mcp-scan
601Plugin Claude Code
Audit MCP servers against the OWASP MCP Top 10. Bundles the mcp-scan MCP server so Claude can scan any MCP server (stdio or HTTP) and get a graded A-F report before you trust it.
1,134 tagged Security, measured the same way as everything else here.
Browse within: claude-code-plugin 230compliance 94agentic-ai 82fedramp 70claude-ai 50ai-tools 47skills 46ai-security 44agents 38auditing 37cmmc 37gdpr 36mcp-server 35data-privacy 33
Plugin Claude Code
Audit MCP servers against the OWASP MCP Top 10. Bundles the mcp-scan MCP server so Claude can scan any MCP server (stdio or HTTP) and get a graded A-F report before you trust it.
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 43 tokens together
CVE lookup with exploit-probability (EPSS) + CISA KEV, IP/domain threat reputation, and daily threat briefs from the FoundryNet Data Network.
Plugin Claude Code
Bundles 1 command, 1 MCP server · 12 tokens together
Deterministic security scanner for AI-assisted coding. Runs Scout as an agent-callable verifier (scan -> fix -> rescan) with no inference cost.
Plugin Claude Code
Personal WhatsApp MCP server built directly on whatsmeow. Local-only Go bridge with SQLCipher-encrypted storage, Python FastMCP layer, Whisper voice-note transcription, accent-insensitive Spanish search, LID name resolution, vault-native CRM auto-injection, prompt-injection scrubbing, and mandatory draft+confirm on…
Plugin Claude Code
Bundles 1 skill, 2 MCP servers · 78 tokens together
MCP server for SimpliSafe — system state, sensors, events, arm/disarm and smart-lock control.
Plugin Claude Code
Bundles 1 skill, 2 hooks · 72 tokens together
Deterministic security checks in Claude Code's path: package names before an install, secrets and code rules on what was just written, injection and Unicode-obfuscation patterns in fetched pages. No network call in any hook, no model in any check.
oneprofile-dev/curatedmcp-catalog-mcp
Plugin Claude Code
Bundles 1 skill, 1 MCP server · 53 tokens together
Search a human-reviewed, risk-classified catalog of MCP servers without leaving your agent. Check whether an unfamiliar MCP server is verified before you install it, and pull full risk profiles (capabilities, transport, install command). Includes a skill for auditing the MCP servers already configured on this machine.
Plugin Claude Code
Google Cloud Armor WAF log patrol for Claude Code, straight from Cloud Logging. Summarize enforced DENYs per rule, flag home-region false positives, review preview (dry-run) rules, and get a one-shot dailybrief health check. All tools are read-only. Requires CLOUDARMORPROJECT and a GOOGLEAPPLICATIONCREDENTIALS serv.
Plugin Claude Code
Microsoft Entra ID sign-in and audit-log triage MCP for Claude Code. Investigate why a sign-in failed (AADSTS-annotated), tenant-wide failure trends and password-spray suspects, who changed what in the directory, and whether MFA is registered for an account, plus a one-shot dailybrief. Read-only — no write calls anywh.
Plugin Claude Code
Google Workspace security-audit MCP for Claude Code, through a service account with domain-wide delegation. Investigate suspicious/disabled logins, suspended accounts, third-party OAuth grants, Drive external sharing, group delivery policy, and Gmail message tracing across one or more Workspace domains, plus a…
Plugin Claude Code
KeyCloak Admin REST API for Claude Code, through a Service Account. Investigate accounts, group membership, sessions, MFA enrolment, brute-force lockouts, and login/admin events, and get a one-shot dailybrief health check. Runs read-only unless the Service Account is granted manage-users. Requires KEYCLOAKURL, KEYCLO.
Plugin Claude Code
Bundles 13 skills, 2 MCP servers · 0 tokens together
AI coding agent guidance for TideCloak — threshold-cryptography auth, E2EE, IGA governance, Forseti contracts, server-side protection, plus security gap analysis and hosting guidance.
Plugin Claude Code
Bundles 1 skill, 2 MCP servers · 74 tokens together
Connect Claude Code to Civic's MCP Gateway for agent identity, scoped permissions, audit trails, and revocable access control.
trusteed-io/trusteed-mcp-plugin
Plugin Claude Code
Bundles 3 skills, 1 MCP server · 33 tokens together
Trusteed remote MCP connector — security posture, assets, findings, compliance, and scans for your Trusteed tenant.
Plugin Claude Code
Bundles 1 skill · 129 tokens together
Static security audit skill for web application codebases: stack triage, checklist-driven scan, and a PASS/FAIL/MANUAL-REVIEW report with file:line evidence and remediation code.
Plugin Claude Code
Bundles 7 skills · 804 tokens together
Local, on-demand maintenance skills for SvelteKit + TypeScript repos: security, performance, refactoring, accessibility, and test-coverage scanners that each fix one issue per run and leave the diff for review.
Plugin Claude Code
Bundles 1 skill · 127 tokens together
Unified audit logging, policy enforcement, and input sanitization for the VMware MCP skill family.
Plugin Claude Code
Secure secrets management for Claude Code - inject secrets into CLI commands with user approval.
Plugin Claude Code
AI-powered security audit with real-time CWE data and npm audit.
Plugin Claude Code
Bundles 2 skills, 1 command, 1 agent · 281 tokens together
Local-beta Invompt onboarding and invoice workflows. Select Guest or OAuth in the current conversation before configuring MCP.
Plugin Claude Code
Least-privilege credential injection for CLI tools and MCP servers. Intercepts Bash tool calls and MCP tool calls, swapping in the least-privileged auth token for each operation based on .claude/downscoping.yaml config.
Plugin Claude Code
Bundles 2 skills, 1 MCP server · 241 tokens together
Offline-first Express route and GitHub organization inventory, auth audit, OpenAPI reconciliation, and advisory middleware review.
nikolaymokh-dev/yandex-direct-mcp
Plugin Claude Code
Bundles 3 skills, 1 hook, 1 MCP server · 207 tokens together
A plugin that connects an agent to Yandex Direct, an online advertising platform. It is described as supporting campaigns, advertisements, bids, and OAuth sign-in.
Plugin Claude Code
Bundles 1 skill, 2 MCP servers · 59 tokens together
Gobernanza local para sesiones de código asistidas por IA: gates de autorización, aprobación de cambios, políticas de riesgo, compliance y rollback.