"Using Cline as a Knowledge Graph for Coding" matching MCP servers:

Provides a per-person MCP interface to a knowledge graph of legal matters, enforcing OPA-based access barriers and logging every request in a hash-chained audit trail.

Exposes a federated, typed knowledge graph to AI clients, letting agents traverse nodes and relationships while scope-based access rights are checked on every hop and provenance is tracked for each fact. This keeps shared knowledge consistent across teams while keeping private and team-scoped content out of reach of unauthorized consumers.

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

Enables cryptographic chunk hashing, reverse claim-to-source attribution, clearance boundary validation, and provenance audit trails for enterprise knowledge graphs to combat hallucinations.

Enables LLMs to perform OSINT link-analysis by exposing transforms (DNS, WHOIS, Shodan, etc.) as MCP tools for autonomous investigation and graph enrichment.

Enables agents to ground claims in enterprise knowledge by hashing source chunks, tracing claims back to their origins, validating clearance boundaries, and maintaining audit trails to support anti-hallucination workflows.

Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.

MCP server that tracks and searches Microsoft Graph API schema changes, permissions, and roles, with historical data and an interactive schema visualizer.

Enables AI agents to read and write a shared knowledge store through MCP tools covering records, decisions, an inbox, and memory files. Every write is screened by one fail-closed gate that rejects content matching the deny-list instead of masking it, keeping sensitive values out of stored data and audit logs.

Exposes Azure Entra ID user and license management as MCP tools over HTTP-SSE, enabling operations such as user creation, group assignment, and license management via Microsoft Graph API.

Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.

Serves a metadata and lineage graph built from dbt artifacts, letting agents query lineage-aware warehouse context. It also compiles a single policies.yml into database access controls such as Postgres RLS and Unity Catalog.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Security Graph MCP Server

Enables AI agents to manage VPN infrastructure through provisioning, lifecycle control, traffic routing, and health monitoring.

Enables AI agents to read connected bank accounts, transactions, and balances through the Lunch Flow Personal API using a personal API key.

An MCP server that enables Cline to analyze binaries using Binary Ninja with a Personal License through a bridge implementation.

Enables MCP clients to run local scans for known AI coding-assistant backdoor indicators and risky Claude Code/MCP configuration patterns, returning findings directly in chat.

Enables MCP clients to fetch the signed-in Microsoft Entra user's profile from Microsoft Graph via the GET /me endpoint using the provided bearer token.

Provides secure access to Microsoft Entra ID (Azure AD) resources including users, devices, and applications through Microsoft Graph API. Enables querying organizational data with comprehensive audit logging to Azure Blob Storage.

Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.

Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.

A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.

Enables agents to perform Schnorr zero-knowledge identification and cryptographic attestation through a native MCP interface, including commitment-challenge-response proofs, JWT validation, Merkle inclusion checks, and replay protection.

Enables local zero-knowledge encryption of a personal vault and sanitization of PII such as credentials, credit cards, and addresses before dispatch to cloud LLMs, with client-side rehydration of masked data.

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Autonomously introspects an undocumented SQLite database to expose auto-generated CRUD tools, join-explaining prompts, and schema resources for LLM agents. All queries run through pre-validated parameterized SQL templates, so the model never writes or sees raw SQL, with full audit logging of every operation.

This MCP server autonomously introspects SQLite databases to auto-generate CRUD tools and join prompts, while enforcing zero-knowledge security through pre-validated SQL templates.

Manage a fleet of OPNsense firewalls from an AI agent, inside guardrails it can't drive around. MCP server for central management of OPNsense firewall fleets. 129 tools across devices, config sync, tasks, schedules, templates, backups and remote consoles - destructive actions confirmation-gated, MCP-issued tokens lifetime-bounded, backup and storage secrets excluded from the toolset entirely.

Enables AI agents to query Microsoft Entra data using natural language, converting requests into Microsoft Graph API calls for read-only enterprise IT scenarios.

Enables reversible anonymization of SSNs, credit cards, passport numbers, emails, and phone numbers in prompts before sending them to external LLMs, and restores original tokens from completions using local HMAC isolation.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

Enables secure one-time encrypted file and note sharing by encrypting data locally before upload and providing tools for sending, listing, checking, and revoking links.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

Enables AI agents to read and edit WordPress pages, posts, terms, media and menus through 15 guarded tools, with content saved as drafts, no deletions, block allowlists, single-use image uploads and dry-run menu changes that keep a human in control.

Secret management MCP server for AI coding agents that prevents secrets from entering the LLM context window by returning metadata only and using side-channel injection. Integrates with Bitwarden and offers hooks for auto-capture and leak prevention.

A safety layer and monitoring copilot for AI agents using Splunk MCP, recording tool calls, enforcing policies, and blocking risky actions.

Enables secure, permission-controlled exposure of Frappe/ERPNext DocTypes and CRUD, search, metadata, and deletion operations to MCP clients such as AI agents, with field-level allowlisting and audit logging.

Enables reversible anonymization of sensitive PII such as SSNs, credit cards, passport numbers, emails, and phone numbers before sending prompts to external LLMs, then restores original values locally using HMAC isolation.

Enables agents to encrypt and sanitize sensitive data such as credentials, credit card numbers, and addresses locally before dispatching prompts to cloud LLMs, then rehydrate the masked values client-side. It runs deterministically with zero external dependencies over MCP JSON-RPC stdio, so no plaintext PII leaves the user's machine.