"Payload CMS" matching MCP servers:

An MCP server for Password Pusher that allows creating, previewing, and managing self-destructing secret links without retrieving the secret payload.

MCP server that lets AI agents rent a real UK phone number and receive SMS/OTP verification codes directly in agentic workflows.

Enables AI assistants to perform cybersecurity tasks including hash analysis, CVE lookup, HTTP header auditing, WHOIS/OSINT, payload decoding, password strength evaluation, and threat report generation.

Enables agents to locally validate and decode transparency-log receipts against a chosen trust root, checking exact payload inclusion, grant admission, and receipt contents without a backend, account, key, or network. It also reports sealing, split-view, append-authority, and attribution outcomes using read-only tools.

Security, cost, and health governance proxy for MCP infrastructure. Enforces YAML-configurable security policies (blocklists, rate limits, token budgets), tracks real token costs via tiktoken, monitors server health with live JSON-RPC probes. Features OAuth 2.1/OIDC with RBAC, web dashboard, payload normalization, semantic shell AST analysis, mTLS, and a formal STRIDE threat model.

MCP server for integrating with Grizzly SMS platform to rent virtual numbers, receive SMS verification codes, and manage activations directly from AI assistants like Cursor, Claude Desktop, and OpenClaw.

MCP server for Thales CipherTrust Secrets Management (powered by Akeyless) enabling secrets, DFC keys, authentication methods, roles, targets, analytics management, and intelligent app development with hardcoded secret migration.

Local-first MCP server for per-agent key management, generating and using signing keys without external KMS.

Enables local-first governance preflight for MCP production, including plugin discovery, fail-closed policy evaluation, message validation, budget previews, and payload-free audit receipts without executing or proxying plugins.

Open-source sample MCP server built to be audited: ships a paid-tool x402 demo, a deliberately scannable surface, and documented security posture. From Payload, makers of the MCP Launch Readiness Audit (48-rule scanner with a fix for every finding, hardening templates, stress-test harness, readiness verifier, CI workflow, branded audit report) and the MCP Monetization Kit.

Enables interaction with Metasploit Framework for authorized security testing, including exploit searches, payload management, network scanning with nmap, and database operations for penetration testing workflows.

Enables Grok Bot Chiefs of Staff on separate user accounts to pair with owner approval, exchange addressed task proposals and availability windows, manage asymmetric capability grants, and revoke access through a hosted mailbox service. It runs as a standard MCP stdio client that authenticates with an owner's agent credential and supports contacts listing, message submission, cursor-based inbox polling, and idempotent retries.

MCP server toolkit with payload library, WAF bypass generator, rate limiter, plugin system, and inter-MCP bridge for security testing.

An MCP server that enables agents to safely interact with CMS content, with deny-by-default write policies, type/field allowlists, and structured audit trails.

MCP server for integrating with SMS-Activate service, enabling phone number operations, email activations, and account management for receiving SMS verification codes and temporary email addresses.

MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.

Enables AI agents to check whether a domain loads securely in a browser, including certificate validity and expiry, and to pull public homepage facts such as title, language, CMS, contact emails, phones, and social links. It also searches a small dated local-business index by category and area.

Verifiable API proxy and circuit breaker guard for autonomous agents, offering TLS attestation, payload schema inspection, circuit breaker enforcement, webhook signature verification, and 0G-anchored receipt attestation.

A Model Context Protocol server for Microsoft 365 administration using Graph API application permissions, enabling security monitoring, identity audits, incident response, and service health management.

Enables minting canary markers into package-generated synthetic datasets and scanning text you control to detect when a marker released to one recipient reappears elsewhere. Produces a payload-free, hash-linked evidence chain whose export verifies offline.