1,117 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| nugehs/bouncer nugehs.github.io bouncer — static compliance-controls checker (UK Online Safety Act & ICO Children's Code) | 1 | Codex, OpenCode | 1 | 346 tok |
| windborne/zulipmcp windbornesystems.com Run AI agents in Zulip as @mentionable bots — or wire into any MCP client. | 1 | Claude Code, Codex, OpenCode | 2 | 1,511 tok |
| exploitintel/eip-mcp exploit-intel.com Official MCP server for the Exploit Intelligence Platform | 1 | Claude Code, Codex, OpenCode | 2 | 3,409 tok |
| hickeroar/msteams-mcp MCP server for Microsoft Teams — search, message, and manage chats with browser-session au | 1 | Codex, OpenCode | 1 | 6,925 tok |
| redcool/SimpleMCPServer mcp server nodejs version | 1 | Codex, OpenCode | 1 | 1,752 tok |
| ProductionMasterAI/production-master Thin-client plugin for the Production Master hosted service — trigger, stream, and review | 1 | Claude Code, Codex, OpenCode | 2 | 505 tok |
| aikadimsoy/kasa-mcp KASA MCP — a permission-brokered MCP server for agent memory. Local-first, encrypted at th | 1 | Claude Code, Codex, OpenCode | 3 | 1,870 tok |
| haisamar/agentguard agentguard-eight.vercel.app Identity security for AI agents using Auth0, OAuth, MCP, contextual policy | 1 | Claude Code, Codex, OpenCode | 2 | 159 tok |
| partymola/withings-mcp modelcontextprotocol.io MCP server for the Withings Health API with OAuth, local cache, and trend analysis | 1 | Claude Code, Codex, OpenCode | 2 | 4,946 tok |
| nilhemdot/bountystrike-community BountyStrike Community Edition — Claude Code-native autonomous bug bounty platform (AGPLv3 | 1 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Windsurf | 24 | 6,009 tok |
| AgentTanuki/agent-guild agent-guild-5d5r.onrender.com The trust + settlement layer for AI agents — discover, vet, pay, and build portable reputa | 0 | Codex, Gemini CLI, OpenCode | 2 | 2,238 tok |
| twzrd-sol/twzrd-trust TWZRD buyer-side x402 trust packages: x402 trust gate, elizaOS trust plugin, and the agent | 0 | Claude Code, Codex, OpenCode | 8 | 1,403 tok |
| TheNickSanchez/passkey-mcp Cross-platform secrets manager for AI coding assistants — stores secrets in system keychai | 0 | Claude Code, Codex, Cursor, OpenCode | 6 | 1,231 tok |
| ayhammouda/obd-mcp-server Safety-first, read-only MCP server for vehicle diagnostics with simulator-first OBD-II, EL | 0 | Codex, OpenCode | 1 | 489 tok |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| pizzacrustreviewer/workspace-admin-mcp Custom GWS MCP Server | 0 | Claude Code, Codex, OpenCode | 2 | 768 tok |
| frli4797/crowdsec-mcp CrowdSec-focused MCP server for safe, auditable security operations. | 0 | Codex, OpenCode | 1 | 945 tok |
| kappa9999/white-hat-agent Model-neutral cyber knowledge, orchestration, discovery, and MCP application layer for AI | 0 | Codex, OpenCode | 1 | 298 tok |
| whoismemas/burpsuite-for-ai-agent Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send find | 0 | Codex, OpenCode | 1 | 867 tok |
| saagpatel/shadow-mcp Discover and risk-grade the MCP servers present on this machine (local-first OWASP MCP09 s | 0 | Claude Code, Codex, OpenCode | 2 | 360 tok |
| lightbringer-patents/claude-plugin Lightbringer Plugin for Claude | 0 | Codex, OpenCode | 1 | 299 tok |
| lightbringer-patents/mcp-connector Details about the Lightbringer MCP Connector | 0 | Claude Code, Codex, OpenCode | 2 | 586 tok |
| scanmalware/mcp-server MCP server for the ScanMalware.com API | 0 | Codex, OpenCode | 1 | 1,708 tok |
| palisadeemail/palisade-mcp palisade.email Local stdio bridge to the Palisade MCP server (SPF, DKIM, DMARC, MTA-STS, BIMI). | 0 | Codex, OpenCode | 1 | 755 tok |
| BackBond/agent-scan backbond.ai Vet MCP and AI-agent tools before attachment. Local, deterministic static scanning with no | 0 | Codex, OpenCode | 1 | 825 tok |
| DrBaher/sign-cli cli.drbaher.com Agent-first e-signature CLI. Fully-offline PAdES signer (PKCS#7) — no signup — or hosted p | 0 | Codex, OpenCode | 1 | 1,179 tok |
| Misterio070/scanpay repository-nil-camcorder-divx.trycloudflare.com Deterministic code security scanner with x402 v2 micropayments. Scans Python and JS/TS for | 0 | Codex, OpenCode | 1 | 739 tok |
| antonillos/safeselect antonillos.github.io Read-only PostgreSQL & MongoDB access for coding agents. Local, fail-closed MCP enforcemen | 0 | Codex, OpenCode | 1 | 723 tok |
| chrischall/myhotlunchbox-mcp MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments for a paren | 0 | Claude Code, Codex, OpenCode | 2 | 1,894 tok |
| cristianmoroaica/bountyverdict cristianmoroaica.github.io Seven x402 decision APIs and installable agent skills for GitHub bounties, CI, skill secur | 0 | Codex, OpenCode | 1 | 324 tok |
| davidmosiah/delx-agent-utilities ontology.delx.ai Open-source stateless utility tools for AI agents: URL, DNS, TLS, OpenAPI, x402, JWT, CSV/ | 0 | Codex, OpenCode | 1 | 248 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| laser54/telegram-managed-bot-factory Secure self-hosted MCP control plane for owner-confirmed Telegram bot provisioning. | 0 | Codex, OpenCode | 1 | 373 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,364 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 5,122 tok |
| pduggusa/dredd-mcp analytics.dugganusa.com Dredd: pre-flight verdict on MCP servers and their dependency trees. Blocks known-compromi | 0 | Claude Code, Codex, OpenCode | 2 | 1,113 tok |
| professor2k8/agent-security-lens npmjs.com Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or | 0 | Codex, OpenCode | 1 | 489 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| saagpatel/mcp-trust mcp-trust-synthetic-preview-git-202.vercel.app Neutral trust registry for MCP servers — check before you connect | 0 | Claude Code, Codex, OpenCode | 2 | 1,237 tok |
| sugukurukabe/koko-call-mcp mcp.bid-jp.com 17 AI tools for Japanese government procurement bids via MCP. Streamable HTTP + OAuth 2.0. | 0 | Codex, OpenCode | 1 | 295 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,103 tok |
| COSTRINITY/vitna-compliance-mcp vitna.costrinity.xyz A containment layer for AI agents that go rogue. Guard mode wraps any stdio MCP server: ca | 0 | Codex, OpenCode | 1 | 716 tok |
| Scottpedia0/access One Bearer token, all your services. Self-hosted credential store + API proxy + MCP server | 0 | Codex, OpenCode | 1 | 1,144 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| zerubroberts/safetyculture-mcp-server | 0 | Codex, OpenCode | 1 | 325 tok |