1,486 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,473Claude Code6,589Data and AI3,693Backend and APIs3,491Languages3,403Planning3,201Git and workflow3,131Code review2,731Memory and context2,354Testing2,335DevOps and cloud2,298Research2,288
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| aikadimsoy/kasa-mcp KASA MCP — a permission-brokered MCP server for agent memory. Local-first, encrypted at th | 1 | Claude Code, Codex, OpenCode | 3 | 1,870 tok |
| danielbaldwin47/resolve-mcp | 1 | Claude Code | 4 | 4,555 tok |
| CoreframeLabs/mcp-auth-template | 0 | Claude Code | 1 | 972 tok |
| NexgenSystemsMX/scopegate Ephemeral credentials & persistent MCP connections for coding agents — the agent never hol | 0 | Claude Code, Codex, OpenCode | 2 | 3,678 tok |
| ck3938700-ship-it/anjian-agent Local-first, authorization-gated web security assessment agent with MCP, Claude Code, loca | 0 | Claude Code | 1 | 1,058 tok |
| Greta221/cf-mcp-traffic A local stdio MCP server that exposes Cloudflare HTTP traffic and firewall analytics to Cl | 0 | Claude Code | 1 | — |
| nori1173-ops/timetracker-rx-mcp An unofficial MCP server for operating the TimeTracker RX REST API from AI tools such as C | 0 | Claude Code | 5 | — |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| Azzaraell/pgguard-mcp npmjs.com Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and | 0 | Claude Code | 5 | — |
| runvouch/runvouch runvouch.com Dead man's switch, cost cap and outcome check for unattended AI agents (Claude Code, OpenC | 0 | Claude Code | 1 | 1,847 tok |
| jasonpalmer1/wafergraph-mcp wafergraph.com Read-only remote MCP server for wafergraph.com's semiconductor and AI supply-chain dataset | 0 | Claude Code | 1 | 2,406 tok |
| Bigred97/ato-mcp pypi.org Query the Australian Taxation Office in plain English from Claude or any MCP client. Perso | 0 | Claude Code | 4 | 1,785 tok |
| Atharva-Jayappa/blast-scope A consequence engine for shell commands | 0 | Claude Code | 1 | 2,075 tok |
| CallMarcus/security-scorecard-mcp Talk to the SecurityScorecard API in natural language from Claude and other MCP clients. C | 0 | Claude Code | 1 | 2,275 tok |
| Nano-Nimbus/locus | 0 | Claude Code, GitHub Copilot | 7 | 2,120 tok |
| Edu963/ocultar An enterprise-grade Zero-Egress AI Gateway and PII Redaction Engine. Securely sanitizes se | 0 | Claude Code | 3 | 2,935 tok |
| bch1212/agentvault agentvault-api-production.up.railway.app AI-native credential vault for autonomous agents — Fernet-encrypted API keys, per-agent av | 0 | Claude Code | 1 | 885 tok |
| brnbtech770/blocktrust blocktrust-mvp.vercel.app | 0 | Claude Code, Cursor | 2 | 7,958 tok |
| cchurctrip/verity-mcp MCP server for Verity skills. bearer-auth proxy | 0 | Claude Code | 1 | 1,279 tok |
| civdotiq/civ.iq civdotiq.org Civic intelligence from government data, organized for public use. Open source. | 0 | Claude Code | 4 | 803 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| ertugrulakben/dep-oracle npmjs.com Predictive dependency security engine. Trust Scores for npm/Python packages. Detects zombi | 0 | Claude Code | 1 | 435 tok |
| gopalrajsuresh/covalent-bond npmjs.com Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP. Th | 0 | Claude Code | 4 | — |
| inspicere/mcp-defectdojo MCP server for DefectDojo vulnerability management | 0 | Claude Code | 1 | 825 tok |
| malkreide/bag-health-mcp MCP server for Swiss Federal Office of Public Health (BAG) — infectious disease surveillan | 0 | Claude Code | 3 | 5,630 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,064 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 3,556 tok |
| prakhargour10/utility-mcp-server For testing out mco capabilities,has three tools get time , get date , get current share p | 0 | Claude Code, GitHub Copilot | 2 | 340 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| shigechika/cloudarmor-mcp MCP server for Google Cloud Armor WAF log patrol — deny summaries, false-positive checks, | 0 | Claude Code, GitHub Copilot | 2 | 3,430 tok |
| shigechika/entraadm-mcp MCP server for Microsoft Entra ID sign-in/audit-log triage (read-only) | 0 | Claude Code, GitHub Copilot | 2 | 2,971 tok |
| shigechika/gwsadm-mcp MCP server for Google Workspace security auditing — login audit, external sharing, daily b | 0 | Claude Code, GitHub Copilot | 2 | 6,021 tok |
| shigechika/keycloak-mcp MCP server for the Keycloak Admin REST API — a strong ally for auth troubleshooting: inspe | 0 | Claude Code, GitHub Copilot | 2 | 3,010 tok |
| shigechika/zapi-mcp MCP server for the Zabbix API — daily brief, problems, hosts, items | 0 | Claude Code, GitHub Copilot | 2 | 3,814 tok |
| shuaicongxiaomai/agentguard | 0 | Claude Code | 1 | 871 tok |
| shakaran/symfony-agent-mcp Model Context Protocol server for Symfony applications — read-only introspection of routes | 0 | Claude Code | 1 | — |
| tonylchang/janus-mcp janus-mcp.ns47.com A local MCP server that gives LLMs safe, redacted access to Kubernetes - credentials never | 0 | Claude Code | 1 | 1,151 tok |
| xetenet/xete-mcp xete.net Encrypted, sovereign agent-to-agent messaging — an MCP server for xete | 0 | Claude Code | 7 | 816 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| zwitbaum/mcp-devops-on-prem zwitbaum.github.io The MCP server for Azure DevOps On-Premise (TFS), connecting your AI agents with DevOps ca | 0 | Claude Code | 1 | 1,276 tok |
| trunk-io/mcp-server trunk.io Flaky test detection, root cause analysis, and fix suggestions for development teams. | 0 | Claude Code | 1 | 1,577 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,085 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| digitalhen/bouncie-mcp MCP server for the Bouncie OBD2 vehicle tracker — gives Claude real-time access to GPS loc | 0 | Claude Code | 1 | 1,829 tok |
| r3-yamauchi/kintone-oauth-mcp-server-cfw deepwiki.com An unofficial Model Context Protocol (MCP) server for kintone that can be deployed as Clou | 0 | Claude Code | 1 | 4,139 tok |
| Groupthink-dev/tailscale-blade-mcp sidereal.cc MCP server for Tailscale network monitoring and security — 17 tools, token-efficient, SecO | 0 | Claude Code | 1 | 615 tok |