"Oh Dear" matching MCP servers:

Mandatory human approval gate for autonomous AI agents. Before any critical, irreversible, or financially significant action executes — file deletion, production deployment, financial transaction — the agent calls oracle_validate. A human receives a real-time Telegram notification with full context and taps Approve or Reject. The agent waits for the decision before proceeding.

Supply chain risk scoring for npm, PyPI, and GitHub repos

Connects AI clients to Tenable OT Security, exposing OT/ICS asset inventory, vulnerabilities, events, policies, and findings as read tools, with an opt-in dry-run write layer for asset edits and policy management.

Enables assistants to inspect tamper-evident AI agent action journals through read-only verification, event querying, and policy-rule explanation.

Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification.

An MCP server for prompt injection boundary enforcement that scans URL content using a tiered LLM model strategy.

Tells you how you and your Claude agent actually work together. Reads CLAUDE.md, hooks, skills, memory + scheduled tasks and writes you a letter. Local-only, no API keys, no data leaves your machine.

An MCP server that provides secure access to 1Password secrets and item management through the 1Password CLI. It enables MCP clients like Claude and Cursor to read, create, edit, and delete password vault items with biometric authentication handled by the 1Password desktop app.

A ready-to-deploy MCP server with in-process agent verification via KYA-OS Checkpoint, enabling secure tool access for verified agents.

Enables GDPR privacy compliance and DSAR management, including creating, tracking, and updating Data Subject Access Requests, checking GDPR compliance, and maintaining a data processing inventory through MCP tools.

Enables MCP clients to exchange an MCP-audience token for a Microsoft Graph token and call Graph as the signed-in user, with tools for identity verification and recent mail access.

Enables interaction with 1Password vaults and items via the op CLI, supporting vault listing, item lookup, password read/create/update/generate, and delete operations. Zero idle CPU usage and supports service account tokens for headless use.

Enables to manage 1Password resources including vaults, items, documents, users, groups, and more through the 1Password CLI, exposing 65 tools for comprehensive password management via natural language.

An MCP Server that enables users to interact with Google's On-Demand Scanning API (v1beta1) through natural language, likely providing capabilities for vulnerability scanning and security analysis of containers and artifacts.

Enables agents to sign into websites through a real browser without exposing passwords, keeping cookies in a local Chrome profile and providing tools for browsing and managing authenticated sessions.

Provides read-only access to VeriLock document metadata and cryptographic evidence, enabling clients to list, retrieve, verify, and audit documents through the Model Context Protocol.

MCP server for verifying high-impact decisions with Trust OS.

Enables read-only interaction with YesWeHack hunter accounts via MCP, allowing consultation of programs, scopes, reports, and credits using email/password/TOTP authentication.

Enables threat intelligence for SOC and DFIR workflows, including IOC enrichment, CVE and threat actor lookup, domain scanning, and account-based scan management.

Connects AI assistants to the Vectra AI On-Premise security platform for natural language threat detection, investigation, and automated incident response workflows.