Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

APICK Korean data, building register, simple-auth lookups, OCR, search, image, video and TTS

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Turns any OpenAPI 3.x spec into an MCP server that exposes one validated tool per API operation, so AI agents can discover and call a REST API over stdio or Streamable HTTP. It is read-only by default, with allow/deny lists, environment-based auth, timeouts and response truncation for safe agent access.

The most comprehensive ServiceNow AI toolkit, including a full ServiceNow MCP server: 500+ MCP tools plus 26 AI capabilities (scan, review, build, ops, docs) and a direct BYOK mode. Works with Claude, ChatGPT, Gemini, Cursor, GitHub Copilot and any LLM.

Headless MCP server for Metabase: API-key auth (no OAuth), stdio or HTTP, 178 tools with toolsets, works on every Metabase tier

MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment method. The platform supports container monitoring and MCP service token verification, solving security risks and enabling rapid deployment of MCP services. It uses SSE, STDIO, and STREAMABLEHTTP access protocols to deploy MCP。

GDPR cookie banners with Consent Mode v2, plus a free scan of what loads before consent.

Extract, ask, compare and parse PDFs/images with source evidence. OAuth sign-in or API keys.

All-in-One malware analysis tool.

lunar.dev: Agent native MCP Gateway for governance and security

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Enables AI assistants to import Canva share links as editable templates, read and update template layers (text, images, positions, styling), and render PNG, JPEG, WebP, or PDF variants from data — singly or in bulk up to 25 at a time. Connects via a remote OAuth endpoint, API key, or local stdio.

Enables an AI agent to ask your phone for its current location on demand with consent, via a self-hosted relay and OAuth instead of API keys. The relay requests a fresh GPS fix and returns the answer without keeping location history.

Wallet auth: send a wallet and conditions, get a signed boolean across 37 chains. 27 tools.

Family inbox: read records; invite, reply, mint codes. API key or OAuth care_circle:write.

Search a curated directory of agent tools, MCP servers, APIs, protocols and skills. No auth.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Ecommerce email MCP for Shopify/Woo — campaigns, automations, popups, analytics. OAuth.

Invoicing, expenses, accounting analytics. OAuth 2.1 dynamic client registration, no API key.

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Enables Claude to brief self-hosted GrokBot bots through their webhook routines and then collect their replies in the same thread, with tools for waiting on replies, checking the inbox, and reading conversations. It includes a self-hosted dashboard for registering bots, managing encrypted webhook keys and tokens, and connecting Claude apps over OAuth or API tokens.

Enables agents to analyze OpenAPI contracts for deterministic integration risks, plan auth, sync, action, and webhook candidates, and diff contract versions for likely breaking changes through read-only tools.