MongoDB
Official MCPCovers both data and infrastructure, which is unusual — and means an agent can spin up billable clusters. Scope the API key.
Covers both data and infrastructure, which is unusual — and means an agent can spin up billable clusters. Scope the API key.
Among the most capable database servers — which is the risk: unrestricted, an agent can alter schema. Read-only flag first, loosen deliberately.
Write-capable where Vercel is not — an agent can actually ship a site and wire up functions end to end.
Free, open-source and write-capable on dashboards — the default pick if you self-host your observability stack.
Unusually well-matched to coding agents: the MCP server, the CLI and the schema language all target the same workflow.
Read-only by design and better for it — an analytics warehouse is exactly where you want agents querying, not writing.
The rare zero-friction entry: official, free, no auth. It loses points only because there is no hosted API or llms.txt — neither of which it needs.
Doubles as the safest way to run other people's MCP servers — containerised, with declared capabilities, instead of npx-ing a stranger's package.
Vendor-maintained and full read/write — treat it like production shell access, because on a cache that is what it is.
The self-hosting escape hatch: no per-call metering, full write access, and your data never leaves your infrastructure. You run it, you patch it.
Clean official server, plain API key, and real generation tools — the reference example for media APIs exposed over MCP.
Good fit for SaaS billing agents — merchant-of-record handling plus a first-party server, though it runs locally rather than hosted.
The AI-native answer to the NLE gating problem: free MCP server on 127.0.0.1, no licence wall, full timeline read/write. Editing depth is nowhere near Resolve or Final Cut, and it is macOS 26+ only.
Broadest official coverage anywhere, and the hardest auth: IAM roles and SigV4 mean agent permissions need real design, not a token in a config file.
The widest model catalogue reachable over MCP, priced per compute-second. Cap spend before handing the key to an autonomous loop.
Write action here means mail leaving your domain, irreversibly. Excellent server; use a sending-only key and a test domain first.
Highest-value, highest-blast-radius connection in the directory: an agent that can read your mail and write your docs. The Google Cloud setup is the price of admission, and no llms.txt anywhere.
Vendor-maintained and genuinely write-capable on money movement. The gate is commercial: no merchant contract, no access.
The cheapest way to give an agent real web search, and one of very few independent indexes left. Local server, plain API key.
Query-side only, but that is exactly the job — good tracing answers with a plain API key and a free tier to test on.
Documented first-party server with a real free tier and a published tool reference — read-focused, which is the right default for production telemetry.
Official, write-capable, and entirely your operational problem to run — the clearest 'official ≠ hosted' case in the directory.
The strongest agent story in video editing — official, full timeline read/write, no auth because it is local. Pay the $295 Studio licence or none of it works.
Genuinely agent-ready, and genuinely dangerous: write actions send real SMS and calls. Use a scoped API key, not account credentials.