1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| ProductionMasterAI/production-master Thin-client plugin for the Production Master hosted service — trigger, stream, and review | 1 | Claude Code, Codex, OpenCode | 2 | 505 tok |
| aikadimsoy/kasa-mcp KASA MCP — a permission-brokered MCP server for agent memory. Local-first, encrypted at th | 1 | Claude Code, Codex, OpenCode | 3 | 1,870 tok |
| haisamar/agentguard agentguard-eight.vercel.app Identity security for AI agents using Auth0, OAuth, MCP, contextual policy | 1 | Claude Code, Codex, OpenCode | 2 | 159 tok |
| partymola/withings-mcp modelcontextprotocol.io MCP server for the Withings Health API with OAuth, local cache, and trend analysis | 1 | Claude Code, Codex, OpenCode | 2 | 4,946 tok |
| nilhemdot/bountystrike-community BountyStrike Community Edition — Claude Code-native autonomous bug bounty platform (AGPLv3 | 1 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Windsurf | 24 | 6,009 tok |
| AgentTanuki/agent-guild agent-guild-5d5r.onrender.com The trust + settlement layer for AI agents — discover, vet, pay, and build portable reputa | 0 | Codex, Gemini CLI, OpenCode | 2 | 2,238 tok |
| twzrd-sol/twzrd-trust TWZRD buyer-side x402 trust packages: x402 trust gate, elizaOS trust plugin, and the agent | 0 | Claude Code, Codex, OpenCode | 8 | 1,403 tok |
| TheNickSanchez/passkey-mcp Cross-platform secrets manager for AI coding assistants — stores secrets in system keychai | 0 | Claude Code, Codex, Cursor, OpenCode | 6 | 1,231 tok |
| ayhammouda/obd-mcp-server Safety-first, read-only MCP server for vehicle diagnostics with simulator-first OBD-II, EL | 0 | Codex, OpenCode | 1 | 489 tok |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| pizzacrustreviewer/workspace-admin-mcp Custom GWS MCP Server | 0 | Claude Code, Codex, OpenCode | 2 | 768 tok |
| frli4797/crowdsec-mcp CrowdSec-focused MCP server for safe, auditable security operations. | 0 | Codex, OpenCode | 1 | 945 tok |
| kappa9999/white-hat-agent Model-neutral cyber knowledge, orchestration, discovery, and MCP application layer for AI | 0 | Codex, OpenCode | 1 | 298 tok |
| whoismemas/burpsuite-for-ai-agent Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send find | 0 | Codex, OpenCode | 1 | 867 tok |
| saagpatel/shadow-mcp Discover and risk-grade the MCP servers present on this machine (local-first OWASP MCP09 s | 0 | Claude Code, Codex, OpenCode | 2 | 360 tok |
| lightbringer-patents/claude-plugin Lightbringer Plugin for Claude | 0 | Codex, OpenCode | 1 | 299 tok |
| lightbringer-patents/mcp-connector Details about the Lightbringer MCP Connector | 0 | Claude Code, Codex, OpenCode | 2 | 586 tok |
| scanmalware/mcp-server MCP server for the ScanMalware.com API | 0 | Codex, OpenCode | 1 | 1,708 tok |
| palisadeemail/palisade-mcp palisade.email Local stdio bridge to the Palisade MCP server (SPF, DKIM, DMARC, MTA-STS, BIMI). | 0 | Codex, OpenCode | 1 | 755 tok |
| BackBond/agent-scan backbond.ai Vet MCP and AI-agent tools before attachment. Local, deterministic static scanning with no | 0 | Codex, OpenCode | 1 | 825 tok |
| DrBaher/sign-cli cli.drbaher.com Agent-first e-signature CLI. Fully-offline PAdES signer (PKCS#7) — no signup — or hosted p | 0 | Codex, OpenCode | 1 | 1,179 tok |
| Misterio070/scanpay repository-nil-camcorder-divx.trycloudflare.com Deterministic code security scanner with x402 v2 micropayments. Scans Python and JS/TS for | 0 | Codex, OpenCode | 1 | 739 tok |
| antonillos/safeselect antonillos.github.io Read-only PostgreSQL & MongoDB access for coding agents. Local, fail-closed MCP enforcemen | 0 | Codex, OpenCode | 1 | 723 tok |
| chrischall/myhotlunchbox-mcp MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments for a paren | 0 | Claude Code, Codex, OpenCode | 2 | 1,894 tok |
| cristianmoroaica/bountyverdict cristianmoroaica.github.io Seven x402 decision APIs and installable agent skills for GitHub bounties, CI, skill secur | 0 | Codex, OpenCode | 1 | 324 tok |
| davidmosiah/delx-agent-utilities ontology.delx.ai Open-source stateless utility tools for AI agents: URL, DNS, TLS, OpenAPI, x402, JWT, CSV/ | 0 | Codex, OpenCode | 1 | 248 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| laser54/telegram-managed-bot-factory Secure self-hosted MCP control plane for owner-confirmed Telegram bot provisioning. | 0 | Codex, OpenCode | 1 | 373 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,364 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 5,122 tok |
| pduggusa/dredd-mcp analytics.dugganusa.com Dredd: pre-flight verdict on MCP servers and their dependency trees. Blocks known-compromi | 0 | Claude Code, Codex, OpenCode | 2 | 1,113 tok |
| professor2k8/agent-security-lens npmjs.com Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or | 0 | Codex, OpenCode | 1 | 489 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| saagpatel/mcp-trust mcp-trust-synthetic-preview-git-202.vercel.app Neutral trust registry for MCP servers — check before you connect | 0 | Claude Code, Codex, OpenCode | 2 | 1,237 tok |
| sugukurukabe/koko-call-mcp mcp.bid-jp.com 17 AI tools for Japanese government procurement bids via MCP. Streamable HTTP + OAuth 2.0. | 0 | Codex, OpenCode | 1 | 295 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,103 tok |
| COSTRINITY/vitna-compliance-mcp vitna.costrinity.xyz A containment layer for AI agents that go rogue. Guard mode wraps any stdio MCP server: ca | 0 | Codex, OpenCode | 1 | 716 tok |
| Scottpedia0/access One Bearer token, all your services. Self-hosted credential store + API proxy + MCP server | 0 | Codex, OpenCode | 1 | 1,144 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| zerubroberts/safetyculture-mcp-server | 0 | Codex, OpenCode | 1 | 325 tok |
| Starlight143/mcp-server-stage0-authorization signalpulse.org MCP server demonstrating server-side authorization with Stage0 runtime policy validation | 0 | Codex, OpenCode | 1 | 902 tok |
| robcsaszar/sentinel A static security audit skill for Claude Code: OWASP-style findings with file:line evidenc | 0 | Codex, OpenCode | 1 | 586 tok |
| robcsaszar/tend Local, on-demand maintenance skills for SvelteKit + TypeScript repos: security, performanc | 0 | Codex, OpenCode | 1 | 1,518 tok |
| danimoya/sprinter Gated work-backlog tracker with priority scoring, a filter/sort UI, and a built-in MCP ser | 0 | Codex, OpenCode | 1 | 426 tok |
| berntpopp/uniprot-link genefoundry.org MCP server for UniProt: protein function, sequence, features and cross-references over the | 0 | Claude Code, Codex, OpenCode | 10 | 1,432 tok |