Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.

Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration.

Local MCP server for computer use that leaves your desktop alone: accessibility-first control, live browser handoff, an isolated Linux display, and human takeover.

Can one customer of your app read another customer's rows? A read-only audit of Postgres and Supabase row level security.

Secure MCP server that executes JavaScript code for data analysis using isolated-vm.

Credential isolation for AI agents. Store, guard, and record — your agent never sees your API keys.

Run code in isolated cloud containers. ConTree gives AI agents secure sandboxed execution environments with full root access, network, and persistent images.

Autonomous AI agents inside a Qubes-isolated sandbox - tag-scoped Admin API access with dom0-mediated trust boundary.

Agent-driven ML researcher in a secure, reproducible KVM lab: five standalone scientific-state MCP servers within per-user VMs with driver / trusted / hostile zone isolation

ElevenLabs MCP server: 28 tools for text-to-speech, speech-to-text, voice cloning and design, sound effects, music, audio isolation and dubbing in Claude Code and any MCP client. Python, FastMCP.

Local (stdio) MCP server in Go that gives opencode and other model hosts a safe, isolated sandbox for running arbitrary commands — a secure drop-in replacement for the host shell. Deny-by-default, ephemeral per-session containers with Docker, or macOS seatbelt sandbox-exec with no daemon. Streaming output.

Disposable, isolated microVMs with container ergonomics, for people and agents: Firecracker VMs from any OCI image, snapshots and fork, jailer and network isolation, web console, MCP server

Deterministic, namespace-isolated document retrieval with a CLI and MCP server.

An MCP server that provides a secure isolated environment for executing Python code.

MCP and HTTP API to navigate and fetch through isolated puppeteer contexts locally

MCP server that lets Codex delegate to isolated codex exec sub-agents, selecting repo+global skills automatically

Bidirectional Neko reaction stickers, inline composer picker & Desktop-isolated MCP plugin for Google Antigravity Desktop

Run AI agents in VM-isolated sandboxes on your Mac. MCP server for Apple containers.

Fetch web pages and extract clean, structured content as Markdown. Render JavaScript-heavy sites, capture screenshots or PDFs, and automate browsing safely in isolated sandboxes.

Antidetect browser for AI agents: drive real, isolated Chromium profiles over MCP and raw CDP.

A Windows Chromium browser for parallel MCP agents, isolated workspaces and seamless live-tab handoff.

MCP server for credential isolation in LLM agents — bots use passwords without seeing them

Modded Playwright MCP server with parallel browser instance isolation for multi-agent workflows

Persistent memory system for AI agents — SQLite + FTS5, MCP server, agent isolation, Obsidian sync. Zero dependencies.

MCP server giving Claude a stateful IPython kernel per session, with per-env isolation.

MCP-based multi-agent dispatch hub for Claude Code — parallel worker orchestration with git worktree isolation

MCP server for managing git worktrees with synchronized branches. Provides tools for creating isolated development environments, tracking changes, and managing collaborative workflows.

Scalebrowser is self-hosted browser infrastructure for AI agents. It gives each agent a persistent, isolated identity, keeps logins and passkeys intact, handles captchas and verification, and runs on hardware you control.

Credential isolation for AI agents. Local-first transparent proxy — your agent never sees your API keys.

TinkyVision + IsolatedTester by Luke Kist / TinkyBink: screen images, OCR/ASCII for text-only models, accessibility, and isolated macOS app testing over MCP.

Verified SOLIDWORKS engineering workflows: design requirements, isolated variants and native Visualize shot packs.

Optionality Adapter: NEAR RPC gateway adapter, per-wallet subaccount isolation, 1Click/Intents confidential funding, copy-trading service, and MCP utilities

A Model Context Protocol (MCP) server that enables LLMs to run ANY code safely in isolated Docker containers.

Local-first TypeScript MCP server for Qdrant with client isolation, LM Studio integration, and scalable document workflows.

An MCP fold tool: agents run sub-tasks in isolated branches and get back clean summaries, so the main context never fills up. Context folding, no RL.

Fast, configurable Rust MCP filesystem server with explicit root isolation, bounded I/O, search, and optional terminal tools.

MCP server that dispatches and supervises parallel Codex CLI workers, one isolated Git worktree each, with a persisted work state machine.

Multi-org Sentry MCP server — isolated error monitoring across multiple projects from a single config. Process-level security, handoff package generation.

Self-hosted secure runtime for AI agents — isolated Docker sandboxes, MCP server, SSO, signed audit trail. No SaaS, no telemetry.

An MCP server for delegating repetitive coding tasks from Codex to Antigravity workers in isolated Git worktrees.

Universal MCP Gateway & Agent Runtime in Rust. Securely bridges frontier AI models to local coding executors across isolated workspaces. Headless Linux daemon & desktop GUI.

Local coordination for cooperating coding agents: work claims, isolated worktrees, shared resources, and verified integration without a hosted service.

Manage isolated Chromium browser profiles across AI IDEs (Claude Code, Cursor, Antigravity) — CLI + MCP server + desktop app

Project-isolated local knowledge and persistent memory gateway for Codex, Cursor, and Antigravity via MCP

B2C Model Context Protocol (MCP) server for conversational food ordering — confirmation-token checkout, server-side pricing, allergen safety, session isolation.

Lazy, session-isolated Tor Browser automation for AI agents, with a Rust CLI, MCP server, and Nix flake.

MCP server and Claude Code plugin. Runs an agent's code on fresh, isolated VMs, several at once, each run recorded with evidence

Secure Host MCP server & native desktop studio with workspace isolation, capability gating, and 8 super-tools

Run OpenCode models such as Grok as durable, isolated coding executors orchestrated by Codex over MCP.

Fourthwall MCP Server & CLI: isolated private profiles, confirmed shop operations, reviewed batches, bounded exports and private uploads.

Local long-term memory for Claude Code: one Rust binary, one SQLite file, on-device hybrid search and strict work/personal isolation.

Run isolated build, test, QEMU, and Docker jobs on local or remote workers from AI coding clients over MCP.

PostgreSQL-backed virtual filesystem exposed via MCP tools. Persistent, session-isolated file operations for AI agents.

Analyze binaries with a sandboxed MCP tool that unifies reverse engineering utilities and adds filesystem isolation, timeouts, and input checks

Multi-user MCP server for semantic search over personal document collections. Built with FastMCP, FastAPI, Qdrant, and React — features per-user isolation and measurable retrieval precision.

Python SDK and MCP server for Drums: create, act on, fork, reset and verify isolated desktops for computer-use agents

Chrome automation via nodriver: 70 MCP tools, isolated browsers, configurable profile startup, network capture and passive security checks

MCP memory server for Claude Code with semantic search. Chroma Cloud storage, ONNX embeddings, path-based routing. One container serves multiple projects with isolated memory spaces. FastMCP + FastAPI.

Easy, fast, isolated microVM sandboxes for AI agents and untrusted code on AWS Lambda MicroVMs — Python SDK, asb CLI, and MCP server.

A fully self-contained, isolated Ghidra 12.1.2 installation bundled with GhidraMCP, lx-loader, GhidraDosToolbox, and MCP bridge