A single MCP gateway that lets every agent and login on your machines reach services like Notion, Sentry, Cloudflare, Gmail and Google Calendar after signing in once, with per-agent tokens. Calls that reach other people or can't be undone wait for approval first, and every call is logged.

Enables AI agents to make policy-scoped payments with spending caps, recipient allowlists, approval thresholds, instant revocation, and an append-only audit trail in a sandbox wallet.

A gateway MCP server that lets agents reach any upstream MCP server through one endpoint while enforcing policy rules, holding risky tool calls for human approval, containing prompt-injected sessions, and logging every call.

Enables an MCP-capable AI chat to control selected tabs in a separate persistent Chromium browser, protected by OAuth, per-tab grants, and local approvals.

Enables CLI agents to fold source documents into a cited Markdown knowledge base using an ontology, exposing tools to list, read, search, lint, and write pages only after user approval.

Enables MCP clients to create and control persistent, PTY-backed terminal sessions on macOS: launch commands and interactive programs, read output incrementally via byte cursors, send keystrokes, wait on conditions, and detect running/awaiting-input/exited states. Sessions run inside a Seatbelt sandbox with command policies, human approvals, secret redaction, and hash-chained audit logging.

Enables Claude to read intervals.icu training data — wellness metrics, completed activities with per-lap and time-series detail, and planned events with planned-versus-completed reconciliation — and to create, update, or delete planned run and bike workouts on the intervals.icu calendar, which syncs to Garmin Connect. Writes are guarded by dry-run defaults and explicit approval.

Enables AI agents to read a user's SRCE Moodle account data, including grades, deadlines, calendar events, course files, forum posts, and messages, with optional private-message sending gated by phone approval. It can run as a Cloudflare Worker or self-hosted via Node or Docker.

Enables MCP clients such as ChatGPT to execute shell commands, manage files, and view or capture images on Mac and Linux hosts. Supports terminal-based connection approval, time-limited access, and output controls.

Enables MCP-capable agent CLIs on macOS to reuse an installed, unmodified OpenAI Browser Runtime to drive a connected Chrome or Edge browser (or a host's in-app browser backend) through js, js_reset, and turn_ended tools. It stays a thin bridge that preserves the Runtime's approval and security boundaries, failing closed when the client cannot handle approval requests.

Enables MCP clients such as Claude to query mail, schedules, and electronic approvals, reserve meeting rooms, and manage personal schedules through a groupware account.

Enables AI clients to inspect local RAM, commit, page file, disk usage, top processes, disk scans, duplicate files, startup apps, recent changes, and reports. It also generates approval-gated plans for cleanup, file moves, and startup disabling without changing the PC.

Enables AI assistants to search YouTube, manage a channel, read analytics, and handle uploads, playlists, captions, comments, and moderation while requiring explicit approval for every change.

Connects to a logged-in Windows LINE Desktop client to read chat history and cached images for a given chat and date range, and to perform GUI-driven actions such as batch sending text, files, real @mentions, quote replies, and forwarding after a single approval. It also supports read-only cross-chat search over the last 31 days, recent-chat listing, and local receipts that stop rather than resend when the outcome is uncertain.

Enables any AI agent to work inside your own signed-in Chrome or Edge, with risky steps gated behind approvals the agent cannot skip, receipts for every action, routines that replay without the AI, and per-site packs that read a site's own data. Everything runs locally, so pages, cookies and passwords never leave your machine.

Audit trail and traceability for AI agents. See what every coding agent did, block risky calls, ask a human for approval, and prove it with signed trust checks.

Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.

Enables an AI agent to sign, verify, encrypt, decrypt, and manage OpenPGP keys while private key material stays in gpg-agent and passphrases go only to pinentry. Adds human approval for high-risk operations, typed-fingerprint confirmation for destructive ones, and audit logging that never records plaintext.

Human-in-the-loop (HITL) for AI agents: ask a person for approvals or answers by push notification. One command connects Claude Code, Codex, Cursor, Gemini CLI and more.

Enables deterministic request screening and, after native owner approval, fixed-target DeadBolt enforcement actions such as kill, deny, revoke, and evidence retrieval through local stdio MCP. Model analysis can advise but cannot approve actions.

Gives browser agents a reviewed map of 79 real sites — entry URLs, access verdicts, and role/accessible-name button maps for 104 screens — so an agent can find where things are and know whether it may act at all. Safety rules in code halt irreversible actions such as pay, order, submit and delete pending explicit human approval, while per-site memory recalls which routes worked last time.

Pay-per-call x402 crypto research and Base address/approval risk checks, capped wallet.

Enables MCP-compatible AI clients to search and view CRM customers, deals, contracts, tasks, calendars, and outbound jobs, and to propose opt-in write actions that require human approval in the CRM.

Enables Claude to work with a corporate mailbox over IMAP/SMTP — listing, searching, reading, sending, forwarding, replying, handling attachments, and moving messages between folders — alongside calendar browsing and event creation/editing over CalDAV. Authentication needs only a single external app password, with no developer-console registration or admin approval.