1,172 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| echoomegaprime/echo-credential-broker Echo Vault credential broker MCP — agents may USE credentials, never READ them. Install fo | 0 | Claude Code, Codex, OpenCode | 2 | 4,960 tok |
| kalala252/asm-mcp-server MCP server for evidence-backed passive attack-surface research | 0 | Codex, OpenCode | 1 | 113 tok |
| bebebebebebebebebebebebebebebe/mcp-examples | 0 | Claude Code, Codex, OpenCode | 8 | 673 tok |
| Toligrim/Letopis-mcp Летопись (Letopis) engine + thin MCP server on top — Telegram chat archive & smart search | 0 | Claude Code, Codex, OpenCode | 2 | 2,201 tok |
| yazkyChristianNicolas/personal-finance-mcp-server MCP server remoto para personal-finance-service (Keycloak OAuth 2.0 + PKCE / Client Creden | 0 | Codex, OpenCode | 1 | 2,331 tok |
| MithrynMarious/agent-keyring Agent Keyring — sovereign secrets infrastructure for AI agents. MCP server with dual-backe | 0 | Codex, OpenCode | 1 | 2,212 tok |
| KevinTrinhDev/gaze It sees the page, and it acts. Drive a real, already logged-in browser from the CLI or ove | 0 | Codex, OpenCode | 1 | 1,394 tok |
| coilyco-flight-deck/bluesky-mcp Authenticated read-only Bluesky MCP with a fixed, bounded AT Protocol tool surface. | 0 | Claude Code, Codex, OpenCode | 3 | 650 tok |
| Bristlecone2026/bristlecone-logic bristleconelogic.com Stateless HTTP 402 micropayment gateway and pre-socket runtime defense engine for autonomo | 0 | Codex, OpenCode | 1 | 271 tok |
| UnbearableDev/docker-compose-audit apify.com MCP server that audits docker-compose.yml for security misconfigurations. 25 checks across | 0 | Claude Code, Codex, OpenCode | 2 | 6,202 tok |
| UnbearableDev/dockerfile-audit apify.com Hadolint-grade Dockerfile audit as an MCP server. 18 checks across 5 categories with line | 0 | Claude Code, Codex, OpenCode | 2 | 6,202 tok |
| UnbearableDev/github-actions-audit apify.com MCP server auditing .github/workflows/*.yml for supply-chain risks: script injection, leak | 0 | Claude Code, Codex, OpenCode | 2 | 6,202 tok |
| UnbearableDev/k8s-manifest-audit apify.com MCP server: static security audit of Kubernetes manifests via kube-linter. 63 checks acros | 0 | Claude Code, Codex, OpenCode | 2 | 6,202 tok |
| jyswee/authshore authshore.ai Auth infrastructure for coding agents: user pools, secrets vault, token management, as eas | 0 | Codex, OpenCode | 1 | 561 tok |
| jrmatherly/mcp-context-forge | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 6 | 4,859 tok |
| actions-marketplace-validations/alitiknazoglu_mcprobe | 0 | Claude Code, Codex | 1 | — |
| linsipeng/agentkeychain Zero-knowledge credential store for AI agents — Agent Identity + scoped delegation, built | 0 | Codex, OpenCode | 1 | 1,150 tok |
| Aptica-Solutions/a-mcp-runmeter Archived 2026-09-25. Canonical code: Aptica-Solutions/a-mcp-servers, servers/runmeter. | 0 | Claude Code, Codex, OpenCode | 4 | 4,705 tok |
| wirenboard/google-workspace-mcp Remote multi-user (OAuth 2.1) deployment of the Google Workspace MCP server | 0 | Codex, OpenCode | 1 | 661 tok |
| Evyatar108/gmail-mcp A local Windows Gmail MCP server for GitHub Copilot CLI with safe OAuth, draft-first sendi | 0 | Codex, GitHub Copilot, OpenCode | 2 | 802 tok |
| Axcient/public-gateway-mcp An MCP for ax-public-gateway | 0 | Claude Code, Codex, Cursor, OpenCode | 2 | 970 tok |
| flnzba/flnzba.github.io fzeba.com Personal Webpage FZEBA.COM (Florian Zeba) | 0 | Claude Code, Codex, OpenCode | 5 | 884 tok |