For hardware security modules, the products whose sources show HSM capabilities are AWS (CloudHSM actions such as CreateHsm, DeleteHsm and KMS-backed GenerateMac 111), Microsoft Azure (dedicated HSM actions such as DedicatedHsm_CreateOrUpdate and DedicatedHsm_Get 212), and 1Claw (HSM-backed secret management with MPC key splitting 414). SoftHSM provides a PKCS #11 software HSM for exploration without hardware 7.
- 1
AWS CloudHSMamazon.comverified and signed
Creates, deletes and manages hardware security modules inside an AWS CloudHSM cluster 11.
official:MCP server · mcp-proxy-for-awsAPI · AWS Certificate ManagerSDK · @aws-sdk/typeslibrary · aws-lc-sysCLI · aws-cdk
for agents: CreateHsm · DeleteHsm · GenerateMac
- 2
Azure Dedicated HSMmicrosoft.comverified and signed
Creates, updates and reads dedicated hardware security modules in an Azure subscription and resource group 12.
official:MCP server · Azure MCP ServerAPI · Azure Enterprise Knowledge Graph ServiceSDK · azure-corelibrary · Azure.AI.OpenAICLI · azure-cli
for agents: DedicatedHsm_Get · DedicatedHsm_CreateOrUpdate · DedicatedHsm_ListByResourceGroup
- 3
1Claw1claw.coverified and signed
Stores and rotates secrets with HSM-backed encryption and MPC key splitting for AI agents and humans 14.
+1 community tools built for it
for agents: Secret Management · Platform API · Execution Intents
- 4
Sources
- 1Dedicated Game Server Hosting | Amazon GameLift Partners | AWSaws.amazon.com · read 2026-10-29
- 2Cloud Computing Services | Microsoft Azureazure.microsoft.com · read 2026-10-29
- 41Claw — Secret Management for AI Agents1claw.co · read 2026-10-29
- 7SoftHSM | www.softhsm.orgsofthsm.org · read 2026-10-29
- 11AWS CloudHSM V2: declares "CreateHsm" (the record we read and signed)unfragile.ai · read 2026-10-24
- 12Azure Dedicated HSM Resource Provider: declares "DedicatedHsm_Get" (the record we read and signed)unfragile.ai ·
- 141Claw: declares "Secret Management" (the record we read and signed)unfragile.ai · read 2026-10-24
Left out: EOSL.ai, because each one's own page says it is retired or discontinued.
For agents: the 10 actions behind this answer
CreateHsm · AWS CloudHSM V2 verified and signed
Creates a new hardware security module (HSM) in the specified AWS CloudHSM cluster.
DedicatedHsm_Get · Azure Dedicated HSM Resource Provider verified and signed
Gets the specified Azure dedicated HSM.
CreateHsmConfiguration · Amazon Redshift verified and signed
Creates an HSM configuration that contains the information required by an Amazon Redshift cluster to store and use database encryption keys in a Hardware Security Module (HSM).
DedicatedHsm_CreateOrUpdate · HardwareSecurityModules verified and signed
Create or Update a dedicated HSM in the specified subscription.
winmd-api-search · winmd-api-search verified and signed
Find and explore Windows desktop APIs. Use when building features that need platform capabilities — camera, file access, notifications, UI controls, AI/ML, sensors, networking, etc. Discovers the right API for a task and retrieves full type details (methods, properties, events, enumeration values).
Secret Management · 1Claw verified and signed
Store, retrieve, rotate, and share secrets with HSM-backed encryption and MPC key splitting.
ManagedHsms_Get · KeyVaultManagementClient verified and signed
Gets the specified managed HSM Pool.
docker-sandboxes-network-credentials · docker-sandboxes-network-credentials verified and signed
Use this skill when configuring what a Docker Sandboxes (`sbx`) sandbox can reach on the network or which credentials it authenticates with, even if the user just says they want to "let the agent call an internal API", "block all network access", "give the agent a GitHub token", or "use a private re
custom_api_call · Twilio (Activepieces) verified and signed
Custom API Call — Make a custom API call to a specific endpoint
· SoftHSM website read, tools not yet checked
www.softhsm.org
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.