self-hosted
Runs against infrastructure you control directly - a filesystem, a database, a URL - rather than a vendor API.
9 tagged items
Slack MCP server
Lets the model read and post to the Slack channels it can access: search history, summarise a thread, or draft a message for you to send.
Tested on Claude Sonnet · Jun 2026
Notion MCP server
Gives the model access to your Notion pages and databases: read project docs, update a status field, or draft a new page from a conversation.
Tested on Claude Sonnet · Jun 2026
- GuideUniversal
Why prompt injection is not solved
What the problem is, why filtering does not fix it, and what does help. Written for someone about to give a model access to something real.
Tested on Claude Sonnet · May 2026
Filesystem MCP server
Gives the model read and write access to directories you name. The most useful MCP server and the one that deserves the most thought before you…
Tested on Claude Sonnet · May 2026
AnythingLLM
A desktop app for chatting with your own documents against a local or hosted model. The retrieval pipeline is built in, so you do not assemble it…
Tested on Llama 3.3 70B · Jun 2026
- ConfigUniversal
System prompt hardening block
A paragraph to add to any system prompt that reads user-supplied content. It cannot make injection impossible. It makes the common attempts fail…
Tested on Claude Sonnet · May 2026
Fetch MCP server
Lets the model retrieve a URL and read it as text. Simple and useful, and the plainest case of untrusted input in the whole protocol.
Tested on Claude Sonnet · May 2026
PostgreSQL MCP server
Lets the model query your database directly. Read-only is the setting that counts, and it is not the default everywhere.
Tested on Claude Sonnet · May 2026
- PromptUniversal
Audit a prompt for injection risk
Reviews your own system prompt the way an attacker would read it, and points to the exact sentence that gives something away.
Tested on Claude Sonnet · May 2026