TAP is answering right now. Last checked 13 min ago. Last commit 23 Jul 2026.
Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.
What the code does
We read the source, 26 min ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
"api.telegram.org" => telegram(&path, method, json.as_ref()),
status.innerHTML = `${escapeHtml(result.approver ? `Approved by ${result.approver}` : 'Approved')} — redirecting…`;
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && apt-get install -y nodejs && rm -rf /var/lib/apt/lists/*
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.
claude mcp add tap --transport http https://mcp.tap.human.tech/mcphttps://mcp.tap.human.tech/mcp[mcp_servers.tap]
url = "https://mcp.tap.human.tech/mcp"{
"mcpServers": {
"tap": {
"url": "https://mcp.tap.human.tech/mcp"
}
}
}{
"servers": {
"tap": {
"type": "http",
"url": "https://mcp.tap.human.tech/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.tap.human.tech/mcp | streamable-http | sign-in | 457 ms | 13 min ago |
Alternatives to TAP
same job, measured the same wayCredential isolation for AI agents. Inject secrets at the network boundary.
Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Encrypted secrets and credential management for agents
Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Secure gift, flower, occasion, reminder, approval, and growth tools for personal AI agents.
Check text for leaked credentials before an agent writes or commits it. Runs locally.
Pay-per-call x402 API for AI trading agents: pre-trade security checks, Polymarket & HIP-4 odds.
TAP — questions
Answers built from our own checks of this server.