Back to Docs

MCP Vendor Presets

One-click registration for 12 popular MCP servers. Each preset bundles the canonical URL, transport, auth shape, and default tool ACLs with sensible risk levels.

Find them at /dashboard/mcp/registry→ "Quick-add from preset", or via the API atGET /api/v1/mcp/presets.

Authoritative defaults for destructive tools

Every preset enforces a hard rule: tools that move money, page on-call engineers, deploy code, or delete data are either denied by default or restricted to owner-only. A unit test in packages/coreblocks any future preset from regressing this bar. The dashboard surfaces every default ACL on the Quick-add review screen so operators see what they're enabling before they click confirm.

Productivity + Issue tracking

GitHubofficialhttpbearer

Repos, issues, pull requests, code search, file ops.

https://api.githubcopilot.com/mcp/

12 default tool ACLsVendor docs ↗
Linearofficialsseoauth2

Issues, projects, teams, cycles, comments.

https://mcp.linear.app/sse

10 default tool ACLsVendor docs ↗
Atlassianofficialsseoauth2

Jira issues + transitions, Confluence pages + search.

https://mcp.atlassian.com/v1/sse

11 default tool ACLsVendor docs ↗
Notionofficialhttpoauth2

Search, fetch pages, query databases, create + update blocks.

https://mcp.notion.com/mcp

10 default tool ACLsVendor docs ↗

Communication + Design

Slackcommunitystdiobearer

Post messages, search history, manage threads + reactions.

npx -y @modelcontextprotocol/server-slack

9 default tool ACLsVendor docs ↗
Figmaofficialhttpoauth2

Read files + frames + components, export images, list team projects.

https://mcp.figma.com/mcp

7 default tool ACLsVendor docs ↗

Finance + Database

Stripecommunitystdioapi-key

Customers, charges, refunds, subscriptions, invoices, payment links.

npx -y @stripe/agent-toolkit

13 default tool ACLsVendor docs ↗
Postgrescommunitystdioapi-key

Read-only SQL queries + schema introspection.

npx -y @modelcontextprotocol/server-postgres

3 default tool ACLsVendor docs ↗

Observability + Infra

Sentryofficialsseoauth2

Issues, events, releases, replays — pull error context into agents.

https://mcp.sentry.dev/sse

10 default tool ACLsVendor docs ↗
PagerDutycommunitystdioapi-key

List/create/acknowledge incidents, query schedules + escalation policies.

npx -y @pagerduty/mcp-server

10 default tool ACLsVendor docs ↗
Datadogcommunitystdioapi-key

Query metrics, search logs, list + mute monitors, fetch dashboards.

npx -y @winor30/mcp-server-datadog

10 default tool ACLsVendor docs ↗
Cloudflareofficialsseoauth2

Workers, R2 buckets, D1 databases, KV namespaces, DNS records.

https://api.mcp.cloudflare.com/sse

14 default tool ACLsVendor docs ↗

Programmatic access

The catalog is available via REST + CLI:

# REST
GET /api/v1/mcp/presets
GET /api/v1/mcp/presets?id=<vendor-id>

# CLI
evalguard mcp presets           # short summary table
evalguard mcp preset stripe     # full setup guide + tool ACL matrix
evalguard mcp servers           # list servers registered to your org

Adding your own preset

Self-hosted operators can drop a <vendor>.ts file in packages/core/src/mcp-gateway/presets/ following the shape of the bundled ones and append to the MCP_PRESETS tuple in index.ts. The catalog test asserts shape + id-uniqueness; the destructive-default rule unit test catches any preset that ships a permissive ACL ondelete_* / charge.create / refund.create /archive_* tools.