"Finding MCP Servers with F Security Grades" matching MCP servers:

Enables reading and writing MS Excel files, including cell values, formulas, sheet creation, copying, formatting, and on Windows, live editing and screen captures.

KSM MCP is a Model Context Protocol (MCP) server that acts as a secure intermediary between AI language models (like Claude) and Keeper Secrets Manager (KSM). It allows AI agents to manage your KSM secrets-such as listing, creating, retrieving, and deleting records and folders-while protecting your

See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict

Read-only MCP server for SQL Server and PostgreSQL health checks. It runs the codeDB Lens diagnosis (A–F grade with rule coverage, findings with evidence, impact and next actions), reads 24-hour performance recordings, lists databases and tables, describes table schemas, and runs one guarded SELECT at a time within per-profile row and time limits. It uses the user's saved connection profiles; pass

Gemini-powered code review. Offers review-only and review-and-commit modes with integrated Gitleaks security scanning.

Enables finding recurring charges, subscriptions, price increases, and possible double charges from a bank or card statement CSV, along with yearly cost estimates, without any bank login or uploads. It also inspects a CSV to show detected columns and row counts before analysis.

Enables finding files and knowing their location and permissions, organizing folders, moving and copying content, transferring files in and out, managing sharing with transparency, tracking changes, and handling shared drives.

MCP server for web application security scanning with Nikto, Nuclei, Wapiti, and shcheck integration.

MCP server that provides AI coding assistants with access to call graphs, data flows, and security analysis for multi-file vulnerability detection.

Provides 23 bounded MCP tools for AI agents to perform technical SEO audits, including crawl setup, page analysis, issue detection, and report exports, all while keeping data local.

An MCP server for querying Grafana Loki directly with a discovery-first workflow — labels, values, series, and LogQL queries without requiring Grafana.

ContextLattice is an HTTP-first, MCP-compatible memory/context/task orchestrator that persists writes and returns fused recall from specialized stores with local-first defaults. Primary URL: https://contextlattice.io/ Install: https://contextlattice.io/installation.html Troubleshooting: https://contextlattice.io/troubleshooting.html

Agentic DevOps control loop and MCP server featuring polyglot Tree-sitter AST blast-radius analysis, OPA Rego policy evaluation, and isolated --network=none Docker test verification[cite: 1]. Exposes tools to inspect impacted dependency closures, validate security guardrails, and run targeted test suites.

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server. Every finding maps to a specific PCI DSS requirement ID. Taint-aware cardholder data flow analysis with PCI SSC FAQ semantics, designed to complement broad SAST tools like Semgrep and CodeQL - not replace them.

CNCF release intelligence: typed, quoted facts (security fixes, breaking changes, deprecations) from every graduated/incubating project's release notes, updated daily. check_stack compares running versions locally — versions never leave your process.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables AI assistants and local LLMs to interact with BirdNET-Go bioacoustic observatories, providing tools to query recent and historical bird detections, monitor station health, and retrieve audio clips.

MCP server for scraping with declarative configs

Privacy-preserving AI gateway. Sanitises PII before prompts reach Anthropic / OpenAI / your LLM, then emits a signed cryptographic certificate per call (Ed25519 + RFC 3161 + Sigstore Rekor). EU GDPR + AI Act ready. Free tier 500/mo with BYOK.

MCP server that parses 3GPP .docx specifications into structured sections with full-text search, letting LLMs browse, search, and follow cross-references without a vector database.

Local CI/CD engine for AI agents. ActionD listens to LGH git events and runs plugin jobs (Go/Python/Java/web toolchains) in isolated checkouts, with structured results, root-cause failure diagnosis, approval gates, and auto-rollback. The MCP server exposes 23 tools, including dev_cycle_run (commit → CI → structured verdict in one call) and actiond_diagnose for failed-job analysis.

Local-first Microsoft Outlook MCP server: a single Go binary that manages calendar events and mail through the Microsoft Graph API over stdio, with tokens stored in the OS keychain and no Entra ID app registration required. Exposes four aggregate tools (calendar, mail, account, system) dispatched by an operation verb, with multi-account support and read-only and mail-gating modes.

See which process holds a local port and who started it, find free ports, wait for services, and stop a dev server safely. Fixes "port already in use" (EADDRINUSE) for AI coding assistants. Never stops system processes; Docker and WSL ports get the right stop command. Run with: npx -y portcheck-cli mcp

MCP server for AI-powered web research — search (Google, Brave, Serper, SearXNG), scrape any page, extract PDFs/DOCX/YouTube transcripts, academic & patent search. Single Go binary. Works with Claude, Cursor, Copilot, and any MCP client.

Hybrid search over your local documents, with file and page citations. One binary, fully local.

Local-first Git hosting for AI coding agents. lgh serve turns any directory into an HTTP Git remote (127.0.0.1:9418) with push events, commit-status reporting, smart .gitignore generation, secret/large-file detection, and optional LAN sharing with auth. The MCP server exposes 10 tools covering repo registration, one-command backup (lgh up), server control, and event access.

Coordination for parallel coding agents: TTL file claims stored in the git common dir (visible across all worktrees), enforcement hooks that block colliding edits, agent presence, handoff notes, and a git-committed lessons knowledge base with BM25 search. Single static Go binary — no server, no database.

Self-hosted Go MCP server that crawls documentation sites into local Markdown/JSONL corpora and lets agents read pages, run crawls, check freshness, and diff changes with zero network access at read time. Single static binary, no CGO, Apache-2.0.

CI health reports for GitHub Actions: flaky tests named from logs, wasted compute priced in dollars, zombie crons, PR feedback time, plus 21 lint rules with safe auto-fixes. Read-only MCP tools wrap the same Go binary.

Local-first MCP server providing semantic search over library docs, fully offline. Single Go binary speaks MCP over stdio against a vector index pinned to the binary version. Like Context7 with the internet turned off. Apache 2.0. Linux + macOS, also available as a container image.