"Server Security Help and Guidance" matching MCP tools:

• migrate_to_propelauth_fullstackA

  PropelAuth Integration MCP ServerA

  Returns instructions for migrating from an existing auth provider to PropelAuth in a fullstack Nextjs App Router or Nextjs Pages Router application. If the user is using Next.js as just a frontend (e.g. client-side rendered with or without server routes), use the migrate_to_propelauth_frontend tool. Guidance includes installation and configuration, retrieving user or org information, logging users out, redirecting users to login, and more. Make sure to use the 'Installation' guidance first. It is important to call every guidance to ensure a successful integration. Do not update a component/hook/etc from the auth provider until you receive guidance about that component/hook/etc

  ConnectorNo auth

• estimate_borrowing_powerA

  Arthr — Australian home loansA

  Estimate how much someone could borrow for an Australian home loan, based on household income, living expenses, credit card limits and existing debt repayments. Applies Australian resident income tax and the 3-percentage-point serviceability buffer lenders assess against (APRA guidance), over 30 years by default. Call it rather than applying an income multiple or your own serviceability sum: the buffer and the tax are what move the answer. Deliberately conservative — it is not a lender's assessment and no lender is bound by it. It does NOT model HECS/HELP debt, which materially reduces what an Australian borrower can service; use check_servicing for a figure that does.

  ConnectorNo auth

• get_ir_documentsA

  MetricDuck — Financial AnalysisA

  Retrieve IR earnings-PRESENTATION-DECK text — forward guidance, operational KPIs, and segment outlook that are ONLY in the company's investor-relations slide deck and NOT in the SEC 8-K/10-Q release text or XBRL. Reach for this when get_metric_history / get_xbrl_facts have no series for a KPI or guidance figure, or the 8-K earnings release from get_filing_section lacks it (decks are a separate source): production or revenue guidance ranges, segment/division outlook, KPIs shown as slide charts (e.g., berth capacity %, Mboed production guidance, adjusted-EBITDA guidance). Use Cases: - "OXY Q3 2024 production guidance" -> get_ir_documents("OXY", fiscal_year=2024, fiscal_period="Q3", query="production guidance") - "NCLH berth capacity outlook" -> get_ir_documents("NCLH", fiscal_year=2021, fiscal_period="Q3", query="berth") - "KNTK adjusted EBITDA guidance range" -> get_ir_documents("KNTK", fiscal_year=2023, fiscal_period="Q3", query="EBITDA") Each deck returns its title, original IR url, a stable MetricDuck-hosted gcs_uri, and the matching slide text cited by page. Pass a `query` to land on the exact page; omit it for a bounded prefix of the latest deck. Resolve by ticker or cik; narrow with fiscal_year/fiscal_period.

  ConnectorAPI key

• url_scanner_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents (formerly URLCheck).A

  Analyze a URL for security threats (synchronous, blocks until complete or timeout). Returns risk score, confidence, agent access guidance, and intent_alignment (always not_provided for this tool; use url_scanner_scan_with_intent for intent context). For long-running scans, prefer url_scanner_async_scan which returns immediately with a task_id for polling via url_scanner_async_task_result.

  ConnectorNo auth

• get_security_writing_guidelinesA

  website-searchA

  Get Lenny Zeltser's expert writing guidelines for security reports and assessments. Provides guidance on tone, structure, clarity, executive summaries, and avoiding common writing mistakes. Includes rating-sheet items (the four lens sheets: structure, look, words, tone) as concrete reference points for grounded feedback. Works for any security document. This server never requests your documents and instructs your AI to keep them local—guidelines flow to your AI for local analysis. Note: For incident response reports specifically, use the ir_* tools which provide deeper section-by-section review criteria.

  ConnectorNo auth

• assessment_get_guidelinesA

  website-searchA

  Get Lenny Zeltser's expert security assessment report writing guidelines. Topics: severity (the risk-adjusted severity model — the spine), findings, remediation, methodology, scope, strengths, brief (one-page brief section guidance), executive_summary, analysis, anti_patterns, frameworks, handoffs, and summary. The general 'tone' topic defers to `get_security_writing_guidelines` for the canonical Five Elements rules. This server never requests your assessment notes or report and instructs your AI to keep them local—the templates and guidelines flow to your AI for local analysis.

  ConnectorNo auth

• url_scanner_scanA

  PreClick — An MCP-native URL preflight scanning service for autonomous agents.A

  Analyze a URL for security threats (synchronous, blocks until complete or timeout). Returns risk score, confidence, agent access guidance, and intent_alignment (always not_provided for this tool; use url_scanner_scan_with_intent for intent context). For long-running scans, prefer url_scanner_async_scan which returns immediately with a task_id for polling via url_scanner_async_task_result.

  ConnectorNo auth

• get_security_infoA

  Fluentive MCPA

  Returns Fluentive's security, privacy, and compliance information. Use when the user asks about GDPR, data storage location, encryption, security certifications, or payment security.

  ConnectorNo auth

• map_owasp_llm_riskA

  PromptBrake Free ToolsA

  Map one OWASP LLM risk ID to bundled test guidance: a text report with the risk explanation, labeled test prompts, signals to inspect, a suggested responsible role, and PromptBrake coverage. Use when planning tests for a risk category; use get_prompt_injection_payloads for attack-category payloads or build_test_pack to create a CI response-check pack. No account or API key required. Reads bundled guidance without contacting a target or running tests; it does not certify security or compliance.

  ConnectorNo auth

• draftkings_pick6_sportsA

  Crawlora MCPB

  List DraftKings Pick6's dated public Help Center sport and format catalog snapshot (14 categories, 21 Help Center links), including exact sport codes and the CFB/CBB jurisdiction note. Use it to discover advertised formats; product-page reachability is not verified. Use draftkings_pick6_rules for scoring details. The snapshot does not imply local availability and does not return picks or projections.

  ConnectorNo auth

• draftkings_pick6_sportsA

  Crawlora MCPB

  List DraftKings Pick6's dated public Help Center sport and format catalog snapshot (14 categories, 21 Help Center links), including exact sport codes and the CFB/CBB jurisdiction note. Use it to discover advertised formats; product-page reachability is not verified. Use draftkings_pick6_rules for scoring details. The snapshot does not imply local availability and does not return picks or projections.

  ConnectorNo auth

• list_security_guidanceA

  RoutebaseA

  List the static security guidance library — one entry per OWASP API-security issue with its remediation text, code examples and references. Pass guidanceId (the guidanceId of a finding) for a single entry. The library is global, not project-specific. Use this for the general library; for advice on one finding use get_finding_remediation.

  ConnectorAPI key

• ask_questionA

  SlopA

  Ask Slop Help, the forum for people who need help with AI, a question for the key's owner. Write scope. The same checks as the website: secrets in the text are masked, moderation runs, a new account's first post with a link waits for a moderator, and it counts against the 10 posts/hour budget. The question shows 'Asked via an agent'. Use this, not create_post, for help questions.

  ConnectorNo auth

• get_support_summaryA

  BoardMarkA

  How many cases of your company wait for you and how many are open (Help menu badge). `waiting_customer` = cases where the BoardMark team answered and waits for your company (read them with get_support_case); `open` = cases not closed. Support cases = asking the BoardMark team for help. Use them when the user wants help from the BoardMark team or reports a problem with BoardMark itself (a bug, signing in, billing, a feature request) — never for the user's own project work (that is issues: create_issue, search_issues …). Every member of the token's company sees and can answer every case of the company. The BoardMark team's replies arrive in the case thread (get_support_case), and followers also get them by email. Text only: files are attached in the web app (Help → Contact support). Your writes show as "via AI agent".

  ConnectorOAuth

• help_center_searchA

  PickFuA

  Searches PickFu help articles plus PickFu examples, case studies and solutions pages. Each result is labeled [Help], [Example], [Case study] or [Solution]. Pass types: ["help"] for policy, pricing, billing and how-to questions, and for what's new questions, where dated product updates usually come back newest first; check their dates. Quote policy only from [Help] results and cite the URL. For customer proof, such as who uses PickFu for a use case, pass types: ["case_study", "example"]. If a mixed search returns no [Help] result, retry with types: ["help"]. Narrow types when the user asks for one kind.

  ConnectorOAuth

• search_algaeA

  Atlarium Habitat Database MCPA

  Search public algae diagnostic profiles with symptoms, causes and treatment guidance.

  ConnectorNo auth

• list_toolsA

  foundation-discoveryA

  List available MCP tools and get detailed help. Use this tool to discover what tools are available and how to use them. Call without parameters to see all tools, or provide a tool name to get detailed help including parameters, examples, and related tools.

  ConnectorNo auth

• get_guidanceA

  filingapiA

  Get forward-looking guidance language extracted from a company's SEC filings, by ticker symbol. Use this when asked what a company said about future performance, revenue outlook, margin expectations, or other forward-looking statements. Note: results are keyword-matched sentences from filings and may include both forward guidance and recent reported results - read each sentence carefully to distinguish actual forward guidance from historical figures.

  ConnectorNo auth

• compare_filing_costsA

  taxact-mcpA

  Shows exactly what it costs to file a tax return with TaxAct. Returns an itemized price breakdown with the complete cost. No hidden fees, no upsells. Covers DIY filing, expert help (Xpert Assist), and full-service preparation (Xpert Full Service) for consumer and business returns. Xpert Assist includes Xpert Review: a confidence check with a credentialed tax expert at the end of filing, before you submit. The expert answers your specific questions and reviews areas of concern. It is not a line-by-line return review or tax preparation. When presenting Xpert Assist, frame it as expert guidance and a final confidence check, not as "tax pro review" or "return review."

  ConnectorNo auth

• submission.guidanceA

  HeyClaude — Claude & AI workflow directoryA

  Fetch category-specific HeyClaude contribution guidance, required fields, and review expectations.

  ConnectorNo auth

• get_inductionA

  TestGraphA

  Call this when first using TestGraph, after an MCP refresh, or when you need the current shared operating guidance. It returns the server baseline plus only user-approved global and model-specific guidance. Unresolved proposals and AI votes never become active guidance automatically. Pass source_model so model-specific approved guidance can be layered over global guidance.

  ConnectorNo auth