"WEMO" matching MCP servers:

Enables simple memo management with user registration, login, and session-based per-user memo operations (add, list, delete) via MCP.

Enables AI assistants to read fictional facility-management data such as properties, cleaning schedules, complaints, and materials under role-based, branch-scoped access with audit logging. All tools are read-only, with no write, delete, or send capabilities.

Enables validating Microsoft Entra access tokens to determine whether an MCP caller is a signed-in user or only an application, illustrating MCP authentication methods.

Enables end-to-end testing of OAuth authorization for an MCP server, exposing scoped tools like whoami and echo over streamable HTTP.

Enables Entra ID group-based dataset access where group membership determines which datasets exist, and provides an interactive Altair chart builder rendered as an inline MCP Apps widget with zero-token adjustments.

This server enables AI agents using MCP to test round-trip communication, roll dice, store and recall in-memory values, verify caller identity via authenticated headers, and make authenticated outbound calls to a backend on behalf of the verified user.

Enables MCP-compatible agent hosts to delegate governed, read-only security audits and reviews of code, applications, agents, prompts, MCP configurations, and cloud environments through evidence-first findings and stable schemas.

A reference implementation of an MCP server built with Express that integrates full OAuth 2.1 authorization and RFC9728 protected resource metadata. It enables secure, authenticated communication between MCP clients and servers using streamable HTTP transport and built-in authorization flows.

Minimal demo of Entra ID authentication with MCP and HTTP+SSE transport, using session mapping with JWT-like tokens.

MCP server demonstrating Streamable HTTP with Tools, Resources, and Prompts for user registration, login, and profile management via a REST API.

Enables AI agents to interact with a user management REST API, providing list, get, and create operations while preventing destructive actions like update/delete through an explicit access registry.

Enables AI agents to safely mutate business state by demonstrating phase-gating, validation-before-mutation, and structured audit logging in a toy inventory and purchase order system.

Enables an AI agent to turn a messy CRM account list into a ranked list of accounts to work, with every step authorized, scoped, rate limited, and replayable from an audit log.

Demonstrates OAuth 2.0 Dynamic Client Registration with Duo SSO, providing three MCP servers for calendar events, document management, and analytics dashboards.

An MCP server that showcases intent-based access control and ReBAC with OpenFGA, providing team and salary listing tools protected by semantic and deterministic gates.

A production-ready MCP server with OAuth 2.1 authentication, enabling authenticated MCP tool calls via Google OAuth.

A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.

Remote MCP/API trust gate for AI agents to inspect readiness before performing Korean business workflow operations like vendor onboarding and payment release.

A teaching demo that implements JWT authentication and scope-based authorization for MCP tools, supporting role-based access to profile, notes, and admin operations.

Enables AI agents to list metrics and dimensions, inspect definitions, and run governed metric queries against Apache Iceberg tables through a semantic layer, without writing SQL or accessing raw rows or columns outside their role.