"Understanding RAG (Retrieval-Augmented Generation or related topics)" matching MCP servers:

A zero-dependency Node.js playground for debugging how MCP clients authenticate to an MCP server over HTTP.

Enables post-hoc auditing of an agent's retrieval supply chain by recording digest-only provenance from source through chunk, transformation, context and decision, then reporting influence rankings with an honest unexplained residual, lineage traces, advisory source trust and retirement recommendations, and retrieval schema drift. It never performs retrieval, ranks documents at query time, or blocks decisions.

MCP server that integrates Apache Ranger authorization with RAG, enforcing Ranger policies to control access to knowledge bases before forwarding queries to RAG Studio.

Enables agents to search across the pooled tools of many connected MCP servers and invoke them through a single endpoint, returning only the handful of tools relevant to each request. Filters by the caller's permissions before ranking, so agents never see or plan around tools their user is not allowed to use.

Enables clients to query local cybersecurity evidence, retrieving source-backed passages, exact entities, documents, documented relationships, and database status from ATT&CK, OWASP, Sigma, CVE, KEV, and NVD data with citations and immutable snapshots.

Exposes standard MCP tools for secure calculation, knowledge-base retrieval, document statistics, and sensitive operations like email, export, and deletion with human-in-the-loop approval.

Security-first document intelligence MCP server that enables grounded, cited answers from untrusted documents. It detects and quarantines adversarial content, ensuring safe retrieval-augmented generation.

An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.

SSWP MCP — Deterministic software attestation for AI-augmented development. Witness any repo through a 5-gate pipeline, adversarially probe dependencies, and produce self-verifying .sswp.json attestations. Fleet registry across 131 nodes with tamper-proof audit ledger and FTS5 search. Agent-native — one tool call from Hermes, Claude, or Cline.

Provides MCP tools for Sytadel identity and access management, enabling user listing, service account management, session anomaly queries, policy generation, and access reviews.

Verifies C2PA Content Credentials for local files or URLs and returns an LLM-ready verdict on trust, AI generation, and provenance.

Enables recognition and defense against covert influence patterns (Milton Model) and generation of hypnotic language patterns, with a defensive spine to prevent manipulation.

Enables AI coding agents to audit Python and npm dependency licenses against your distribution context before shipping, returning CLEAN, REVIEW, or BLOCK verdicts with plain-language reasons and supporting notice generation.

Audits Ethereum/Solidity smart contracts using the Cysic Minimax model, providing automated vulnerability detection, gas optimization suggestions, and markdown report generation.

Manages a git-backed vault for plaintext snippets and encrypted secrets, enabling secure storage and retrieval via MCP tools.

Enables querying AbuseIPDB threat intelligence via natural language, including IP reputation checks, subnet scans, and abuse report retrieval.

AI agent provenance, trust, and auditability layer. VERITAS multi-gate scoring, Cortex approval gates, S.E.A.L. hash-chain audit ledger, and semantic RAG with cryptographic provenance tracking for every decision an agent makes.

Enables Pinterest Business account management through OAuth, including authorization URL generation, connection status checking, and secure token storage.

An MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.

Enables local npm supply-chain inspection through tools for repository scanning, SBOM generation, dependency audit, and evidence reporting. Uses deterministic mock data and does not query live APIs.

Enables generation and validation of Xray-core proxy configurations using natural language. Supports VLESS, VMess, Trojan, and Shadowsocks protocols with automatic key generation and multiple transport/security options including REALITY.

14 utility tools via the PublicSoftTools API: QR code generation, PDF compress/merge/split/convert/unlock, cryptographic hashing (MD5/SHA-1/SHA-256/SHA-512), UUID generation, base64 encode/decode, secure password generation, IP geolocation, DNS records, SSL certificate check, and WHOIS lookup. Free tier: 1,500 calls/month.

Enables cryptographic operations including hashing, encoding/decoding, ID generation, password tools, and JWT inspection via MCP.

Enables MCP clients to look up, save, and update logins and TOTP codes in a running, unlocked KeePassXC database over its browser-integration socket, along with password generation and group management, without ever opening the .kdbx file or handling the master password.

Enables secure role-based querying of company documents across different departments (Engineering, Finance, HR, Marketing) with access control that restricts data visibility based on user roles. Provides retrieval-augmented generation with source citations and metadata for trusted corporate knowledge access.

The server provides secure OTP (One-Time Password) generation. Supports TOTP (Time-based) and HOTP (HMAC-based) algorithms

Enables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.

MCP server for managing Porkbun domains, DNS, and related services via Porkbun's API. Every mutation requires a reason and is audited for traceability.

Provides local, dependency-free security scanning tools for LLM configurations, prompts, RAG sources, and more, enabling AI coding agents to detect prompt injections and other vulnerabilities without external network access.

Enables cybersecurity training, purple-team collaboration, and executive readiness through tools for scenario generation, attack simulation, telemetry analysis, incident investigation, forensics, and reporting with an immutable audit trail.