capability based security plugins

2 tagged capability based security, measured the same way as everything else here.

telekey

02

stefans71/telekey-mcp

Plugin Claude Code

Give each agent a key scoped to one job that can only narrow, never widen. A prompt-injected agent reaches for a capability it was never given — the call is blocked before it runs. Enforced on every tool call via a PreToolUse hook.

1 yesterday A tokens not measured original MIT