Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠)

MCP gateway and orchestrator: one local install fronts every MCP server for Claude Code, Cursor, and VS Code, loading tools on demand.

Bridges a selected browser tab's native WebMCP tools to remote MCP clients through a self-hosted Cloudflare Worker, enabling tool discovery and invocation with session-scoped authentication and per-page trust controls.

A local AI agent harness in Go that runs 24/7 with auto-built tools, MCP, and Ollama

Self-hosted work log your team's AI agents write: daily updates drafted from git and the session, tasks, time measured from agent sessions, project context and client access. 39 tools over Streamable HTTP, with personal keys for coding agents and OAuth for the Claude and ChatGPT apps.

Enables compatible assistants to inspect Live sessions, silently mix and master bounced stems, compare references, design with installed plugins, and track local evidence and progress through supported tools.

Enables Claude Code, Cursor, and other MCP clients to fingerprint websites by identifying CMSs, web servers, frameworks, and analytics tools through sandboxed Docker scans with structured reports.

A hosted remote MCP server that gives AI agents live hotel, Airbnb/Vrbo and flight pricing tools — nightly rate calendars up to 330 nights, every booking site's price for a stay compared against the hotel's own site, guest reviews, and Google Flights search. Clients connect over Streamable HTTP with browser OAuth or an API key, so nothing needs to be installed or run locally.

TypeScript stdio MCP server (official MCP SDK, McpServer) for the Receipts Index. Tools: receipts_index and receipts_sample call the free /v1/index and /v1/sample routes; receipts_pricing lists the paid x402 rows. Read only; it never pays.

Enables MCP clients to curate YouTube watch history and locally search selected transcripts using SQLite FTS5, ChromaDB embeddings, and reciprocal rank fusion, with tools to browse unindexed history and add videos.

Enables querying USDA FAS Export Sales Reporting data through read-only tools, including weekly export quantities by commodity, destination country and market year, latest-week and top-destination slices, data release dates, and lookups of commodity, country, region and unit codes. Cross-references ESR's own integer codes against packaged reference lists so valid commodities and destinations are resolved before any request.

Read-only MCP tools for querying USDA FAS Global Agricultural Trade System census export and import records by partner country, year, month and HS10 code prefix, plus the release-date lists for each flow. Results are capped with notes on omitted rows, and responses carry release vintages and retrieval metadata.

Enables AI clients to extract transcripts from specific Douyin, Xiaohongshu, and YouTube links, or from local media and subtitle files, with tools to check readiness, run extraction, and read paginated transcripts.

Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.

Enables AI clients to control and inspect a Unity Editor through MCP tools for scene and play-mode operations, logs, screenshots, assertions, Lua execution, UI interaction, world observation, and bridge management; advanced UI/Lua/world features require project-specific adapters.

Exposes explicitly approved local Windows stdio and loopback HTTP MCP backends through a single OAuth-protected remote HTTPS MCP endpoint, letting a mobile AI client invoke whitelisted tools with namespacing, PKCE-based authorization, and per-tool permissions.

Enables users to index and retrieve local documents through semantic, BM25, or hybrid search, with tools for chunk reads and page images accessible from MCP clients such as Codex and ChatGPT web.

Enables an AI agent to see and control the screen of an already-running macOS virtual machine over VNC, exposing four tools: screenshot, click, type_text, and key_press. This lets the agent drive a disposable VM's UI directly with its own model, without touching the real desktop or running a separate agent loop.

Enables MCP clients to query and diagnose machine-learning training runs through read-only tools for listing experiments, reading configurations and final metrics, comparing runs, sampling metric curves, and detecting training failures.

Provides OAuth-secured MCP tools for working with private, Git-backed Markdown knowledge bases: searching pages, reading content, ingesting new source documents, retrieving cited original files, and reviewing history or rolling back accepted pages. Every tool call is checked against each person's or agent's current wiki grant and returns source paths and Git revisions for traceability.

Enables MCP clients to inspect local Git repositories through five focused, read-only tools for repository trees, literal text search, numbered file reads, bounded git diffs, and project summaries while confining paths, skipping secret-like and binary files, and enforcing output limits.

A zero-dependency MCP suite exposing computational tools across metabolic, cardio-renal, chronobiology, neuro-recovery, and biomechanics domains. It enables clients to derive longevity and physiology metrics such as autophagy index, glucose-ketone ratio, glycemic variability, peripheral resistance, nocturnal BP dipping, DLMO clock time, melanopic lux, caffeine clearance, EEG fatigue entropy, and grip vitality age from user-supplied measurements.

Exposes MCP tools that compute longevity and metabolic metrics (autophagy index, GKI, MAGE), cardio-renal biomarkers (BUN/creatinine ratio, cardiac output and TPR, nocturnal BP dipping), chronobiology estimates (DLMO, melanopic lux, caffeine clearance), plus neuro-recovery and biomechanics scores. Runs as a zero-dependency Python JSON-RPC 2.0 stdio server so any MCP-compatible client can query these physiological domain calculators.

Exposes four read-only tools over extracted Hacker News "Who is hiring?" job posts — postings_search, posting_get, skills_top, and skills_trend — so an MCP client or agent can search postings, look up individual posts, rank top skills, or chart skill trends over time. Tools return only structured extracted fields and HN links (never raw post text) from a read-only SQLite database, including salary sorting and a hard row limit to keep queries cheap.