Security MCP servers

Send and read one-time encrypted secrets with local encryption.

AI agents use your Obsidian secrets by name — values never reach their context.

Vet MCP tool manifests before attachment; returns block, review, or no blocking finding.

Manage Pi-hole v6: DNS blocking, domains, clients, query analysis, DHCP, and multi-instance sync.

Deterministic execution authorization for AI agents and automated systems.

Detect and redact PII, PHI, PCI and secrets in text and files before an AI agent sees them.

Connect your AI clients to your MCP servers—securely managed in one place.

Zero-dependency Web Crypto & AI Agent MCP Server (AES-256-GCM, RSA-4096, PQC, Signatures).

WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer

Every ThreatLocker Portal API feature, plus the write operations the read-only tools lack and a

Every ThreatDown OneView API, plus fleet-wide stale-endpoint, health and seat reports across all

Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.

Let AI agents use secrets without seeing them: inject into a command, redact the output.

68k+ security-audited MCP skills + free agent trust layer: signed ATC cards, tool gating, audits.

API-key pre-action risk gate: any irreversible agent action (money, SQL, delete, email).

logi (1pass) IdP — manage your OAuth apps, redirect URIs, passkeys, login history and docs.

Permanent local PDF redaction: text is removed and verified gone, not covered. No uploads.

Needs the PrivacyFence app from privacyfence.eu: human approval and audit for AI access to your data

Checks every MCP tool call of your agent with an independent witness and gives signed receipts.

Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.

Per-function effect analysis for agents: blast radius, what reaches the network, gate verdicts.

Security-focused MCP server for GnuPG signing, encryption and key management.

macOS OpenVPN/FortiGate VPN status, logs and diagnosis; read-only by default, never returns secrets

Passive AppSec scanners as eight parameterless MCP tools; the audited repository is data.

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

MCP gateway that checks each agent tool call against a signed grant and policy, and signs a receipt

Verifiable execution for AI agents: Ed25519-signed work contracts and audit trails.