1,037 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,450Claude Code6,586Data and AI3,698Backend and APIs3,488Languages3,402Planning3,191Git and workflow3,129Code review2,728Memory and context2,353Testing2,330DevOps and cloud2,293Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| cristianmoroaica/bountyverdict cristianmoroaica.github.io Seven x402 decision APIs and installable agent skills for GitHub bounties, CI, skill secur | 0 | Codex, OpenCode | 1 | 324 tok |
| davidmosiah/delx-agent-utilities ontology.delx.ai Open-source stateless utility tools for AI agents: URL, DNS, TLS, OpenAPI, x402, JWT, CSV/ | 0 | Codex, OpenCode | 1 | 248 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| laser54/telegram-managed-bot-factory Secure self-hosted MCP control plane for owner-confirmed Telegram bot provisioning. | 0 | Codex, OpenCode | 1 | 373 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,064 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 3,556 tok |
| professor2k8/agent-security-lens npmjs.com Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or | 0 | Codex, OpenCode | 1 | 489 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| saagpatel/mcp-trust mcp-trust-synthetic-preview-git-202.vercel.app Neutral trust registry for MCP servers — check before you connect | 0 | Codex, OpenCode | 1 | 1,505 tok |
| sugukurukabe/koko-call-mcp mcp.bid-jp.com 17 AI tools for Japanese government procurement bids via MCP. Streamable HTTP + OAuth 2.0. | 0 | Codex, OpenCode | 1 | 295 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,085 tok |
| COSTRINITY/vitna-compliance-mcp vitna.costrinity.xyz Pre-flight compliance checks for AI agents with Ed25519-signed, offline-verifiable evidenc | 0 | Codex, OpenCode | 1 | 559 tok |
| Scottpedia0/access One Bearer token, all your services. Self-hosted credential store + API proxy + MCP server | 0 | Codex, OpenCode | 1 | 1,144 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Starlight143/mcp-server-stage0-authorization signalpulse.org MCP server demonstrating server-side authorization with Stage0 runtime policy validation | 0 | Codex, OpenCode | 1 | 902 tok |
| robcsaszar/sentinel A static security audit skill for Claude Code: OWASP-style findings with file:line evidenc | 0 | Claude Code, Codex, OpenCode | 1 | 586 tok |
| robcsaszar/tend Local, on-demand maintenance skills for SvelteKit + TypeScript repos: security, performanc | 0 | Claude Code, Codex, OpenCode | 1 | 1,518 tok |
| berntpopp/uniprot-link genefoundry.org MCP server for UniProt: protein function, sequence, features and cross-references over the | 0 | Claude Code, Codex, OpenCode | 10 | 1,401 tok |
| yeison-liscano/demo_http_mcp Project demo of http_mcp package | 0 | Claude Code, Codex, OpenCode | 5 | 1,086 tok |
| berntpopp/metadome-link genefoundry.org MCP server for MetaDome: per-position missense tolerance (dN/dS) landscapes for human tran | 0 | Claude Code, Codex, OpenCode | 10 | 4,086 tok |
| bowbozaa/api-weaver API Weaver - MCP Architecture Monorepo with Gateway, Content MCP, and Integration MCP | 0 | Claude Code, Codex | 3 | — |
| unstrike/attackforge-mcp An unoffical AttackForge MCP server that covers the full SSAPI and adds a layer of context | 0 | Claude Code, Codex, OpenCode | 2 | 810 tok |
| dot-do/mcp | 0 | Claude Code, Codex, OpenCode | 2 | 2,189 tok |
| sarveshkapre/cve-risk-mcp | 0 | Codex, OpenCode | 1 | 49 tok |
| cmillstead/basalt-mcp | 0 | Claude Code, Codex, OpenCode | 2 | 2,380 tok |
| oreneHack/okta_mcp | 0 | Claude Code, Codex, OpenCode | 2 | 574 tok |
| wojtekkura/purple-mcp Purple AI MCP Server - Access SentinelOne Services with any MCP client | 0 | Claude Code, Codex, OpenCode | 2 | 4,656 tok |
| bitbankinc/bitbank-mcp-server MCPserver for bitbank | 0 | Claude Code, Codex, Cursor, OpenCode | 7 | 720 tok |
| filhocf/sonarqube-mcp-py | 0 | Codex, OpenCode | 1 | 428 tok |
| cybrium-ai/mcp-server MCP server for Cybrium security tools — SAST, secrets, IaC, K8s, supply-chain. Works with | 0 | Codex, OpenCode | 1 | 582 tok |
| scorellis/secretsminter Value-blind secrets-minter that stands up self-maintaining secret rotation, exposed to AI | 0 | Codex, OpenCode | 1 | 1,169 tok |
| openjkai/secscan_mcp | 0 | Codex, OpenCode | 1 | 318 tok |
| lukleh/mcp-sonarcloud MCP server for SonarCloud | 0 | Codex, OpenCode | 1 | 575 tok |
| exploitintel/eip-mcp exploit-intel.com Official MCP server for the Exploit Intelligence Platform | 0 | Codex, OpenCode | 1 | 3,256 tok |
| Jandybottleshaped403/actionproxy Deploy deterministic approval gates for AI agent tool calls with auditable, policy-based c | 0 | Codex, OpenCode | 1 | 1,898 tok |
| fastmcp-me/ggmcp gitguardian.com MCP server for scanning and remediating hardcoded secrets using GitGuardian’s API. Detect | 0 | Codex, OpenCode | 1 | 1,135 tok |
| ahammadshawki8/DeepSIFT findevil.devpost.com A zero-hallucination autonomous DFIR agent for the SANS SIFT Workstation. 148 typed, audit | 0 | Claude Code, Codex, OpenCode | 2 | 8,884 tok |
| hickeroar/outlook-mcp MCP server for Microsoft Outlook — search, send, and manage mail and calendar with browser | 0 | Codex, OpenCode | 1 | 1,237 tok |
| hickeroar/msteams-mcp MCP server for Microsoft Teams — search, message, and manage chats with browser-session au | 0 | Codex, OpenCode | 1 | 6,925 tok |
| 757607106/gjp-print-mcp | 0 | Codex, OpenCode | 1 | 1,260 tok |
| berntpopp/clingen-link genefoundry.org MCP server for ClinGen (Clinical Genome Resource): gene–disease validity, dosage sensitivi | 0 | Claude Code, Codex, OpenCode | 10 | 3,053 tok |
| berntpopp/gencc-link genefoundry.org MCP server for GenCC (Gene Curation Coalition): harmonized gene–disease validity classific | 0 | Claude Code, Codex, OpenCode | 11 | 1,240 tok |
| dotlab-hq/vector-store-mcp Openai vector store mcp. Base Url can be easily chnged | 0 | Claude Code, Codex | 7 | — |
| lukleh/mcp-read-only-sql Secure MCP server providing read-only SQL access to PostgreSQL and ClickHouse databases | 0 | Codex, OpenCode | 1 | 767 tok |
| berntpopp/hgnc-link genefoundry.org MCP server for HGNC (HUGO Gene Nomenclature Committee, genenames.org): gene symbol and ID | 0 | Claude Code, Codex, OpenCode | 10 | 2,113 tok |
| jmpijll/site24x7-code-mode-mcp Code-mode MCP server for Zoho Site24x7. Two tools (search + execute) with QuickJS WASM san | 0 | Codex, OpenCode | 1 | 3,373 tok |
| shiwani42/Mike A Splunk-native agent that turns SOC analyst reasoning into a queryable institutional know | 0 | Codex, OpenCode | 1 | 5,655 tok |
| klappy/bee-ai-auth-mcp Self-host-first, OAuth-secured MCP server that brings your Bee AI pendant’s conversations | 0 | Claude Code, Codex, OpenCode | 2 | 784 tok |