MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
fedramp-docs-mcpgithub.com/hackidle/fedramp-docs-mcpupdated this year
[DEPRECATED] MCP server for exploring the FedRAMP docs repository. Consolidated into GRC Clanker and myctrl.tools — see README.
npm MIT -
regulatory-change-intelligence-mcpgithub.com/apifyforge/regulatory-change-intelligence-mcpupdated this year
Regulatory change intelligence across 13 US federal data sources, delivered as an MCP server your AI agent can query directly. Built for compliance officers, GRC teams, and trade compliance operations who need forward-looking signals — not just a list of current rules.
MIT -
PrivacyScrubber PII Masking MCPno update data
Zero-Trust Data Sanitization (ZTDS) MCP Server for Claude Desktop, Cursor, Windsurf, and other AI clients. Automatically intercepts and redacts PII, credentials, and sensitive corporate data locally on your machine before they are sent to external LLMs. ### 🔒 100% Local & Airplane Mode Verified All sanitization runs inside local RAM. No data ever leaves your computer, ensuring compliance with GDPR, HIPAA, SOC 2, and internal GRC policies. Zero network calls, zero server logs. ### 🛠️ Supported Formats & File Types Locally parse and sanitize: - **Documents:** `.docx` (Microsoft Word) parsed locally with Zero-Server extraction. - **Code & Configs:** `.js`, `.py`, `.go`, `.rs`, `.json`, `.yaml`, `.ini`, `.env`, and source code files. - **Data & Logs:** `.txt`, `.log`, `.csv`, `.tsv`, `.md`, and plain text outputs. ### 🏷️ Redacted Entity Types - **Personal Data:** Names (`NAME`), Emails (`EMAIL`), Phone Numbers (`PHONE`). - **Credentials:** API Keys, passwords, tokens, SSH keys, database URIs. - **Identifiers (`ID`):** SSNs, Tax IDs, credit card numbers, and custom regex patterns. ### 🎛️ 22+ Specialized Industry Detection Profiles Specify detection rules tailored to your workload (requires PRO key): - **Engineering & IT:** `Dev`, `Tech`, `Security`, `Agents` - **Corporate & Operations:** `General`, `Bizops`, `Sales`, `Support`, `Marketing`, `Creative` - **Financial & Professional:** `Finance`, `WealthMgmt`, `Insurance`, `Accounting` - **Legal & Compliance:** `Legal`, `Compliance`, `CCPA`, `HR` - **Healthcare & Research:** `Medical`, `Pharma`, `Academic` - **Personal Use:** `Personal` ### 🔧 Available Tools - `sanitize_text` — Scrub PII/Secrets locally in text context. - `reveal_text` — Reversible token mapping (Original -> Token -> Original). - `sanitize_file` — Local sanitization of raw plain text and DOCX files.
smithery -
accessreviewgithub.com/cognis-digital/accessreviewupdated this year
Periodic user-access-review (UAR) campaign runner
NOASSERTION -
dpiaforgegithub.com/cognis-digital/dpiaforgeupdated this year
DPIA and EU AI Act impact-assessment generator
NOASSERTION -
policyforgegithub.com/cognis-digital/policyforgeupdated this year
Auto-generate security policies from a short questionnaire
NOASSERTION -
Third-party / vendor risk questionnaires with SBOM cross-ref
NOASSERTION -
Tamper-evident audit-log aggregator with hash-chained attestation
NOASSERTION -
gdprkitgithub.com/cognis-digital/gdprkitupdated this year
GDPR/CCPA DSAR, RoPA, and cookie-consent toolkit
NOASSERTION -
cmmcmapgithub.com/cognis-digital/cmmcmapupdated this year
CMMC Level 2 practice mapper — stack-aware SSP skeleton generator
NOASSERTION -
frameworkmapgithub.com/cognis-digital/frameworkmapupdated this year
Crosswalk controls across NIST, ISO 27001, SOC 2, CMMC, PCI
NOASSERTION -
soc2boxgithub.com/cognis-digital/soc2boxupdated this year
SOC 2 evidence collector and control tracker, self-hosted
NOASSERTION -
clearancepathgithub.com/cognis-digital/clearancepathupdated this year
Personnel clearance hygiene tracker — SF-86, SEAD-3/4, training currency
NOASSERTION -
milstdlintgithub.com/cognis-digital/milstdlintupdated this year
Lint documents against MIL-STD / DoD formatting and classification-marking rules.
NOASSERTION ★ 1 -
sbirscoutgithub.com/cognis-digital/sbirscoutupdated this year
SBIR/STTR topic discovery — DSIP + SBIR.gov + NIH digest with bid scoring
NOASSERTION -
ewcorrgithub.com/cognis-digital/ewcorrupdated this year
Correlate electronic-warfare event logs by time/frequency/bearing to cluster emitters.
NOASSERTION -
s3sniffgithub.com/cognis-digital/s3sniffupdated this year
Flag risky cloud-bucket ACLs/policies from a listing or policy JSON
NOASSERTION -
natosymbolgithub.com/cognis-digital/natosymbolupdated this year
Generate and validate APP-6/MIL-STD-2525 symbol identification codes (SIDC).
NOASSERTION -
classguardgithub.com/cognis-digital/classguardupdated this year
Validate classification banner markings (CUI/CONFIDENTIAL/SECRET) in documents per portion-marking rules.
NOASSERTION -
itarcheckgithub.com/cognis-digital/itarcheckupdated this year
Flags potential ITAR/EAR export-controlled terms and USML categories in code, datasheets, and docs.
NOASSERTION -
readinessgithub.com/cognis-digital/readinessupdated this year
Compute unit readiness (C-ratings style) from a personnel/equipment/training YAML and flag gaps.
NOASSERTION -
governance-mcpgithub.com/mimaworks/governance-mcpupdated this year
MCP server — AI governance evidence for any agent, any stack. EU AI Act, ISO 42001, SOC 2, NIST AI RMF.
-
audit-lensgithub.com/adhit-r/audit-lensupdated this year
AuditLens: The impeccable, agentic compliance engine. Transform evidence into audit-ready interactive workspaces with AI. Support for ISO 27001, SOC 2, HIPAA, and more.
MIT -
Working register for Qatar's National Information Assurance Standard v2.1 with an ISO 27001 and NIST CSF 2.0 crosswalk, PDPPL obligations and an MCP server
MIT -
MCP Server & Apify Actor that audits company Trust Centers (Vanta, Drata, SafeBase, Conveyor), SOC 2 / ISO 27001 / HIPAA certifications, OpenAI/Anthropic sub-processors, and DNS Identity stacks.
MIT -
Free, open-source SOC 2 policy generator: 22 policy templates rendered from a 23-question intake. CLI + templates. Apache-2.0.
npm Apache-2.0 ★ 1 -
MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentralized applications with integrated AI automation and enterprise-grade security.
NOASSERTION ★ 7