1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| psam-717/psamvault-mcp | 2 | Claude Code, Codex, OpenCode | 2 | 5,129 tok |
| borysttk/auth-vault-template 🧩 Template auth-vault — MCP credential management server, clean version to fork and adapt | 2 | Codex, OpenCode | 1 | 3,420 tok |
| Wenri/siyuan-mcp OAuth authentication proxy for MCP servers using Cloudflare Access | 2 | Codex, OpenCode | 1 | 6,918 tok |
| velias/mcp-client-credentials-auth A local stdio MCP server that authenticates to remote OAuth-protected MCP servers using th | 2 | Codex, OpenCode | 1 | 5,079 tok |
| SarutobiSasuke8/obsidian-github-mcp Permissioned MCP gateway for AI agent proposals to Obsidian vaults stored on GitHub | 2 | Codex, OpenCode | 1 | 160 tok |
| Huleinpylo/kali-agents-mcp | 2 | Claude Code, Codex, OpenCode | 9 | 3,290 tok |
| thomaschristory/catalyst-sdwan-super-mcp thomaschristory.github.io FastMCP server for Cisco Catalyst SD-WAN Manager (vManage), driven by the official OpenAPI | 2 | Claude Code, Codex, OpenCode | 2 | 7,183 tok |
| boecht/birre BiRRe (Bitsight Rating Retriever) MCP server provides access to BitSight security rating d | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 3,670 tok |
| aself101/mcp-secure-server A universal security-by-default framework for Model Context Protocol (MCP) servers that pr | 2 | Claude Code, Codex, OpenCode | 2 | 1,858 tok |
| orieg/gws-connector orieg.github.io Multi-account Google Workspace MCP server — Gmail, Calendar, and Drive with smart routing. | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 1,312 tok |
| davidmosiah/delx-memory npmjs.com Local-first persistent memory layer for AI agents. SQLite-backed, MCP-compatible, cross-ag | 2 | Codex, OpenCode | 1 | 416 tok |
| linxule/durable-thinking Persistent Sequential Thinking MCP server on Cloudflare Workers + Durable Objects — though | 2 | Claude Code, Codex, OpenCode | 2 | 892 tok |
| stevologic/security-recipes.ai security-recipes.ai Turn security findings into bounded agent work: one recipe, scoped context, required proof | 2 | Codex, GitHub Copilot, OpenCode | 5 | 758 tok |
| srinivasan-sundaresan95/orihime smithery.ai Cross-repo code knowledge graph for Java/Kotlin/JS/TS — MCP server, taint analysis, call g | 2 | Claude Code, Codex, OpenCode | 3 | 1,402 tok |
| Firmislabs/firmis-scanner firmislabs.com AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Server | 2 | Claude Code, Codex, OpenCode | 2 | 3,779 tok |
| Reedtrullz/codex-antigravity-auth pypi.org Released local Responses API gateway bringing Google Antigravity Claude Opus/Sonnet, Gemin | 2 | Codex, OpenCode | 1 | 1,193 tok |
| Nick2bad4u/SonarCloud-Skill npmjs.com AI skill for managing findings on SonarCloud / SonarQube | 2 | Codex, OpenCode | 1 | 435 tok |
| JKasteele/ai-act-companion huggingface.co Local-first, explainable EU AI Act risk classifier with risk-assessment/DPIA/bias/AI-secur | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 546 tok |
| piyushptiwari1/mcpkernel pypi.org The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint trackin | 2 | Claude Code, Codex, GitHub Copilot | 8 | 2,161 tok |
| rmednitzer/relay-shell rmednitzer.github.io Model Context Protocol server for full shell and SSH fleet operation, with audit, tiered a | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 3,254 tok |
| Raed2180416/holt raed2180416.github.io See what coding agents changed across Git worktrees. Inspect duplicates, collisions and de | 2 | Claude Code, Codex, OpenCode | 5 | 1,120 tok |
| SinoEdwards/mail-agent-mcp Local-first email MCP server for Gmail and QQ Mail with secure OAuth, IMAP search/read, at | 2 | Claude Code, Codex, OpenCode | 2 | 967 tok |
| cyanheads/osv-advisory-mcp-server npmjs.com Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full ad | 2 | Claude Code, Codex, OpenCode | 2 | 14,050 tok |
| cyanheads/attack-surface-mcp-server npmjs.com Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS | 2 | Claude Code, Codex, OpenCode | 2 | 16,676 tok |
| Melvynx/lumail-skills lumail.io Lumail agent skills, MCP plugins, and setup docs for AI-native email marketing | 2 | Codex, OpenCode | 1 | 263 tok |
| oaslananka/infra-lens-mcp Baseline-aware MCP tooling for Linux incident diagnosis over SSH: capture bounded live met | 2 | Claude Code, Codex, OpenCode | 4 | 482 tok |
| oaslananka/ssh-mcp-pro npmjs.com Secure MCP server for SSH automation with guarded remote commands, host allowlists, strict | 2 | Claude Code, Codex, OpenCode | 4 | 1,363 tok |
| bchoor/bws-mcp Remote MCP for Bitwarden Secrets Manager on Cloudflare Workers (list, get, put, delete) | 2 | Codex, OpenCode | 1 | 817 tok |
| cormac-rynne/hikvision-mcp | 2 | Codex, OpenCode | 1 | 1,019 tok |
| dalmaktube-creator/DV-Moory Self-hosted, security-hardened MCP server connecting Notion AI to approved Git repositorie | 2 | Codex, OpenCode | 1 | 131 tok |
| astafford8488/agentaegis-mcp MCP server for cybersecurity operations — compliance, vuln scans, code security, threat in | 1 | Codex, OpenCode | 1 | 2,212 tok |
| felipegcoutinho/openmonetis openmonetis.com Controle financeiro self-hosted com captura automática de notificações bancárias. Lançamen | 1 | Codex, OpenCode | 1 | 4,004 tok |
| rahmanef63/connectors One MCP server, several ways to register and ship it. A guide repo an AI agent reads befor | 1 | Claude Code, Codex, OpenCode | 2 | 2,602 tok |
| oyusypenko/rob-mcp MCP server + x402-paid API for Robinhood Chain tokenized stocks — agent-callable premium/d | 1 | Claude Code, Codex, OpenCode | 12 | 6,813 tok |
| Johnny-Z13/proofslip proofslip.ai Ephemeral verification for agent workflows. 24-hour receipts your agents check before they | 1 | Claude Code, Codex | 4 | 1,608 tok |
| dinglebear-ai/soma soma.dinglebear.ai Batteries-included RMCP runtime and scaffold for shipping Rust MCP servers with CLI/REST/H | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 4 | 6,471 tok |
| Roop-World/LegalSearch Agent kit and MCP Registry metadata for Roop LegalSearch, a public Indian legal search MCP | 1 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 303 tok |
| ANAMIZED/OpenMesha OpenMesha is one of the most ambitious and intellectually open-source full-spectrum “Auton | 1 | Codex, OpenCode | 1 | 603 tok |
| GuillaumeLessard/qector-claude-plugin qector.store QECTOR Quantum Error Correction: High-performance, mathematically verified local QEC engin | 1 | Claude Code, Codex, OpenCode | 2 | 1,878 tok |
| MrWizardlyLoaf/rugcheck-ai web-production-58d585.up.railway.app On-chain token-safety MCP for Solana AI trading agents — rug check, honeypot detection & a | 1 | Codex, OpenCode | 1 | 511 tok |
| desper/quick-html-sharing qhs.fyi Indie SaaS for vibe coders to instantly share AI-generated HTML pages — unguessable URLs + | 1 | Claude Code, Codex, OpenCode | 2 | 3,608 tok |
| fantasyce/agent-runtime-proof fantasyce.github.io Local, read-only proof that a live Agent or MCP runtime matches an approved artifact. | 1 | Codex, OpenCode | 1 | 380 tok |
| mordiaky/vouchspec vouchspec.plyrium.com Agent-only x402 service for signed exact-commit evidence on public Agent Skills | 1 | Codex, OpenCode | 1 | 169 tok |
| nolindnaidoo/secrets-le letools.dev Find hardcoded credentials in a codebase, and never print one into the report | 1 | Claude Code, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf | 6 | 10,095 tok |
| pedroknigge/arkgate npmjs.com If the AI writes an illegal import, the write is rejected. The same check fails the pull r | 1 | Claude Code, Codex, OpenCode | 4 | 8,886 tok |
| stunt-double/stuntdouble-mcp stuntdouble.io MCP and plugins for Stunt Double | 1 | Claude Code, Codex, OpenCode | 3 | 208 tok |
| wei9072/aegis | 1 | Codex, OpenCode | 1 | 2,698 tok |
| bajor/gmail-mcp-send-to-list-only send to list only gmail MCP for VPS | 1 | Codex, OpenCode | 1 | 130 tok |
| Synthrun/Cicada cicada-skill.vercel.app Cicada — Security Audit & Fix Skill for LLM coding agents (16 domains, cross-framework) | 1 | Codex, OpenCode | 1 | 210 tok |
| kefapps/onepassword-mcp-codex Standalone MCP server for 1Password desktop app integrations with opaque-by-default secret | 1 | Codex, OpenCode | 1 | 1,012 tok |