1,583 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,341Claude Code6,834Data and AI3,598Backend and APIs3,548Git and workflow3,537Languages3,456Planning3,300Code review2,870Testing2,611DevOps and cloud2,441Writing and docs2,433Memory and context2,375
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| nilhemdot/bountystrike-community BountyStrike Community Edition — Claude Code-native autonomous bug bounty platform (AGPLv3 | 1 | Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Windsurf | 24 | 6,009 tok |
| paichart/paichart AI-native service orchestration platform. Discover MCP services by capability, chain multi | 0 | Claude Code | 50 | 9,501 tok |
| twzrd-sol/twzrd-trust TWZRD buyer-side x402 trust packages: x402 trust gate, elizaOS trust plugin, and the agent | 0 | Claude Code, Codex, OpenCode | 8 | 1,403 tok |
| odere-pro/claude-oop-excellence odere-pro.github.io Claude Code plugin that enforces good object-oriented design in any language — audits for | 0 | Claude Code | 2 | 1,406 tok |
| CoreframeLabs/mcp-auth-template | 0 | Claude Code | 1 | 972 tok |
| ck3938700-ship-it/anjian-agent Local-first, authorization-gated web security assessment agent with MCP, Claude Code, loca | 0 | Claude Code | 1 | 1,058 tok |
| Greta221/cf-mcp-traffic A local stdio MCP server that exposes Cloudflare HTTP traffic and firewall analytics to Cl | 0 | Claude Code | 1 | — |
| nori1173-ops/timetracker-rx-mcp An unofficial MCP server for operating the TimeTracker RX REST API from AI tools such as C | 0 | Claude Code | 5 | — |
| TheNickSanchez/passkey-mcp Cross-platform secrets manager for AI coding assistants — stores secrets in system keychai | 0 | Claude Code, Codex, Cursor, OpenCode | 6 | 1,231 tok |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| pizzacrustreviewer/workspace-admin-mcp Custom GWS MCP Server | 0 | Claude Code, Codex, OpenCode | 2 | 768 tok |
| Azzaraell/pgguard-mcp npmjs.com Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and | 0 | Claude Code | 5 | — |
| saagpatel/shadow-mcp Discover and risk-grade the MCP servers present on this machine (local-first OWASP MCP09 s | 0 | Claude Code, Codex, OpenCode | 2 | 360 tok |
| lightbringer-patents/mcp-connector Details about the Lightbringer MCP Connector | 0 | Claude Code, Codex, OpenCode | 2 | 586 tok |
| runvouch/runvouch runvouch.com Dead man's switch, cost cap and outcome check for unattended AI agents (Claude Code, OpenC | 0 | Claude Code | 1 | 2,013 tok |
| jasonpalmer1/wafergraph-mcp wafergraph.com Read-only remote MCP server for wafergraph.com's semiconductor and AI supply-chain dataset | 0 | Claude Code | 1 | 2,406 tok |
| Atharva-Jayappa/blast-scope A consequence engine for shell commands | 0 | Claude Code | 1 | 2,075 tok |
| CallMarcus/security-scorecard-mcp Talk to the SecurityScorecard API in natural language from Claude and other MCP clients. C | 0 | Claude Code | 1 | 2,327 tok |
| Nano-Nimbus/locus | 0 | Claude Code, GitHub Copilot | 7 | 2,120 tok |
| bch1212/agentvault agentvault-api-production.up.railway.app AI-native credential vault for autonomous agents — Fernet-encrypted API keys, per-agent av | 0 | Claude Code | 1 | 885 tok |
| cchurctrip/verity-mcp MCP server for Verity skills. bearer-auth proxy | 0 | Claude Code | 1 | 1,279 tok |
| chrischall/myhotlunchbox-mcp MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments for a paren | 0 | Claude Code, Codex, OpenCode | 2 | 1,894 tok |
| civdotiq/civ.iq civdotiq.org Civic intelligence from government data, organized for public use. Open source. | 0 | Claude Code | 4 | 987 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| ertugrulakben/dep-oracle npmjs.com Predictive dependency security engine. Trust Scores for npm/Python packages. Detects zombi | 0 | Claude Code | 1 | 435 tok |
| gopalrajsuresh/covalent-bond npmjs.com Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP. Th | 0 | Claude Code | 4 | — |
| malkreide/bag-health-mcp MCP server for Swiss Federal Office of Public Health (BAG) — infectious disease surveillan | 0 | Claude Code | 3 | 4,318 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,364 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 5,122 tok |
| pduggusa/dredd-mcp analytics.dugganusa.com Dredd: pre-flight verdict on MCP servers and their dependency trees. Blocks known-compromi | 0 | Claude Code, Codex, OpenCode | 2 | 1,113 tok |
| prakhargour10/utility-mcp-server For testing out mco capabilities,has three tools get time , get date , get current share p | 0 | Claude Code, GitHub Copilot | 2 | 340 tok |
| rijul170/qualys-mcp MCP server for full Qualys portal management — VMDR, Policy Compliance, WAS, Cloud Agent, | 0 | Claude Code, Codex, OpenCode | 2 | 658 tok |
| saagpatel/mcp-trust mcp-trust-synthetic-preview-git-202.vercel.app Neutral trust registry for MCP servers — check before you connect | 0 | Claude Code, Codex, OpenCode | 2 | 1,237 tok |
| shigechika/cloudarmor-mcp MCP server for Google Cloud Armor WAF log patrol — deny summaries, false-positive checks, | 0 | Claude Code, GitHub Copilot | 2 | 3,763 tok |
| shigechika/entraadm-mcp MCP server for Microsoft Entra ID sign-in/audit-log triage (read-only) | 0 | Claude Code, GitHub Copilot | 2 | 7,065 tok |
| shigechika/gwsadm-mcp MCP server for Google Workspace security auditing — login audit, external sharing, daily b | 0 | Claude Code, GitHub Copilot | 2 | 7,158 tok |
| shigechika/keycloak-mcp MCP server for the Keycloak Admin REST API — a strong ally for auth troubleshooting: inspe | 0 | Claude Code, GitHub Copilot | 2 | 3,303 tok |
| shigechika/zapi-mcp MCP server for the Zabbix API — daily brief, problems, hosts, items | 0 | Claude Code, GitHub Copilot | 2 | 4,079 tok |
| shuaicongxiaomai/agentguard | 0 | Claude Code | 1 | 871 tok |
| shakaran/symfony-agent-mcp Model Context Protocol server for Symfony applications — read-only introspection of routes | 0 | Claude Code | 1 | — |
| tonylchang/janus-mcp janus-mcp.ns47.com A local MCP server that gives LLMs safe, redacted access to Kubernetes - credentials never | 0 | Claude Code | 1 | 1,151 tok |
| xetenet/xete-mcp xete.net Encrypted, sovereign agent-to-agent messaging — an MCP server for xete | 0 | Claude Code | 7 | 816 tok |
| yolo-labz/wa Persistent WhatsApp daemon over Unix socket. SLSA L2 signed. Allowlist + rate limiter. Sub | 0 | Claude Code, Codex, OpenCode | 5 | 16,637 tok |
| trunk-io/mcp-server trunk.io Flaky test detection, root cause analysis, and fix suggestions for development teams. | 0 | Claude Code | 1 | 1,577 tok |
| theconcierge99-hue/gold-panel lounge-flax.vercel.app | 0 | Claude Code, Codex, OpenCode | 3 | 1,103 tok |
| MohitSahoo/MCPToolForWebVulnerabilities- | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |