Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

Enables a single owner to connect an MCP client to their own Gmail account over authenticated Streamable HTTP and read status, recent inbox messages, and full message content using their own Google OAuth app and grant.

Turns any OpenAPI 3.x spec into an MCP server that exposes one validated tool per API operation, so AI agents can discover and call a REST API over stdio or Streamable HTTP. It is read-only by default, with allow/deny lists, environment-based auth, timeouts and response truncation for safe agent access.

Stata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.

Free open-source OSINT and investigation toolkit for Claude Code: case management, 54 OSINT enrichment adapters, structured analytic techniques (ACH), chain-of-custody evidence capture, and threat-intel MCP servers. MIT.

Enables AI assistants to answer natural-language questions about environmental monitoring stations, returning real-time readings, hourly time-series, and combined station overviews. Supports per-user account binding and OAuth 2.1 authorization so each user only sees stations within their own permissions.

Tu equipo de desarrolladores en un plugin. 10 agentes, 11 skills planas, 18 comandos /alfred-dev:*. Memoria persistente, quality gates con evidencia y MCP local.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Family inbox: read records; invite, reply, mint codes. API key or OAuth care_circle:write.

MCP server for CVE lookups: EchelonGraph scores, CISA KEV, EPSS, CWE, exploits, version and SBOM checks, vendor advisories, and per-CVE exposure derived from Shodan data. Shodan data is owned by Shodan, which holds its copyright (© Shodan). Keyless.

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Enables Claude to brief self-hosted GrokBot bots through their webhook routines and then collect their replies in the same thread, with tools for waiting on replies, checking the inbox, and reading conversations. It includes a self-hosted dashboard for registering bots, managing encrypted webhook keys and tokens, and connecting Claude apps over OAuth or API tokens.

Enables AI assistants to scan-code log into Yuketang and read-only browse courses, slides, classroom replays with page-flip timelines, AI mind maps, notes, and assignment progress. Sessions can be supplied via QR login or environment variables, with separate handling for the four Yuketang regional deployments.

Enables Claude and ChatGPT to manage Motion tasks through one shared API core, including capturing next actions, preserving resume context, checking duplicates, and reporting scheduling health. It serves local stdio clients and OAuth-protected Streamable HTTP clients.

Enables AI clients to securely access and manage IMAP mailboxes through OAuth-protected tools for searching, reading, organizing, flagging, moving, and deleting emails or folders, with optional write permissions.

Enables AI assistants to query and manage a Discogs music collection in natural language, including collection and catalog search, statistics, recommendations, wantlist and folder updates, ratings, and custom fields. It authenticates with Discogs via OAuth and caches a collection snapshot to answer many queries quickly.

Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)

lunar.dev: Agent native MCP Gateway for governance and security

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

Enables Claude to read and manage Apple Business API resources such as devices, device management services, users, groups, apps, blueprints, configurations, and audit events through OAuth 2 authentication. Write and destructive operations are gated behind flags and require a two-step preview-and-confirm flow, with guardrails and local audit logging.