"Understanding File Access" matching MCP servers:

Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.

Enables AI agents to access VirusTotal intelligence through MCP, supporting file, URL, domain, and IP lookups, plus analysis, via remote HTTP or local stdio.

Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.

Enables querying and analyzing a legacy, file-based vulnerability registry via MCP tools for CVE lookup, search, vendor navigation, and aggregate statistics.

A read-only MCP server for comparing environment configuration files, detecting drifts like added, removed, or secret-changed entries, while masking secrets and restricting file access to allowed directories.

A reference MCP server that enforces identity-aware tool access using role-based permissions (Reader, Analyst, Auditor) and supports multiple identity routes like Entra RBAC, Copilot Studio, and Okta XAA. It provides read-only access to test evidence with explicit denial paths for unauthorized tools.

MCP server for Spazio Genesi's attestation service that enables AI agents to attest, verify, and check digital works with full privacy, as file bytes never leave the device.

Enables read-only auditing of repositories by scanning actual files, flagging risky code, secrets, and untrusted platform configs, and generating Chinese-language reports for human decision-making.

A community MCP server for Cisco Secure Access that exposes the Secure Access REST API to AI clients as a curated catalog of tools for Admin, Deployments, Investigate, Policies, and Reports.

Enables interaction with the AssemblyLine 4 malware analysis platform, allowing file submissions, URL analysis, and search capabilities via natural language.

Enables LLM agents to access Google Threat Intelligence data, including IOC search, file/domain/IP/URL analysis, and threat hunting rulesets, for security investigations.

Enables multiple developers to collaborate in real time on a shared project folder through their OpenCode AIs, with read/write file access, file locking, change tracking, and presence awareness. It also supports secure invite-based access, a web dashboard, and statistics for monitoring shared project activity.

Enables AI agents to act on live business objects under enforceable per-call identity, per-tool grants, and mandatory human approval for irreversible actions, with connectors isolated from core logic.

Enables AI assistants to access Google's Threat Intelligence suite for file analysis, indicator of compromise searches, and reputation checking. It supports both local and cloud-based deployments for investigating campaigns, threat actors, and malware families.

Verifies VerixID proof-of-existence records by Record ID and optionally proves ownership with an Ownership Key, without requiring the original file.

Governance engine for MCP tool calls, providing deterministic rule enforcement to block destructive actions like SQL drops, shell commands, and file system modifications before execution.

Enables LLM clients to safely perform file operations such as create, read, edit, delete, move, copy, and more, with every path checked against an explicit permission database managed through a desktop GUI.

Enables secure file delivery by encrypting files client-side and generating one-time, auto-deleting download links, with tools to create sends, check their status, and revoke them.

Official MCP server built into Casdoor, the open-source identity and access management (IAM) and single sign-on (SSO) platform. It exposes Casdoor's users and applications as MCP tools over a JSON-RPC endpoint at /api/mcp, with per-tool authorization driven by OAuth scopes, and can also act as an MCP gateway that proxies and authorizes agent access to upstream MCP servers.

SQL guardrails for AI agents, sitting between the agent and Postgres to enforce policies, block destructive queries, and audit all access.