DirectoryMCP serversSecurity

TAP: MCP server (Security) in 2026

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

Reachable on 2026-10-27: sign-in required, tools not listed Rank 14 of 14 in Security. Source: MCP Registry record, checked 2026-10-27.

Key facts

TypeMCP server, remote (streamable HTTP)
CategorySecurity
Endpointhttps://mcp.tap.human.tech/mcp
Registry nametech.human/tap
Version (registry)0.1.0
Published in registry2026-07-24
Registry record updated2026-07-24
Repositoryhttps://github.com/holonym-foundation/tap-oss
Websitehttps://tap.human.tech
AuthenticationCustom header required: X-TAP-Key
Latest checkReachable, sign-in required on 2026-10-27, 100 ms to initialize
Checks passed0 of 1 daily checks
Sourcehttps://registry.modelcontextprotocol.io/v0/servers/tech.human%2Ftap/versions/latest (pulled 2026-10-27)

Verification history

One probe a day: initialize, then tools/list, nothing else. Last 1 checks: 10-27 sign-in

Install

Claude Code
claude mcp add --transport http tap https://mcp.tap.human.tech/mcp --header "X-TAP-Key: <your X-TAP-Key>"
Claude (claude.ai, Desktop) (not applicable)

Not applicable: this server needs a custom header (X-TAP-Key) that custom connectors in claude.ai cannot send. Use Claude Code or a config file.

Cursor
{
  "mcpServers": {
    "tap": {
      "url": "https://mcp.tap.human.tech/mcp",
      "headers": {
        "X-TAP-Key": "<your X-TAP-Key>"
      }
    }
  }
}

Save as ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).

ChatGPT (not applicable)

Not applicable: this server needs a custom header (X-TAP-Key); ChatGPT connectors support no authentication or OAuth only.

Hermes Agent
mcp_servers:
  tap:
    url: "https://mcp.tap.human.tech/mcp"
    headers:
      X-TAP-Key: "<your X-TAP-Key>"

Add to ~/.hermes/config.yaml, then run /reload-mcp.

Is this your mcp server? Claim this listing to correct facts, add a contact, or tell us you want the upcoming verified badge, downtime alerts and agent-demand analytics. Claiming never changes where it ranks.

Other security mcp servers

Within a category, entries sort by (1) latest verification: verified working, then reachable but sign-in required, then failing; (2) share of daily checks that passed; (3) number of sourced facts attached to the entry; (4) median response time of passing checks; (5) name. Nothing else counts. Rankings are never for sale: sponsors and paid plans cannot change an entry's position. Markdown · JSON

TAP: MCP server (Security) in 2026 · Vibe Shipped