A small notes server exposing scoped, cacheable tools over streamable HTTP, with OAuth token introspection and resource-server metadata so callers are identified per user. It enforces per-subject rate limits as tool-level errors and emits OpenTelemetry spans following MCP semantic conventions, and can also run locally over stdio without auth.

Enables security operations workflows by providing tools for CVSS 3.1 scoring, IOC extraction and defanging, email header triage, hash and JWT decoding, timestamp conversion, layered decoding, and CISA KEV lookups.

Enables engineers to estimate LLM costs, check GPU VRAM fit, audit MCP configs for security risks, and analyze network device config changes and compliance—all locally, with no account or telemetry.

Provides read-only network engineering analysis by parsing configs and logs to explain config changes, check CIS/PCI compliance, diagnose 802.1X issues, find embedded certificates, infer topology, and assess proposed changes before pushing them.

A deliberately insecure note management server designed to test security scanners and train developers by demonstrating common MCP vulnerabilities. It provides tools for creating, searching, and exporting notes while featuring intentional flaws like prompt injection and data leakage.

A deliberately vulnerable MCP server for practicing exploitation of tool poisoning, command injection, and path traversal. Includes fixed versions and an agent demo to reproduce the issues in a controlled environment.

Enables agents to search across the pooled tools of many connected MCP servers and invoke them through a single endpoint, returning only the handful of tools relevant to each request. Filters by the caller's permissions before ranking, so agents never see or plan around tools their user is not allowed to use.

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Enables AI assistants to search and retrieve information from the REMnux malware analysis toolkit documentation, allowing users to ask questions about reverse-engineering tools and get accurate, up-to-date answers from the live documentation.

Enables querying SAP Security Note metadata including Patch Day releases, CVSS scores, CVEs, affected components, and actively-exploited status via the Model Context Protocol.

Enables authenticated AI agents to read and write notes through MCP tools while enforcing mTLS certificate identity, per-server audience, per-tool scopes, and DPoP-bound tokens.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Give secure read/write access to your Standard Notes vault — end-to-end encrypted, local stdio only, zero cloud middleman.

It enables MCP clients to authenticate with short-lived SPIFFE JWT-SVIDs as OAuth client credentials, obtaining audience-bound access tokens for scoped tool calls without static API keys.

Enables clients to query local cybersecurity evidence, retrieving source-backed passages, exact entities, documents, documented relationships, and database status from ATT&CK, OWASP, Sigma, CVE, KEV, and NVD data with citations and immutable snapshots.

Exposes standard MCP tools for secure calculation, knowledge-base retrieval, document statistics, and sensitive operations like email, export, and deletion with human-in-the-loop approval.

Enables Claude to list Iceberg tables and run read-only DuckDB SQL queries, including time travel by snapshot, with per-caller token authentication and audit logging.

Create and read burn-after-read encrypted notes. AES-256-GCM E2E encryption with self-destructing URLs for secure credential handoff between users and AI agents.

MAC-address (OUI) vendor lookup and router default-login directory for AI agents, backed by ssid.ai. Identify a device manufacturer from its MAC address, detect randomized/private addresses instead of reporting unknown, or fetch a router's default login IP and admin credentials — every field cited to the manufacturer's own documentation

Enables agents to request an API key or other secret from the user without the value passing through chat or tool arguments/results, storing it directly to .env, the OS keychain, or 1Password. The agent receives only metadata indicating whether storage succeeded.

AI agent provenance, trust, and auditability layer. VERITAS multi-gate scoring, Cortex approval gates, S.E.A.L. hash-chain audit ledger, and semantic RAG with cryptographic provenance tracking for every decision an agent makes.

Enables coding agents to send files and notes into approved Zas channels and read items back, with content encrypted before leaving the machine and scoped, revocable agent access.

Enables searching CaptchaLa documentation and validating or issuing CaptchaLa tokens directly from MCP clients like Claude Desktop and Cursor.

Transparent Go proxy that intercepts, signs, rate-limits, redacts, and audits all MCP JSON-RPC tool calls without modifying client or server. Stores to JSONL or SQLite with HMAC-SHA256 signatures.

Provides instant access to authoritative security documentation from organizations like OWASP, NIST, and major cloud providers through natural language semantic search. It enables users to retrieve security best practices, frameworks, and vulnerability information directly from a locally cached knowledge base.

Provides access to Better Auth framework documentation, authentication provider configurations, database adapter setup, and generates production-ready authentication configs for modern web frameworks.

Enables AI assistants to send SMS messages, verify phone numbers via OTP, assess fraud risk, and access TeleSign API documentation through natural language.

Enables management of penetration testing reports and vulnerabilities through a REST API, supporting CVSS 3.1 scoring, HTML formatting, and secure JWT authentication for comprehensive security assessment documentation.

MCP server for managing Porkbun domains, DNS, and related services via Porkbun's API. Every mutation requires a reason and is audited for traceability.