"Qubes OS" matching MCP servers:

A ready-to-deploy MCP server with in-process agent verification via KYA-OS Checkpoint, enabling secure tool access for verified agents.

Enables agents to request an API key or other secret from the user without the value passing through chat or tool arguments/results, storing it directly to .env, the OS keychain, or 1Password. The agent receives only metadata indicating whether storage succeeded.

One local gateway for all your MCP servers — shared by every AI coding tool (Claude, Cursor, VS Code, Codex). Set up each server once; keys stay in the OS keychain; lazy discovery keeps agent context small. Local-first, open source.

Local credential broker for AI agents: they call HTTP APIs, SSH, SFTP and databases through allow-listed presets while secrets stay in the OS keychain. Per-preset approval (desktop, terminal or Telegram) and an append-only audit log.

Enables MCP clients to search, describe, and call roughly 180 undocumented UniFi OS/Network console API operations from a bundled OpenAPI spec, plus curated reads and typed configuration changes. Writes are off by default, require per-entity enablement, and use previews, verification, and rollback safeguards.

Enables Claude to run safe, read-only diagnostics against servers and websites — certificate chains and expiry, HTTP status/redirects/security headers, DNS records, email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT) and sitemaps. Every check returns severity-tagged findings with concrete fixes, plus a 0-100 score and A-F grade, without any ability to modify the target.

OS keychain secrets for AI coding agents, over MCP. Anchors credentials to the native vault (macOS Keychain, Linux Secret Service, Windows Credential Vault) and exposes them through 44 policy-governed tools: per-environment values, TTL, linked rotation, encrypted transfer bundles, redacted exec, and a tamper-evident audit log. Local-first, no cloud account.

Enables an AI assistant to list, search, and read email over IMAP without marking messages as read, and to create and revise reply drafts that you review before sending. It runs with least privilege, keeping the app password in an OS keychain or password store and never sending, deleting, or moving anything.

A safe, structured MCP server that lets AI inspect and operate a VPS through typed, allowlisted tools for nginx, PM2, SSL, UFW, fail2ban, with read-only defaults and opt-in mutations.

Enables scanning Java (Maven) projects for known vulnerabilities via natural language, returning severity-sorted reports with CVSS scores and fix versions.

Local execution gate and stdio MCP proxy for AI agents, with tool policies, expiring leases, approvals and operator kill. Starts with two read-only setup tools; protection requires a trusted downstream server and private operator configuration. Not an OS sandbox. Apache-2.0.

Checks whether a product version (Windows, macOS/iOS, FortiOS, PAN-OS, RHEL, Ubuntu, Cisco, F5, Juniper and more) is FIPS 140-3 validated, in NIST's queue, or expiring, using NIST CMVP data with certificate links. Also lists certificates sunsetting soon and checks whole inventories, with optional x402 pay-per-call.

Supply chain risk scoring for npm, PyPI, and GitHub repos

Enables safe GitHub automation by queuing write operations for admin approval before execution.

The server can be utilized for secure development by listing all packages' CVEs, their affected versions and their fix versions.

Enables management of Scaleway IAM (applications, API keys, policies, permission sets) and Object Storage bucket policies through an MCP server.

Provides read-only access to VeriLock document metadata and cryptographic evidence, enabling clients to list, retrieve, verify, and audit documents through the Model Context Protocol.

Enables running AI coding agents and MCP servers inside an OS-level least-privilege sandbox that hides credentials and blocks network access by default, with tool firewalling, rug-pull protection, audit logging, and boundary verification.

Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.

MCP server for verifying high-impact decisions with Trust OS.

Enables AI assistants to manage Palo Alto Networks firewalls and Panorama through natural language, including policy inspection, configuration changes, monitoring, and log queries via the PAN-OS XML API.

Enables provisioning and management of IPsec tunnels and BGP-over-IPsec peers on Palo Alto Panorama-managed firewalls, with candidate-only, human-committed workflows and additional read/write tools for PAN-OS operations.

Enables management of Palo Alto firewalls through their REST API, including system information retrieval, PAN-OS upgrades, HA firewall management via Panorama, content updates, and certificate management.

Enables AI coding agents to use several Netlify accounts simultaneously by running the official Netlify MCP server once per account and adding an account argument to each tool. It supports routing reads across one, multiple, or all accounts while keeping changes scoped to a single account and storing tokens in the OS credential store.

A comprehensive MCP server for infrastructure operations with 92 tools across 13 categories, covering system monitoring, networking, containers, multi-cloud management, databases, CI/CD, IaC, security, and remote SSH fleet management.

A local stdio MCP server that enables coding agents to discover credential handles and create scoped action requests with local approval and sanitized output.

Connects AI clients to Tenable OT Security, exposing OT/ICS asset inventory, vulnerabilities, events, policies, and findings as read tools, with an opt-in dry-run write layer for asset edits and policy management.

An MCP server that enables agents to safely interact with CMS content, with deny-by-default write policies, type/field allowlists, and structured audit trails.

A high-performance MCP server for Ubiquiti UniFi Dream Machine (UDM Pro/SE) and UniFi OS Cloud Gateways, connecting directly to the local REST API using native API keys to provide 40 tools for managing Wi-Fi, VLANs, firewall rules, port forwarding, switch ports, guest vouchers, QoS, clients, and devices—all with 2FA bypass and ultra-low latency.

Exposes Nmap network scanning capabilities through a Model Context Protocol (MCP) server, allowing users to perform various types of network scans including vulnerability assessment, service detection, and OS fingerprinting.