MCP Servers

WordPress publishing for AI agents. 13 tools to list, create, update, publish, and delete posts. Markdown to Gutenberg, automatic image hosting, featured image generation, SEO metadata (Rank Math / Yoast / SEOPress / AIOSEO), categories, and tags — one MCP call runs the full pipeline. Self-host with Docker or use the hosted SaaS at notipo.com. AGPL-3.0.

Open-source runtime security proxy for MCP. Transparently intercepts every tools/call through an 18-class attack defense pipeline (prompt injection, SSRF, shell injection, SQL injection, credential exfil, polyglot attacks) with a YAML policy engine and 304-entry adversarial corpus. Trust scoring for npm MCP packages with 0-100 badges. Cloud dashboard, Docker image, Python SDK. MIT.

🎖️ - Official Shieldly MCP server: analyzeiampolicy and analyzecloudformationtemplate tools flag AWS IAM privilege-escalation paths, wildcards, and over-permissive access. Free demo mode, no signup or API key needed. npx -y @shieldly/mcp.

🎖️ - Human-in-the-loop approval inbox for AI agents. An agent submits a proposed action (send email, post comment, run a command) via impripushaction, a human approves, rejects, or edits it from a web, mobile, or Slack/Discord/Telegram inbox, and the agent only proceeds on an approved decision. The gate is a data dependency, not a prompt. Full audit trail, self-hostable (MIT, Docker Compose). npx @impri/mcp

🎖️ - Compliance and identity for AI agents — verify an agent's certificate scope, read its behavioral risk score, and append to an immutable audit trail. X.509 identity issued via AWS KMS; MiCA / EU AI Act aligned. npx -y @kakunin/mcp

Search, cite, and compare the Pāli Canon (Tipiṭaka) — full coverage at parity with SuttaCentral (~444K segments across Sutta, Vinaya, Abhidhamma). Hybrid trigram+vector search, full-sutta fetch with cross-reference URLs (SuttaCentral + 84000.org), segment-aligned translation comparison, and Pāli word lookup against the P. A. Payutto dictionary. Free, non-commercial — offered as Dhamma Dāna. Hosted at https://tripitaka-mcp.com or self-host via Docker.

MCP bridge for Nemeton — native macOS virtual machine manager built on Apples Virtualization.framework. Create/control Linux & macOS VMs (no Parallels, no QEMU), CoW snapshots on APFS, 50+ MCP tools across VM lifecycle, console, files, networking, and host metrics.

Video transcoding (MP4, WebM, ProRes, GIF, MP3) and document conversion (PDF, DOCX, HTML, Markdown, XLSX) for AI agents. Per-job billing, no AWS or FFmpeg setup. npx -y botverse-mcp

Convert raster images (PNG/JPG/WEBP/TIFF) to SVG vector format. Single tool, accepts base64 or URL input; runs locally via uvx image2svg-mcp or as a Docker HTTP server.

AI infrastructure cartographer & MCP server: fingerprints, graphs, and watches the live infrastructure an agent can reach (Docker, Kubernetes, cloud, IaC) and detects incidents.

Embedded, local-first agent memory in a single SQLite file per namespace (vec0 + FTS5 hybrid retrieval). ADD-only history queryable as-of any past time; offline sleep-time maintenance stages dedupe/summarize/evict proposals a human reviews. No Docker, no server, no cloud key. pip install 'lean-memory[mcp]'

Persistent coding memory for AI assistants — hybrid search, knowledge graph, token-efficient context. MCP stdio (28 tools), npm @ratary/mcp-server, optional remote Streamable HTTP. Self-host D1, Postgres, MariaDB, or Docker.

Persistent fractal graph memory for AI coding agents via MCP. Semantic vector search, hot/cold/archive context tiers, decision tracking, and Docker-based deployment with Qdrant.

Self-hosted plain-markdown knowledge base with a built-in MCP server. Lets Claude Desktop, Cursor, and any MCP client search, read, create, edit, tag, and template notes — same vault that powers the web UI. Pure-stdlib client, no extra deps, MIT-licensed. Can run in Docker.

Keyless CEX/DEX signing for AI trading agents (Binance, OKX, Bybit, KuCoin, Hyperliquid, Asterdex). Signing keys never leave an AWS Nitro Enclave (attested PCR0); agents receive policy-bounded signatures, not credentials. Built to survive prompt injection and supply-chain key leaks. 5 tools, stdio. Install with npx -y @usenami/signer-mcp.

Open-source personal finance app with a first-party MCP server (54 HTTP / 89 stdio tools). Track and query income, expenses, budgets, investments, loans, subscriptions, and goals from any MCP client. OAuth 2.1 + DCR for hosted access, stdio for local. Per-user encryption at rest. Self-host with Docker + PostgreSQL or use the managed cloud.

Log-stream tools for on-call / SRE agent workflows — expose rlg (RustLogs) log files as MCP tools. Three tools: taillog (last N events, filtered by level/target), filterlog (JSON-path-style predicates), summarizeerrors (grouped error taxonomy). Speaks JSON-RPC 2.0 over stdio; near-lock-free structured logging engine underneath (65k-slot ring buffer, 14 output formats, oslog/journald sinks). Install cargo install rlg-mcp or docker run -i ghcr.io/sebastienrousseau/rlg-mcp. Dual-licensed MIT OR Apa

🎖️ - Built-in MCP server for Radar, a modern Kubernetes visibility tool. Lets AI agents query cluster topology, resources, events, logs, and Helm/GitOps state across multiple clusters. Single binary, no agents, no cloud dependency. Apache 2.0.

Query PostgreSQL, MySQL, Redshift and SQL Server over verified SSH / AWS SSM tunnels, with read-only enforcement, confined file exports, and pluggable secret providers (env, Vault, AWS Secrets Manager, RDS IAM). Published on the official MCP Registry.

Safe, read-only SSH diagnostics for Linux/Docker servers: a fixed 38-command whitelist (no arbitrary execution), secret redaction, per-command timeouts. Collects evidence; your model does the reasoning. npx @rootpilot/mcp-ssh-diagnose

Stateful, structured, auditable shell sessions for AI agents over local, SSH, and Docker. Secret redaction, output budgeting, SSH host-key verification, and a loopback read-only browser viewer that streams the live transcript.

Manage AWS EC2, Hetzner, OVH and custom SSH servers: run commands, fetch logs, CloudWatch/CloudTrail queries, fleet health snapshots, IP banning, S3 — with readonly/standard/dangerous guard tiers and a JSONL audit trail.

SSH & Kubernetes access broker where the model never touches a credential: a separate signer mints per-operation ephemeral SSH certificates and bound ServiceAccount tokens, with a per-command allow/deny/approval firewall (POSIX-sh AST), dry-run, human-in-the-loop approvals, session recording and an Ed25519-chained audit log. Self-hosted Go binaries, GPLv3.

VMware Tanzu / vSphere Kubernetes Service — Supervisor cluster, Namespace, and TKC (Tanzu Kubernetes Cluster) lifecycle management. 20 tools with dry-run mode, kubeconfig export, and double-confirmation for namespace/TKC deletion.