Self-hosted application security platform: SAST, DAST and SCA with AI false-positive validation. OWASP Top 10/CWE mapping, SBOM export, CI/CD integrations and MCP server.

A modern, full-stack web application for checking the security status of domains, IP addresses, and file hashes using the VirusTotal API v3, Vectara RAG, and Anthropic Claude LLM. Now includes AI-powered enrichment, RAG search, and color-coded UI for enhanced security insights.

Production-grade diagnostics, performance optimization, security auditing, and dead-code detection for Vue.js and Nuxt applications. Features automated codemods, CI quality gates, and AI agent integration (MCP).

🔐 Build secure applications with the MyTaskly MCP server, featuring OAuth 2.1 JWT authentication and seamless FastAPI integration for efficient user management.

A Python toolkit providing security checks for domains, URLs, IPs, and more. Integrate easily into any Python application, use via terminal CLI, or run as an MCP server to enrich LLM context with real-time threat insights.

Auth0 delivers a flexible identity and access management solution, offering authentication, authorization, and secure login flows to help developers protect applications across various platforms effectively

An autonomous application-security engineer that inspects, tests, investigates, verifies, explains, fixes, and retests software.

Public metadata for ScaledThought's remote MCP server: README, MCP Registry server.json, security policy. No application code.

MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentralized applications with integrated AI automation and enterprise-grade security.

DevSecShield is a unified, AI-powered Devsecops assistant designed to provide comprehensive security analysis across multiple dimensions of modern software development. From traditional application security to cutting-edge AI/ML systems, DevSec Shield delivers automated vulnerability detection and actionable remediation guidance.

Integrate your applications with Vapi APIs through seamless function calling. Enable scheduling and managing calls, assistants, and phone numbers directly from your MCP-enabled environment. Access Vapi's capabilities locally or remotely with ease and security.

A Next.js web application that uses an AI assistant to manage local files through a chat interface. It leverages the Model-Context Protocol (MCP) to securely let the AI interact with the filesystem.

A collection of Model Context Protocol (MCP) servers enabling AI assistants to securely access and interact with local files, Gmail, and web content, facilitating integration with MCP-compatible applications.​

MCP server is used to create a secure code sandbox environment, execute code in Docker containers, and provide code execution capabilities for AI applications.

OllaBridge transforms your laptop or workstation into a production-grade, OpenAI-compatible LLM provider. It features self-healing setup, built-in security, and automatic tunneling—making your local hardware ready for real applications in 60 seconds.

Integrate powerful data scraping, content processing, and AI capabilities into your applications. Leverage a wide range of tools for document conversion, web scraping, and knowledge management to enhance your workflows. Execute code securely and access various data APIs to enrich your projects with real-time information.

Faucet is an open-source, single-binary server that turns any SQL database into a secure, governed REST API with role-based access control and native MCP support for applications and AI agents.

AI-powered old-age pension assistance platform that connects citizens and block officers through secure MCP servers, OAuth 2.1 authentication, and a government pension portal. Built to simplify applications, track pension status, and support transparent officer approvals.

Provide healthcare data access and querying capabilities by integrating with Google Cloud Healthcare FHIR APIs and public medical research databases. Enable seamless retrieval of patient records, clinical data, and research articles through a secure and authenticated MCP interface. Enhance healthcare applications with real-time clinical insights and research information.

Production-oriented Model Context Protocol (MCP) server for Express.js applications that enables AI clients to investigate backend systems through structured engineering tools. Exposes Git history, Winston logs, OpenAPI contracts, and source code via a secure provider-based architecture.

The application workflow leverages AWS Lambda and Agentic AI to diagnose app issues—like network instability or expired tokens—with RS256 authentication. Smart recovery and crash-aware restart maintain user continuity, delivering a secure and reliable experience.

RepoTunnel is a secure local AI workspace bridge that connects ChatGPT Web and MCP-compatible AI clients to approved local projects, files, terminals, Git, GitHub, browsers, editors, and desktop applications—so AI can inspect, edit, test, run, and manage real development work without constant copy-pasting.

# Metis FCA Handbook AI Harness — MCP Server An MCP (Model Context Protocol) server that integrates the Metis FCA Handbook AI Harness into Claude Desktop and other MCP-compatible agents. **Tool name:** `evaluate_fca_handbook_applicability` Use this tool to analyze FCA Handbook applicability for a product, service, or firm. Returns structured compliance reasoning with verbatim handbook citations. ## Why choose The Metis FCA Handbook AI Harness? - **Efficiency** Multiplies effectiveness of compliance advice. Saves £80+ in token fees per Harness run. - **Deals with "Hard Problem"**, in which LLMs' token incentives prioritise training data so results are unreliable. - **Verbatim citations** Quotes verbatim entries from the FCA Handbook. Other AI systems struggle to do this. - **Matches real-world need** You do not have to start off knowing which sections you are looking for. Carries out structured searches across all 10,000+ FCA Handbook entries. - **Secure Design** Harness compartmentalisation, one-shot structure, and statelessness fits natively with emerging AI agent security standards such as OWASP Top 10 for Agentic Applications 2026. - **AI Accessible** Integrates easily with AI workflows and agents. Your LLM can use it as a tool. ## Design Principles The Harness is built on proven principles: - **Stateless** — Each request is independent; no session coupling - **One-shot** — Complete analysis in a single call; no multi-turn state - **Clear contract** — Explicit input/output schemas for easy integration - **Hosted** — Single canonical source; no version drift or stale data ## Use Cases ### Compliance AI Platforms Embed FCA reasoning as a service within your compliance platform. Users ask natural-language questions; your platform calls the Harness and presents structured reasoning. ### AI Agent Workflows Agents building compliance workflows can include FCA Handbook reasoning as a composed tool—no external API calls, just MCP configuration. ### Compliance Review Automation Integrate into document review or due-diligence pipelines. Automatically screen new rules against FCA applicability. ## For Regulatory Screening FS firms screening MCP servers will find: - **Simple model:** Stateless, no hidden state, no background jobs - **Clear contract:** Explicit input schema, output schema, error modes - **Transparent updates:** Version pinning; no automatic upgrades - **Single point of failure:** If the Harness is down, it is obvious; no cascading config issues - **Audit-friendly:** All calls logged centrally, not distributed

<p align="center"> <img src="https://cdn.simpleicons.org/cardano/0033AD" width="80" /> </p> <h1 align="center">Cardano MCP Server</h1> A **Model Context Protocol (MCP) server** for interacting with the Cardano blockchain from AI agents and automation systems. This server exposes wallet-aware tools for: - Submitting transactions - Fetching addresses - Reading UTxOs - Fetching balances - Resolving ADAHandles - Checking stake delegation ## Secrets 1. Copy the `.env.example` file to a new file `.env` 2. Specify your seed-phrase (`SEED_PHRASE`). Your seed-phrase is NEVER exposed to LLMs, and is only used for local wallet connection. 3. Configure the wallet connection details. Specify a Blockfrost Project ID (https://blockfrost.io/), or a Kupo & Ogmios URL. ## Docker Installation Build the container ```bash docker build -t cardano-mcp . ``` Run with your secrets ```bash docker run -p 8000:8000 \ -e PORT=8000 \ -e SEED_PHRASE="lizard,llama,frog..." \ -e BLOCKFROST_PROJECT_ID="your_blockfrost_key" \ cardano-mcp ``` ## Manual Installation Clone this repository ```bash git clone https://github.com/IndigoProtocol/cardano-mcp.git ``` Install dependencies ```bash cd cardano-mcp npm install ``` Build & Run ```bash npm run dev - or - npm run build npm run start ``` ## Connecting The URL for the Cardano MCP server will be hosted at http://localhost:8000/mcp ### Claude Desktop Configuration Add to `~/Library/Application Support/Claude/claude_desktop_config.json`: ```json { "mcpServers": { "cardano": { "command": "node", "args": ["/path/to/cardano-mcp/dist/index.js"], "env": { "SEED_PHRASE": "lizard,llama,frog..." "BLOCKFROST_PROJECT_ID": "mainnet123..." } } } } ``` ## Disclaimer By using this Cardano MCP Server and all related tools and technology (“MPC”), you acknowledge and agree that (i) your use of decentralized finance, including MPC and/or AI agents that you empower to manage your digital assets, involves various significant financial risks, including but not limited to, the risk of financial loss caused by MPC design or instructions, impermanent loss, and changes in digital asset prices; and (ii) that you are solely responsible for all MPC actions and transactions, and for securing your seed phrase, private keys, and environment configuration.

Noulette is a MCP platform that finds problems, propose fix and actually fix it (upon approvals) during app development and when running app in production.

Burp Suite MCP server with 80+ tools for authorized web security testing

Professional WAF security testing toolkit

Give your coding assistant security super powers with Salt Code. Secure code with every prompt and a much quieter security team.

Standalone npm-package for PT Application Inspector MCP

MCP server for reading your EyalSec security events, machines, runs and rules from Claude, Cursor or any MCP client.

MCP server for JADX-AI Plugin

A Pure-Java MCP Server for JaDX Android Reverse Engineering Tool

Evidence-first cybersecurity MCP server with persistent SQLite graph memory, vulnerability triage, scoped testing and reports for Antigravity and Codex.

MCP integration for supported Offensive360 SAST operations in compatible AI clients. Review access and configuration requirements.

Read-only Kubernetes access for AI agents over MCP, governed by deny-by-default policy.

Deny-by-default MCP server for GitLab: capability-based access for AI agents, a .noai content marker, and an authenticated git smart-HTTP proxy.

Cryptographic proxy and credential vending for LLM applications. Zero secrets on disk. mTLS everywhere. Apache 2.0.

MCP server for ThreatLocker — zero-trust application allowlisting, approval requests, audit logs

Secure digital document management system for legal and investigation documents with RBAC, digital signatures, OCR, RAG, and MCP integration.

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration.

This project is a Google Calendar MCP Server built in Python. It acts as a secure bridge between an MCP client (like Claude Desktop) and your Google Calendar, exposing full CRUD (Create, Read, Update, Delete) operations as tools for the AI to use.

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.

Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP server, with professional CVSS-scored reports.