"WEMO" matching MCP servers:

Enables simple memo management with user registration, login, and session-based per-user memo operations (add, list, delete) via MCP.

Enables Entra ID group-based dataset access where group membership determines which datasets exist, and provides an interactive Altair chart builder rendered as an inline MCP Apps widget with zero-token adjustments.

Minimal demo of Entra ID authentication with MCP and HTTP+SSE transport, using session mapping with JWT-like tokens.

A secure MCP server for CRM operations (contacts and deals) with Auth0 OIDC authentication, role-based access control (sales-rep read-only vs sales-manager full access), and on-behalf-of token exchange.

MCP server demonstrating Streamable HTTP with Tools, Resources, and Prompts for user registration, login, and profile management via a REST API.

Enables AI agents to interact with a user management REST API, providing list, get, and create operations while preventing destructive actions like update/delete through an explicit access registry.

A secure MCP server that exposes a SQLite database to AI agents with Role-Based Access Control, supporting authentication, customer/order/user management, and audit logging.

Enables AI agents to safely mutate business state by demonstrating phase-gating, validation-before-mutation, and structured audit logging in a toy inventory and purchase order system.

Demonstrates OAuth 2.0 Dynamic Client Registration with Duo SSO, providing three MCP servers for calendar events, document management, and analytics dashboards.

Enables end-to-end testing of OAuth authorization for an MCP server, exposing scoped tools like whoami and echo over streamable HTTP.

An MCP server that showcases intent-based access control and ReBAC with OpenFGA, providing team and salary listing tools protected by semantic and deterministic gates.

A production-ready MCP server with OAuth 2.1 authentication, enabling authenticated MCP tool calls via Google OAuth.

A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.

A reference implementation of an MCP server built with Express that integrates full OAuth 2.1 authorization and RFC9728 protected resource metadata. It enables secure, authenticated communication between MCP clients and servers using streamable HTTP transport and built-in authorization flows.

Remote MCP/API trust gate for AI agents to inspect readiness before performing Korean business workflow operations like vendor onboarding and payment release.

A teaching demo that implements JWT authentication and scope-based authorization for MCP tools, supporting role-based access to profile, notes, and admin operations.

A vulnerable MCP server implementation that demonstrates how poor coding practices can lead to security issues like Remote Code Execution, designed for educational purposes to add numbers.

A template for building MCP servers with optional per-tool authentication using WorkOS AuthKit and Vercel MCP adapter.

A WebSocket-based MCP server for OWASP ZAP security scanning, enabling real-time control and monitoring of security assessments.

A deterministic guard layer that blocks unauthorized tool calls and validates arguments before execution, preventing tool poisoning and jailbreak attacks on MCP servers.