- Conduid
- Marketplace
- #privacy
MCP servers tagged privacy
595 live MCP servers tagged "privacy", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with privacy.
Notesentry MCP
Local-first MIMIC-III clinical-notes assistant — local LLM (Ollama) + MCP tools + human-in-the-loop. Data stays on device.
Kweo
kweo — the free, private, agentic AI browser. Any model, on your device (macOS, Windows, Linux). Issue tracker & feedback → kweo.ai
Caboo MCP
Historical case study of Caboo's privacy-first MCP booking connector and human-confirmed transaction design.
Zcash MCP Server
MCP server for private Zcash payments - enabling AI agents to send and receive shielded transactions
Kerebrom
Local-first persistent memory for AI agents. One Go binary installs MCP, lifecycle hooks, and shared SQLite/FTS5 memory for Claude, Codex, Cursor, and more.
Apple Productivity MCP
Local-first MCP server for Apple Reminders, Calendar, Notes, and Contacts on macOS.
Neuronest MCP
Local-first MCP server that turns your Markdown vault (Obsidian, Logseq, or plain folders) into a private, searchable "second brain" for AI agents like Claude and Cursor — with se…
Dripcheck
Lint email sequences and drip campaigns for deliverability: SPF/DKIM/DMARC, link health, unsubscribe presence, and CAN-SPAM/GDPR compliance.
Vaultarchive MCP
MCP server giving AI agents local zip tools — create, list, extract (free), plus extract-one & add-to-zip (Pro). Files never leave the machine.
Openportfolio
Self-hosted portfolio tracker: every account as one net worth, the investor flows behind the price, and a Brier-scored record of the calls you made. No provider API key.
AI Toolbox MCP
Local-first MCP server: 17 AI tools + 5 system endpoints for Claude & Cursor, powered by Ollama — all inference on-device, no API key, no data egress.
PortfolioDB
Self-hosted portfolio ledger on Postgres. Append-only and lot-based, with FIFO and average-cost engines that compute cost basis on read. Ships an MCP server your own AI agents can…
Sysmon Tray
Lightweight cross-platform system monitor for your menu bar — with AI integration via MCP. Built with Tauri v2, Rust, and React.
Research Copilot
A local AI research assistant that searches, reads, summarizes, and remembers—with transparent tool calls and zero cloud dependencies. Built with Ollama, MCP protocol, and Streaml…
Gmail MCP Local
Local-first Gmail MCP server for Claude & Cursor — manage Gmail from your AI client with OAuth tokens that never leave your machine (OS keychain). Open source, private by design.
Vaultyaml MCP
MCP server giving AI agents local YAML tools — validate, YAML↔JSON (free), plus query-by-path & deep-merge (Pro). Configs never leave the machine.
Adversaria MCP
Read-only MCP server for Adversaria — query your on-device meeting notes and to-dos from Claude, Claude Code, or any MCP client. Local, read-only, no network calls of its own. MIT.
Tallyroom
A private money workbench your agent can use. Your bank statement never leaves the browser tab; WebMCP lets the agent come to it. OpenAI WebMCP Challenge entry.
Questa MCP
Questa Privacy MCP — anonymize and redact PII before it reaches AI models.
Enki Memory
Enki — selective memory for AI agents: remembers what's current, forgets what's stale at write-time. Local, deterministic, ~half the storage. Live demo → try.enkilabs.co.uk
Codex Whatsapp
Privacy-first WhatsApp Web plugin for Codex with self-only sending and owner command automation
Reed MCP
MCP server for reed: cited evidence from your private documents, without a byte leaving your machine
Guarded Notes MCP
Safety-gated Apple Notes MCP server and Codex plugin for macOS: local review, exact move plans, one-use authorization, journals, and rollback.
Kotys
A private AI agent that runs on your own computer — chat, tools, memory, and tasks, on Ollama (local or cloud) and any OpenAI-compatible server like oMLX.
Webmcp Analytics
Measure whether agents actually call the WebMCP tools your page registers. Argument shapes, never values.
Privacy Shield MCP
7-layer security plugin for Claude Code: real-time hooks (bash, file, web) + 21 MCP tools for privacy, threat detection, and audit
Privacyspoof
AdGuard/uBlock blocklists + UA/geo/cookie/session spoofing with a browser compatibility matrix
Whisperlog
Local-first audio transcription pipeline (Whisper + SQLite/FTS5, optional Claude/Ollama enrichment, MCP). Auto-detects Sony ICD-UX570; works with any audio source.
Agent Capability Middleware
Open SDK and reference profiles for user-controlled AI agent permissions, private context, and x402 policy flows
Chimera Masha
Kendi sunucunuzda çalışan, salt-okunur on-prem veri bağlayıcı ajanı. Veri kutunuzda kalır; buluta yalnız maskeli sonuç çıkar. Ne kurduğunuzu görebilesiniz diye açık kaynak.
Kynoptic
A local-first activity awareness layer for Windows. Records app/system/input activity to a local SQLite database — query it via CLI, a local dashboard, or MCP. Keyboard is stored…
Ghostmic
Silent meeting transcription for Claude. No bot joins the call. No data leaves your Mac.
Vaultimg MCP
MCP server giving AI agents local image tools — resize, convert, strip EXIF metadata, info. Images never leave the machine.
Phiscrub
Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
Trackblock
Family phone stalkerware audit — MVT-class iOS/Android forensics
Lineagemap
Column-level lineage extracted from SQL and dbt
Code Protonbound
A secure Python MCP server for Proton Bridge with a deny-by-default security model, opt-in SMTP capability, and email body injection fencing.
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Markitdown Ingest Marketplace
Portable, privacy-focused MarkItDown document ingestion plugin and marketplace for Codex on macOS
Unified AI Memory
Offline-first AI memory for coding agents — one Markdown brain on your machine, shared via a local MCP server, with ONNX semantic search, RAG chat and a human-brain memory lifecyc…
Shotscribe
Auto-rename macOS screenshots with on-device OCR and the AI you already use. Date-first names, Finder tags, search.
Obfuscator
Local MCP server that obfuscates source-file identifiers before Claude Code sends them to Anthropic, and restores them on writeback.
Faraday Webmcp
Clean and explore sensitive data by talking to it. A WebMCP workspace where the browser refuses to let the page make a network request.
Gumi MCP
Servidor MCP local, somente leitura, que expoe um repositorio a agentes de IA sem expor os dados que vivem dentro dele
Bee Bystander
Bystander - a consent-aware capture and redaction layer for the Bee wearable. UNKNOWN is never treated as consent. Amazon Build, Ship, Shape 2026.
Tbc Insurance MCP
Local MCP server for reviewed TBC Insurance health-account workflows
Aincore
AinCore — 本地 AI 算力平台。基于 Electron + llama.cpp 在你的设备上安全运行 GGUF 大语言模型，提供 UDS JSON-RPC 服务、OAuth 2.0 授权、隐私哨兵、应用市场等核心能力。
ARADHYA
Local-first AI Operating Intelligence for Windows — ReAct agent loop, 50+ tools across 15 categories, zero-code Markdown skills framework, and a Hooks→Permissions→Approval safety…
Keepsake
Sovereign, local-first, zero-knowledge long-term memory for LLMs and AI agents — yours like a crypto wallet. Apache-2.0, no telemetry, runs offline.
Codex Background Drain Helper
Safe Codex AGENTS.md append-only guidance and troubleshooting for unintended background usage