"Toll" matching MCP servers:

Paid remote MCP gate for caller identity, agent scope, task intent, data class, policy verdicts, and audit receipts.

Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.

Exposes an MCP server that routes every agent tool call through deterministic policy gates, budget escrow with clawback, authenticated approvals, and a hash-chained audit trail, enabling agents to safely perform money-related operations while receiving actionable denial reasons.

Enables centralized proxy and orchestration of MCP servers, providing unified tool discovery, authentication, and secure request routing. It adds a human-in-the-loop approval gate for high-risk actions and audit logging.

Enables agents to check third-party tool licenses, validate vendor policies, and issue license receipts before using external tools.

Enables MCP servers to complete OAuth2 flows by accepting authorization codes from a serverless callback, storing them encrypted with a short TTL, and allowing one-time retrieval by the originating server. It also provides status tools for pending codes and service health.

Enables declaring a catalog of tools for LLMs, filtering them by role, validating arguments, guarding sensitive calls with server-side confirmations, and recording an audit log.

An enterprise MCP server scaffold that provides secure, governed access to internal tools through RBAC, audit logging, rate limiting, and prompt-injection boundaries, with a FastAPI control plane and OpenTelemetry observability.

Enables verification of deployment-scoped model-visible DSH tool surface conformance by checking recorded tool identities and schemas against approved locks, reporting only drift categories and hashes.

A secure tool-execution plane for agentic AI that enforces JWT authentication, rate limiting, prompt-injection inspection, and audit logging, while ingesting downstream OpenAPI endpoints as MCP tools.

Protects AI agents from bad tool outputs, schema mismatches, and tool poisoning by validating, sanitizing, and scoring reliability of tool responses.

MCP server that detects and guards against tool poisoning and prompt injection attacks in tool descriptions and schemas. It provides risk scoring, pattern detection, safe rewriting, and audit reports with zero external API cost.

MCP server for the DPYC ecosystem that certifies North American operators using the Lightning network, enabling regional certification and audit trails with low latency.

Enables agents to search across the pooled tools of many connected MCP servers and invoke them through a single endpoint, returning only the handful of tools relevant to each request. Filters by the caller's permissions before ranking, so agents never see or plan around tools their user is not allowed to use.

Enables MCP clients to fetch the signed-in Microsoft Entra user's profile from Microsoft Graph via the GET /me endpoint using the provided bearer token.

Enables AI agents to securely discover, invoke, and manage tools through a hardened MCP endpoint with protections like injection detection, circuit breakers, retry backoff, response caching, context-window limiting, and state snapshots.

Enables AI agents to route PayPal money-moving requests through deterministic spending rules, AI injection and intent checks, human approvals, and tamper-evident audit logging.

Enables role-scoped access to MCP tools through a policy-generated gateway that enforces content checks, session taint, budgets, pinning, and audit logging, blocking private-to-public data flows after untrusted input.

Enables AI agents to discover and execute tools via a secure MCP server with JWT authentication, RBAC, rate limiting, and audit logging.

Enables wrapping any Model Context Protocol server command so every tools/call is evaluated against compiled typed policy rails, with redaction, approval, throttling, denial, and a tamper-evident evidence trail.

Governed MCP server for bank-grade agent tool access with RBAC, PII redaction, rate limiting, and audit logging.

Automated risk triage, liquidity checks, and security guardrails for AI agents operating on the AO / Arweave network.

Enables MCP tool handlers to be declared with a decorator, collected into a registry from a config map, and served over a bearer-token-authenticated Streamable HTTP ASGI app. Tools can also be invoked in-process without running any HTTP server.

Enables AI agents to track, calibrate, secure, and audit Milwaukee M18 FUEL ONE-KEY power tools through BLE proximity, geofencing, torque profiles, remote lockout, and fleet telematics.

Enables secure text authoring and privacy-focused document processing through MCP. Provides tools for style analysis, conservative text revision, comparison with author samples, and removal of metadata from DOCX/PDF files.

Enables binary comparison capabilities by leveraging IDA Pro and BinDiff to analyze similarities and differences between files. Users can perform automated function analysis to identify changed functions and compare original binaries against patched versions.

Enables role-based interaction with iGrid-Prometheus APIs, including domain listing, AI agent execution, action proposal, and CSV ingest/export, supporting Read, Write, and Admin permission levels.

Enables agents and operators to audit MCP tool permissions for least privilege, score blast radius, detect privilege-escalation chains, verify capability matrices, and produce cryptographic audit proofs with injection fuzzing and exfiltration canaries.

Presents one governed MCP endpoint in front of many tool domains, routing every call through a single executor that enforces per-tool RBAC, rate limits, schema validation, encrypted secrets and PII-masked, hash-chained audit logging. It also lets teams register, validate and four-eyes approve new HTTP-backed tools at runtime so they appear to clients without a restart.

Enables real-time injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic audit proofs through the Model Context Protocol.