From 8725483f49d93a62604fe605037f55822dc02818 Mon Sep 17 00:00:00 2001 From: zekebuilds-lab Date: Sat, 9 May 2026 23:39:20 -0400 Subject: [PATCH 1/2] Add captcha-mcp to Security section --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index a58a33b32..9214fe543 100644 --- a/README.md +++ b/README.md @@ -2205,6 +2205,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [vespo92/OPNSenseMCP](https://github.com/vespo92/OPNSenseMCP) 📇 🏠 - MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language - [wei9072/aegis](https://github.com/wei9072/aegis) [![wei9072/aegis MCP server](https://glama.ai/mcp/servers/wei9072/aegis/badges/score.svg)](https://glama.ai/mcp/servers/wei9072/aegis) 🦀 🏠 🍎 🪟 🐧 - AI-agent admission-control MCP server: validates file edits against Ring 0 syntax + Ring 0.5 structural-cost regression + workspace boundary (path / glob / shell-redirect / symlink). Negative-space framing — emits BLOCK / WARN / PASS verdicts, never coaches the agent. - [zboralski/ida-headless-mcp](https://github.com/zboralski/ida-headless-mcp) 🏎️ 🐍 🏠 🍎 🪟 🐧 - Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering. +- [zekebuilds-lab/captcha-mcp](https://github.com/zekebuilds-lab/captcha-mcp) 📇 🏠 🍎 🪟 🐧 - L402 Lightning paywall + Hashcash proof-of-work gate for MCP tool calls. Free tier solves a PoW challenge; paid tier pays a Lightning invoice via self-hosted LNBits. No accounts, no API keys, no third-party SaaS. Drop-in middleware for any MCP server. `npx @powforge/captcha-mcp`. - [zinja-coder/apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server) 🐍 🏠 - APKTool MCP Server is a MCP server for the Apk Tool to provide automation in reverse engineering of Android APKs. - [takleb3rry/zitadel-mcp](https://github.com/takleb3rry/zitadel-mcp) 📇 ☁️ 🏠 - MCP server for Zitadel identity management — manage users, projects, OIDC apps, roles, and service accounts through natural language. - [taniwhaai/arai](https://github.com/taniwhaai/arai) [![taniwhaai/arai MCP server](https://glama.ai/mcp/servers/taniwhaai/arai/badges/score.svg)](https://glama.ai/mcp/servers/taniwhaai/arai) 🦀 🏠 🍎 🪟 🐧 - Policy enforcement for AI coding agents derived from existing instruction files (CLAUDE.md, .cursorrules, .windsurfrules, .github/copilot-instructions.md) — no separate YAML to maintain. Rules with prohibitive predicates (`never`, `forbids`, `must_not`) emit `permissionDecision: deny` to block tool calls in Claude Code; advisory rules inject context. PostToolUse is correlated with PreToolUse to produce per-rule obeyed/ignored compliance verdicts in a local JSONL audit log. MCP tools — `arai_add_guard` (register rules mid-session), `arai_list_guards`, `arai_recent_decisions` — work in any MCP client (Claude Desktop, Cursor, Windsurf, Cline). No network on the hook hot path; opt-out anonymous telemetry. From dd06d79b8c04fb63c992dbed8aa6dedf42bf574b Mon Sep 17 00:00:00 2001 From: zekebuilds-lab Date: Sat, 9 May 2026 23:48:56 -0400 Subject: [PATCH 2/2] Add Glama score badge to captcha-mcp entry --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 9214fe543..984f36b4f 100644 --- a/README.md +++ b/README.md @@ -2205,7 +2205,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [vespo92/OPNSenseMCP](https://github.com/vespo92/OPNSenseMCP) 📇 🏠 - MCP Server for managing & interacting with Open Source NGFW OPNSense via Natural Language - [wei9072/aegis](https://github.com/wei9072/aegis) [![wei9072/aegis MCP server](https://glama.ai/mcp/servers/wei9072/aegis/badges/score.svg)](https://glama.ai/mcp/servers/wei9072/aegis) 🦀 🏠 🍎 🪟 🐧 - AI-agent admission-control MCP server: validates file edits against Ring 0 syntax + Ring 0.5 structural-cost regression + workspace boundary (path / glob / shell-redirect / symlink). Negative-space framing — emits BLOCK / WARN / PASS verdicts, never coaches the agent. - [zboralski/ida-headless-mcp](https://github.com/zboralski/ida-headless-mcp) 🏎️ 🐍 🏠 🍎 🪟 🐧 - Headless IDA Pro binary analysis via MCP. Multi-session concurrency with Go orchestration and Python workers. Supports Il2CppDumper and Blutter metadata import for Unity and Flutter reverse engineering. -- [zekebuilds-lab/captcha-mcp](https://github.com/zekebuilds-lab/captcha-mcp) 📇 🏠 🍎 🪟 🐧 - L402 Lightning paywall + Hashcash proof-of-work gate for MCP tool calls. Free tier solves a PoW challenge; paid tier pays a Lightning invoice via self-hosted LNBits. No accounts, no API keys, no third-party SaaS. Drop-in middleware for any MCP server. `npx @powforge/captcha-mcp`. +- [zekebuilds-lab/captcha-mcp](https://github.com/zekebuilds-lab/captcha-mcp) [![zekebuilds-lab/captcha-mcp MCP server](https://glama.ai/mcp/servers/zekebuilds-lab/captcha-mcp/badges/score.svg)](https://glama.ai/mcp/servers/zekebuilds-lab/captcha-mcp) 📇 🏠 🍎 🪟 🐧 - L402 Lightning paywall + Hashcash proof-of-work gate for MCP tool calls. Free tier solves a PoW challenge; paid tier pays a Lightning invoice via self-hosted LNBits. No accounts, no API keys, no third-party SaaS. Drop-in middleware for any MCP server. `npx @powforge/captcha-mcp`. - [zinja-coder/apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server) 🐍 🏠 - APKTool MCP Server is a MCP server for the Apk Tool to provide automation in reverse engineering of Android APKs. - [takleb3rry/zitadel-mcp](https://github.com/takleb3rry/zitadel-mcp) 📇 ☁️ 🏠 - MCP server for Zitadel identity management — manage users, projects, OIDC apps, roles, and service accounts through natural language. - [taniwhaai/arai](https://github.com/taniwhaai/arai) [![taniwhaai/arai MCP server](https://glama.ai/mcp/servers/taniwhaai/arai/badges/score.svg)](https://glama.ai/mcp/servers/taniwhaai/arai) 🦀 🏠 🍎 🪟 🐧 - Policy enforcement for AI coding agents derived from existing instruction files (CLAUDE.md, .cursorrules, .windsurfrules, .github/copilot-instructions.md) — no separate YAML to maintain. Rules with prohibitive predicates (`never`, `forbids`, `must_not`) emit `permissionDecision: deny` to block tool calls in Claude Code; advisory rules inject context. PostToolUse is correlated with PreToolUse to produce per-rule obeyed/ignored compliance verdicts in a local JSONL audit log. MCP tools — `arai_add_guard` (register rules mid-session), `arai_list_guards`, `arai_recent_decisions` — work in any MCP client (Claude Desktop, Cursor, Windsurf, Cline). No network on the hook hot path; opt-out anonymous telemetry.