"Windows Performance Toolkit and xperf.exe" matching MCP servers:

MCP server toolkit with payload library, WAF bypass generator, rate limiter, plugin system, and inter-MCP bridge for security testing.

Enables AI agents to interact natively with the Windows OS to perform file navigation, application and window control, UI automation, QA testing, and administration, security, and forensic workflows through 104 MCP tools.

Open-source AI governance toolkit — MCP servers & CLIs for scanning, auditing, and managing your AI environment

Enables MCP-capable clients to query the tool registry, check install status, get tool recommendations for CTF or bug-bounty work, and run installed security tools through a governed execution path.

Exposes internal databases, HTTP APIs, and files to LLM agents over MCP, with auto-generated schemas, access controls, rate limiting, redaction, and audit logging.

Enables AI agents to securely manage decentralized identities, verifiable credentials, and trust registries on the Cheqd network via the Model Context Protocol.

Connect AI agents like Claude, Cursor, and Gemini to historical Windows performance and privacy data gathered by the AppControl Windows app. This server enables natural language queries into CPU, GPU, and temperature history alongside system security events for deep local auditing.

A Model Context Protocol server that provides LLM Agents with a comprehensive toolset for IP geolocation, network diagnostics, system monitoring, cryptographic operations, and QR code generation.

Enables LLM agents to extract, validate, and mask personally identifiable information using deterministic regular expressions, reducing token usage and hallucination risks.

Enables LLM agents to discover and invoke guarded web search, read-only SQLite queries, and sandboxed file read/write tools over the Model Context Protocol. It adds schema validation, rate limiting, output sanitization, request-ID logging, and Prometheus metrics at the protocol boundary.

Provides security audit primitives for MCP servers, agent tool schemas, and system prompts, along with pentest utilities like JWT inspection and HTTP diffing.

Local, no-API-key MCP server with seven defensive SecOps tools for AI agents: extract IOCs (IPs, URLs, domains, hashes, CVE IDs) from text with defang/refang, hash strings, estimate password entropy, and run CIDR/subnet checks. Built on FastMCP with no outbound network calls.

Converts Claude into a cybersecurity assistant by exposing 17 tools for network reconnaissance, cryptography, and security analysis, enabling users to perform tasks like SSL certificate checking, port scanning, and JWT analysis directly within conversations.

Provides WebAssembly-based, sandboxed tools for JavaScript execution, binary disassembly, file recovery, steganography, image optimization, data processing, PDF redaction, secret scanning, and semantic search.

An MCP server that wraps Trivy and Gitleaks to provide file system vulnerability and secret scanning as tools for AI agents, enabling local, free security analysis.

Enables AI assistants to inspect and safely operate a Linux VPS through typed DevOps tools governed by YAML allowlists, read-only defaults, dry-run plans, secret redaction, and tamper-evident auditing.

Automates 85-95% of the Secure Software Development Lifecycle (SSDLC) planning phase through multi-role AI orchestration, enabling business analysis, threat modeling, test strategy design, and security code review.

A secure, AI-ready local server that provides digital forensics tools for analyzing logs, verifying file integrity, and generating audit-grade reports.

Open-source AI governance toolkit. MCP servers & CLIs for scanning, auditing, and managing your AI environment

Enables AI-assisted Windows digital forensics analysis including parsing Windows Event Logs (EVTX), analyzing registry hives (SAM, SYSTEM, SOFTWARE), and remotely collecting artifacts via WinRM with built-in security queries and forensic reference data.

Verifiable dealings with other agents: prove what you did, vet who you deal with, bind agreements

Enables orchestrating secure software development pipelines with domain-specific compliance (HIPAA, PCI-DSS, etc.), generating pseudocode, threat models, and CI/CD from user stories via natural language.

Enables an LLM agent to inventory Windows physical disks, partitions and logical volumes read-only, then plan and execute guarded forensic imaging to E01 format via ewftools, requiring validated plans, explicit execution flags, distinct source/destination disks and attested write blockers. Also verifies image integrity, extracts image metadata, and produces Markdown, JSON, HTML and audit-log reports.

Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.

Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.

Validates URLs and checks their reputation to help identify AI hallucinations and verify web page authenticity.

Provides essential security and CTF tools including hash identification, encoding/decoding, XOR bruteforce, JWT decoding, reverse shell generation, SQL injection payloads, CVE lookup, and port service identification for learning security concepts and solving challenges.

A deployable MCP server template for Cloudflare Workers that provides Google OAuth authentication and comprehensive analytics tracking of tool usage, performance metrics, and user behavior.

Stateless Streamable HTTP MCP endpoint with OAuth 2.1 authentication via Cloudflare Workers, supporting PKCE, DCR, and token introspection.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.