"Using a Cursor to Operate a Local Computer" matching MCP servers:

MCP server enabling Claude Code to capture screenshots of Windows applications through WSL2, allowing AI to diagnose UI errors and verify layouts.

This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.

Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.

A deterministic, fail-closed MCP server that discovers approved local resources, plans bounded routes, and renders—but never executes—selected calls.

Safety middleware for AI computer use agents that monitors, enforces policies, and provides guardrails to enable safe desktop interaction.

Enables a constrained subagent to perform foreground GUI actions on Hyprland—observing, focusing windows, clicking, typing, scrolling, dragging, and managing the clipboard—under per-action approval with lease, audit log, and kill-switch gating.

Enables AI agents to manage VPN infrastructure through provisioning, lifecycle control, traffic routing, and health monitoring.

Enables cloud-based MCP clients to delegate privacy-sensitive or large-output tasks to a local LLM, returning sanitized placeholders or digested summaries so private data never leaves the user's network.

Local-first Gmail MCP server using PKCE + loopback OAuth flow that stores refresh tokens in the OS keychain, enabling secure read/write Gmail access via MCP tools without tokens leaving the device.

Enables a cloud orchestrator to query a local Ollama model over Tailscale or a LAN as a side-channel for drafts, summaries, and other helper output, with tools to list available models and to redact text. Answers leaving the server are passed through output-only DLP that masks card numbers, IBANs, emails, phone numbers, API keys, and similar secrets before they reach the cloud.

A secure MCP server that allows Claude to read and write local files on your machine with explicit approval gating for each access.

Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.

MCP server that provides local, de-identified access to a demo EMR database using a private LLM for de-identification, ensuring raw patient data stays local.

Enables ChatGPT Web Developer Mode to securely read, search, list, and edit files inside user-approved local folders, and optionally run approved developer commands on the user's Windows machine.

Local-first MCP server for per-agent key management, generating and using signing keys without external KMS.

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Generates, validates, and deploys CrowdSec WAF rules and scenarios through natural language.

A proof-of-concept attack that exploits Model Context Protocol (MCP) tool registration to achieve persistent agent poisoning in AI assistants like Cursor, embedding malicious instructions that persist across chat contexts without requiring tool execution.

Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.

A security-focused Model Context Protocol server that enables controlled local tool execution through strict network firewalls, filesystem protections, and rate-limiting policies. It features a plugin-based architecture for progressive tool discovery and includes reference implementations for web searching and bug tracking.