"Understanding the Basics of Computer Use" matching MCP servers:

Safety middleware for AI computer use agents that monitors, enforces policies, and provides guardrails to enable safe desktop interaction.

Enables a constrained subagent to perform foreground GUI actions on Hyprland—observing, focusing windows, clicking, typing, scrolling, dragging, and managing the clipboard—under per-action approval with lease, audit log, and kill-switch gating.

Enables AI agents to automate macOS desktop GUI applications through a policy-governed MCP proxy over Cua Driver, with fail-closed per-app allowlisting, a hardcoded sensitive-app denylist, an emergency kill-switch, masked audit logging, and self-healing app recovery with durable task journaling.

A zero-dependency Node.js playground for debugging how MCP clients authenticate to an MCP server over HTTP.

Supply chain risk scoring for npm, PyPI, and GitHub repos

A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.

Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.

Enables AI assistants to scan project dependencies and Infrastructure as Code files for security vulnerabilities and misconfigurations. It also provides automated fixing capabilities to remediate identified security issues.

Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.

Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification.

Rate-limits MCP tool calls with Upstash Redis, allowing a configurable number of invocations per sliding window and sharing counters across server instances.

Demonstrates Agent Passport System pre-dispatch authorization by issuing one-use grants and verifying signed authorization envelopes before proxied tool calls reach the upstream server.

Enables an MCP server to enforce External Verifier Contract authorization before proxied tool calls, allowing or denying requests based on a supplied bundle.

Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.

Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.

A verifying MCP gateway that pins approved tool manifests and skill files to content addresses, blocking tampered descriptions before they reach model context.

Retired. This MCP wrapper is no longer maintained. Check is now a Claude Code hook: npx @golproductions/check@latest --install. 120 free messages a day. Details: golproductions.com/check

An MCP server demonstrating OAuth 2.1 authentication with Scalekit, enabling per-user identity in MCP tools through JWT verification.

Enables MCP clients to exchange an MCP-audience token for a Microsoft Graph token and call Graph as the signed-in user, with tools for identity verification and recent mail access.

Enables autonomous agents and MCP-compatible clients to enforce policy-approved actions using risk tiers, reversible checkpoints, and token approval bounds.