986 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,473Claude Code6,589Data and AI3,693Backend and APIs3,491Languages3,403Planning3,201Git and workflow3,131Code review2,731Memory and context2,354Testing2,335DevOps and cloud2,298Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| whoismemas/burpsuite-for-ai-agent Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send find | 0 | Codex, OpenCode | 1 | 867 tok |
| saagpatel/shadow-mcp Discover and risk-grade the MCP servers present on this machine (local-first OWASP MCP09 s | 0 | Codex, OpenCode | 1 | 196 tok |
| scanmalware/mcp-server MCP server for the ScanMalware.com API | 0 | Codex, OpenCode | 1 | 1,550 tok |
| BackBond/agent-scan backbond.ai Vet MCP and AI-agent tools before attachment. Local, deterministic static scanning with no | 0 | Codex, OpenCode | 1 | 825 tok |
| DrBaher/sign-cli cli.drbaher.com Agent-first e-signature CLI. Fully-offline PAdES signer (PKCS#7) — no signup — or hosted p | 0 | Codex, OpenCode | 1 | 1,179 tok |
| antonillos/safeselect antonillos.github.io Read-only PostgreSQL & MongoDB access for coding agents. Local, fail-closed MCP enforcemen | 0 | Codex, OpenCode | 1 | 619 tok |
| cristianmoroaica/bountyverdict cristianmoroaica.github.io Seven x402 decision APIs and installable agent skills for GitHub bounties, CI, skill secur | 0 | Codex, OpenCode | 1 | 324 tok |
| davidmosiah/delx-agent-utilities ontology.delx.ai Open-source stateless utility tools for AI agents: URL, DNS, TLS, OpenAPI, x402, JWT, CSV/ | 0 | Codex, OpenCode | 1 | 248 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| laser54/telegram-managed-bot-factory Secure self-hosted MCP control plane for owner-confirmed Telegram bot provisioning. | 0 | Codex, OpenCode | 1 | 373 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,064 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 3,556 tok |
| professor2k8/agent-security-lens npmjs.com Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or | 0 | Codex, OpenCode | 1 | 489 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| saagpatel/mcp-trust mcp-trust-synthetic-preview-git-202.vercel.app Neutral trust registry for MCP servers — check before you connect | 0 | Codex, OpenCode | 1 | 1,505 tok |
| sugukurukabe/koko-call-mcp mcp.bid-jp.com 17 AI tools for Japanese government procurement bids via MCP. Streamable HTTP + OAuth 2.0. | 0 | Codex, OpenCode | 1 | 295 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,085 tok |
| COSTRINITY/vitna-compliance-mcp vitna.costrinity.xyz Pre-flight compliance checks for AI agents with Ed25519-signed, offline-verifiable evidenc | 0 | Codex, OpenCode | 1 | 559 tok |
| Scottpedia0/access One Bearer token, all your services. Self-hosted credential store + API proxy + MCP server | 0 | Codex, OpenCode | 1 | 1,144 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Starlight143/mcp-server-stage0-authorization signalpulse.org MCP server demonstrating server-side authorization with Stage0 runtime policy validation | 0 | Codex, OpenCode | 1 | 902 tok |
| robcsaszar/sentinel A static security audit skill for Claude Code: OWASP-style findings with file:line evidenc | 0 | Claude Code, Codex, OpenCode | 1 | 586 tok |
| robcsaszar/tend Local, on-demand maintenance skills for SvelteKit + TypeScript repos: security, performanc | 0 | Claude Code, Codex, OpenCode | 1 | 1,518 tok |
| berntpopp/uniprot-link genefoundry.org MCP server for UniProt: protein function, sequence, features and cross-references over the | 0 | Claude Code, Codex, OpenCode | 10 | 1,401 tok |
| yeison-liscano/demo_http_mcp Project demo of http_mcp package | 0 | Claude Code, Codex, OpenCode | 5 | 1,086 tok |
| berntpopp/metadome-link genefoundry.org MCP server for MetaDome: per-position missense tolerance (dN/dS) landscapes for human tran | 0 | Claude Code, Codex, OpenCode | 10 | 4,086 tok |
| unstrike/attackforge-mcp An unoffical AttackForge MCP server that covers the full SSAPI and adds a layer of context | 0 | Claude Code, Codex, OpenCode | 2 | 810 tok |
| dot-do/mcp | 0 | Claude Code, Codex, OpenCode | 2 | 2,189 tok |
| sarveshkapre/cve-risk-mcp | 0 | Codex, OpenCode | 1 | 49 tok |
| cmillstead/basalt-mcp | 0 | Claude Code, Codex, OpenCode | 2 | 2,380 tok |
| oreneHack/okta_mcp | 0 | Claude Code, Codex, OpenCode | 2 | 574 tok |
| IntegSec/turbopentest-mcp MCP server for TurboPentest — AI-powered penetration testing from your coding assistant | 0 | Codex, OpenCode | 1 | 594 tok |
| wojtekkura/purple-mcp Purple AI MCP Server - Access SentinelOne Services with any MCP client | 0 | Claude Code, Codex, OpenCode | 2 | 4,656 tok |
| bitbankinc/bitbank-mcp-server MCPserver for bitbank | 0 | Claude Code, Codex, Cursor, OpenCode | 7 | 720 tok |
| filhocf/sonarqube-mcp-py | 0 | Codex, OpenCode | 1 | 428 tok |
| cybrium-ai/mcp-server MCP server for Cybrium security tools — SAST, secrets, IaC, K8s, supply-chain. Works with | 0 | Codex, OpenCode | 1 | 582 tok |
| scorellis/secretsminter Value-blind secrets-minter that stands up self-maintaining secret rotation, exposed to AI | 0 | Codex, OpenCode | 1 | 1,169 tok |
| openjkai/secscan_mcp | 0 | Codex, OpenCode | 1 | 318 tok |
| lukleh/mcp-sonarcloud MCP server for SonarCloud | 0 | Codex, OpenCode | 1 | 575 tok |
| exploitintel/eip-mcp exploit-intel.com Official MCP server for the Exploit Intelligence Platform | 0 | Codex, OpenCode | 1 | 3,256 tok |
| Jandybottleshaped403/actionproxy Deploy deterministic approval gates for AI agent tool calls with auditable, policy-based c | 0 | Codex, OpenCode | 1 | 1,898 tok |
| fastmcp-me/ggmcp gitguardian.com MCP server for scanning and remediating hardcoded secrets using GitGuardian’s API. Detect | 0 | Codex, OpenCode | 1 | 1,135 tok |
| ahammadshawki8/DeepSIFT findevil.devpost.com A zero-hallucination autonomous DFIR agent for the SANS SIFT Workstation. 148 typed, audit | 0 | Claude Code, Codex, OpenCode | 2 | 8,884 tok |
| hickeroar/outlook-mcp MCP server for Microsoft Outlook — search, send, and manage mail and calendar with browser | 0 | Codex, OpenCode | 1 | 1,237 tok |
| hickeroar/msteams-mcp MCP server for Microsoft Teams — search, message, and manage chats with browser-session au | 0 | Codex, OpenCode | 1 | 6,925 tok |
| 757607106/gjp-print-mcp | 0 | Codex, OpenCode | 1 | 1,260 tok |
| berntpopp/clingen-link genefoundry.org MCP server for ClinGen (Clinical Genome Resource): gene–disease validity, dosage sensitivi | 0 | Claude Code, Codex, OpenCode | 10 | 3,053 tok |
| berntpopp/gencc-link genefoundry.org MCP server for GenCC (Gene Curation Coalition): harmonized gene–disease validity classific | 0 | Claude Code, Codex, OpenCode | 11 | 1,240 tok |