MCP Servers

io.github.crunchtools/airlock

Secure MCP server for quarantined web content extraction with two-layer prompt injection defense, enabling safe fetching of URLs and reading of files via sanitized markdown output.

README

mcp-airlock-crunchtools

Secure MCP server for quarantined web content extraction with two-layer prompt injection defense.

Tools (6)

Tool	Layers	Description
`safe_fetch`	L1	Fetch URL, sanitize, return markdown. Fails on injection.
`safe_read`	L1	Read local file, sanitize, return markdown. Fails on injection.
`quarantine_fetch`	L1+L2	Fetch URL, sanitize, extract via Q-Agent. Warns on injection.
`quarantine_read`	L1+L2	Read local file, sanitize, extract via Q-Agent. Warns on injection.
`quarantine_scan`	L1+L2	Pre-flight scan: detect injection vectors WITHOUT returning content.
`quarantine_stats`	—	Session stats, config, and blocklist summary.

Architecture

Layer 1 (Deterministic): 7-stage sanitization pipeline strips hidden HTML, invisible unicode, encoded payloads, exfiltration URLs, and LLM delimiters.
Layer 2 (Q-Agent): Quarantined Gemini Flash-Lite LLM for semantic content extraction — NO tools, NO memory, NO SDK.

Install

# PyPI
pip install mcp-airlock-crunchtools

# uvx (zero-install)
uvx mcp-airlock-crunchtools

# Container
podman run quay.io/crunchtools/mcp-airlock

Configuration

# Required for Layer 2 (Q-Agent)
export GEMINI_API_KEY=your-key

# Optional
export QUARANTINE_MODEL=gemini-2.0-flash-lite  # default
export QUARANTINE_FALLBACK=layer1              # or "fail"
export QUARANTINE_MAX_CONTENT=100000           # max chars to Q-Agent
export QUARANTINE_DB=/data/airlock.db          # SQLite blocklist path
export QUARANTINE_TRUST_CONFIG=~/.config/mcp-env/mcp-airlock-trust.json

Claude Code

{
  "mcpServers": {
    "mcp-airlock-crunchtools": {
      "command": "uvx",
      "args": ["mcp-airlock-crunchtools"]
    }
  }
}

License

AGPL-3.0-or-later

Recommended Servers

playwright-mcp

A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.

Official

Featured

TypeScript

Audiense Insights MCP Server

Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.

Magic Component Platform (MCP)

An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.

VeyraX MCP

Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.

Official

Featured

Local

graphlit-mcp-server

The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.

Official

Featured

TypeScript

Kagi MCP Server

An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.

Official

Featured

Python

E2B

Using MCP to run code via e2b.

Official

Featured

Neon Database

MCP server for interacting with Neon Management API and databases

Official

Featured

Exa Search

A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.

Official

Featured

Qdrant Server

This repository is an example of how to create a MCP server for Qdrant, a vector search engine.

Official

Featured