TAP is answering right now. Last checked 9 min ago. Last commit 23 Jul 2026.
Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.
What the code does
We read the source, 22 h ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
"api.telegram.org" => telegram(&path, method, json.as_ref()),
status.innerHTML = `${escapeHtml(result.approver ? `Approved by ${result.approver}` : 'Approved')} — redirecting…`;
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.
claude mcp add tap --transport http https://mcp.tap.human.tech/mcp{
"mcpServers": {
"tap": {
"url": "https://mcp.tap.human.tech/mcp"
}
}
}[mcp_servers.tap]
url = "https://mcp.tap.human.tech/mcp"{
"mcpServers": {
"tap": {
"url": "https://mcp.tap.human.tech/mcp"
}
}
}{
"mcpServers": {
"tap": {
"url": "https://mcp.tap.human.tech/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.tap.human.tech/mcp | streamable-http | sign-in | 469 ms | 9 min ago |
Alternatives to TAP
same job, measured the same wayCredential isolation for AI agents. Inject secrets at the network boundary.
Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.
Encrypted secrets and credential management for agents
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
Check text for leaked credentials before an agent writes or commits it. Runs locally.
A secret store for AI agents: the agent never sees the plaintext.
Credential custody for agents: use secrets blind (ssh/http/smtp/git/db), never in context.
Local secret & credential checks for AI-assisted dev — runs on your machine, results redacted.
TAP — questions
Answers built from our own checks of this server.