Security plugins

1,134 tagged Security, measured the same way as everything else here.

Browse within: claude-code-plugin 230compliance 94agentic-ai 82fedramp 70claude-ai 50ai-tools 47skills 46ai-security 44agents 38auditing 37cmmc 37gdpr 36mcp-server 35data-privacy 33

mcp-scan

601

CodingSelim/mcp-scan

Plugin Claude Code

Bundles 1 MCP server

Audit MCP servers against the OWASP MCP Top 10. Bundles the mcp-scan MCP server so Claude can scan any MCP server (stdio or HTTP) and get a graded A-F report before you trust it.

not rated 0 1mo ago A tokens not measured original MIT

scout

603

Varpost/Scout

Plugin Claude Code

Bundles 1 command, 1 MCP server · 12 tokens together

Deterministic security scanner for AI-assisted coding. Runs Scout as an agent-callable verifier (scan -> fix -> rescan) with no inference cost.

not rated 0 20d ago A tokens not measured

whatsapp-mcp

604

adelaidasofia/whatsapp-mcp

Plugin Claude Code

Bundles 1 hook, 2 MCP servers

Personal WhatsApp MCP server built directly on whatsmeow. Local-only Go bridge with SQLCipher-encrypted storage, Python FastMCP layer, Whisper voice-note transcription, accent-insensitive Spanish search, LID name resolution, vault-native CRM auto-injection, prompt-injection scrubbing, and mandatory draft+confirm on…

not rated 0 3d ago A tokens not measured original MIT

agent-guards

606

mlawsonking/MCP

Plugin Claude Code

Bundles 1 skill, 2 hooks · 72 tokens together

Deterministic security checks in Claude Code's path: package names before an install, secrets and code rules on what was just written, injection and Unicode-obfuscation patterns in fetched pages. No network call in any hook, no model in any check.

not rated 0 yesterday A tokens not measured original MIT

curatedmcp

607

oneprofile-dev/curatedmcp-catalog-mcp

Plugin Claude Code

Bundles 1 skill, 1 MCP server · 53 tokens together

Search a human-reviewed, risk-classified catalog of MCP servers without leaving your agent. Check whether an unfamiliar MCP server is verified before you install it, and pull full risk profiles (capabilities, transport, install command). Includes a skill for auditing the MCP servers already configured on this machine.

not rated 0 1mo ago A tokens not measured original MIT

cloudarmor-mcp

608

shigechika/cloudarmor-mcp

Plugin Claude Code

Bundles 1 MCP server

Google Cloud Armor WAF log patrol for Claude Code, straight from Cloud Logging. Summarize enforced DENYs per rule, flag home-region false positives, review preview (dry-run) rules, and get a one-shot dailybrief health check. All tools are read-only. Requires CLOUDARMORPROJECT and a GOOGLEAPPLICATIONCREDENTIALS serv.

not rated 0 10d ago A tokens not measured original MIT

entraadm-mcp

609

shigechika/entraadm-mcp

Plugin Claude Code

Bundles 1 MCP server

Microsoft Entra ID sign-in and audit-log triage MCP for Claude Code. Investigate why a sign-in failed (AADSTS-annotated), tenant-wide failure trends and password-spray suspects, who changed what in the directory, and whether MFA is registered for an account, plus a one-shot dailybrief. Read-only — no write calls anywh.

not rated 0 14d ago A tokens not measured original MIT

gwsadm-mcp

610

shigechika/gwsadm-mcp

Plugin Claude Code

Bundles 1 MCP server

Google Workspace security-audit MCP for Claude Code, through a service account with domain-wide delegation. Investigate suspicious/disabled logins, suspended accounts, third-party OAuth grants, Drive external sharing, group delivery policy, and Gmail message tracing across one or more Workspace domains, plus a…

not rated 0 4d ago A tokens not measured original MIT

keycloak-mcp

611

shigechika/keycloak-mcp

Plugin Claude Code

Bundles 1 MCP server

KeyCloak Admin REST API for Claude Code, through a Service Account. Investigate accounts, group membership, sessions, MFA enrolment, brute-force lockouts, and login/admin events, and get a one-shot dailybrief health check. Runs read-only unless the Service Account is granted manage-users. Requires KEYCLOAKURL, KEYCLO.

not rated 0 4d ago A tokens not measured original MIT

raziel

612

tide-foundation/raziel-mcp

Plugin Claude Code

Bundles 13 skills, 2 MCP servers · 0 tokens together

AI coding agent guidance for TideCloak — threshold-cryptography auth, E2EE, IGA governance, Forseti contracts, server-side protection, plus security gap analysis and hosting guidance.

not rated 0 18d ago A tokens not measured

robcsaszar-sentinel

615

robcsaszar/sentinel

Plugin Claude Code

Bundles 1 skill · 129 tokens together

Static security audit skill for web application codebases: stack triage, checklist-driven scan, and a PASS/FAIL/MANUAL-REVIEW report with file:line evidence and remediation code.

not rated 0 4d ago A tokens not measured original MIT

robcsaszar-tend

616

robcsaszar/tend

Plugin Claude Code

Bundles 7 skills · 804 tokens together

Local, on-demand maintenance skills for SvelteKit + TypeScript repos: security, performance, refactoring, accessibility, and test-coverage scanners that each fix one issue per run and leave the diff for review.

not rated 0 4d ago A tokens not measured original MIT

credential-downscope

621

kbroughton/downscoping-mcp

Plugin Claude Code

Bundles 1 MCP server

Least-privilege credential injection for CLI tools and MCP servers. Intercepts Bash tool calls and MCP tool calls, swapping in the least-privileged auth token for each operation based on .claude/downscoping.yaml config.

not rated 0 5mo ago A tokens not measured

express-recon

622

chiz0me/express-recon

Plugin Claude Code

Bundles 2 skills, 1 MCP server · 241 tokens together

Offline-first Express route and GitHub organization inventory, auth audit, OpenAPI reconciliation, and advisory middleware review.

not rated 0 changed 2d ago A tokens not measured original MIT

sp-devcontrol

624

PRojas01/SP-DevControl

Plugin Claude Code

Bundles 1 skill, 2 MCP servers · 59 tokens together

Gobernanza local para sesiones de código asistidas por IA: gates de autorización, aprobación de cambios, políticas de riesgo, compliance y rollback.

not rated 0 1mo ago A tokens not measured original MIT