2,004 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,510Claude Code6,601Data and AI3,691Backend and APIs3,489Languages3,402Planning3,208Git and workflow3,142Code review2,734Memory and context2,361Testing2,349DevOps and cloud2,296Research2,292
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| pingidentity/aic-mcp-server | 2 | Claude Code, Codex, Gemini CLI, OpenCode | 8 | 572 tok |
| gnix45/Wazuh_MCP_SERVER Gateway to intergrate wazuh with AI using the model context protocol (query realtime alert | 2 | Claude Code | 1 | 322 tok |
| scottcrosby-securebine/kali-mcp-server Kali Linux penetration testing MCP server with 42 security tools, optimized for ARM64 and | 2 | Claude Code | 1 | 2,151 tok |
| peterkarman1/SkillInquisitor Scan for malicious agent skills | 2 | Claude Code, Codex, OpenCode | 2 | 867 tok |
| green-code-initiative/ai-green-skills Green skills for driving IA agents | 2 | GitHub Copilot | 1 | 3,713 tok |
| mbarlow12/claude-jail A ZSH plugin to keep Claude Code behind bars | 2 | Claude Code | 1 | 1,532 tok |
| Kenmege/codex-claude-companion Codex-native Claude review plugin for read-only, evidence-cited Opus review lanes. | 2 | GitHub Copilot | 1 | 186 tok |
| maxwzg/claude-code-auto-approve A Claude Code Plugin that automatically approves Bash compound commands | 2 | Claude Code | 1 | 1,509 tok |
| PhenoML/phenoml-skills claude skills and plugin to use Phenoml! | 2 | Claude Code | 1 | — |
| almanax-ai/almanax-security-plugin Official Almanax plugin and skills repository for Claude Code and Codex, enabling security | 2 | Codex | 2 | — |
| kodroi/block A Claude Code plugin to protect files from unwanted modifications. | 2 | Claude Code | 1 | 535 tok |
| jsagir/mindrian-os-plugin MindrianOS -- AI innovation co-founder. 70+ commands, 66 MCP tools, 8 agents, 9 hooks. Opp | 2 | Claude Code | 3 | 4,676 tok |
| LucasRocha179/mcp-vault-reader | 2 | Cursor | 1 | 259 tok |
| axelspringer/snyk-mcp-rest MCP for Snyk REST API | 2 | GitHub Copilot | 1 | 1,859 tok |
| dhks77/gw-ssh | 2 | Claude Code | 3 | 1,950 tok |
| AetherCore-Dev/token-rugcheck | 2 | Claude Code | 1 | 738 tok |
| guirguispierre/spotifyMCP Cloudflare-hosted remote Spotify MCP server with OAuth and per-user token storage for AI a | 2 | Codex, OpenCode | 1 | 293 tok |
| psam-717/psamvault-mcp | 2 | Claude Code, Codex, OpenCode | 2 | 4,056 tok |
| borysttk/auth-vault-template 🧩 Template auth-vault — MCP credential management server, clean version to fork and adapt | 2 | Codex, OpenCode | 1 | 3,420 tok |
| AdamFerguson06/gmail-mcp Read-only Gmail investigation tool with MCP server support. Secure OAuth-based email acces | 2 | Claude Code | 1 | 821 tok |
| ahelme/mcp-claude-code-browser-tools An browser-tools mcp server for claude code | 2 | Claude Code | 39 | 3,612 tok |
| scott-pallas/firewalla-mcp | 2 | Claude Code | 1 | 1,232 tok |
| Wenri/siyuan-mcp OAuth authentication proxy for MCP servers using Cloudflare Access | 2 | Codex, OpenCode | 1 | 6,918 tok |
| velias/mcp-client-credentials-auth A local stdio MCP server that authenticates to remote OAuth-protected MCP servers using th | 2 | Codex, OpenCode | 1 | 5,079 tok |
| SarutobiSasuke8/obsidian-github-mcp Permissioned MCP gateway for AI agent proposals to Obsidian vaults stored on GitHub | 2 | Codex, OpenCode | 1 | 160 tok |
| Cylera/cylera-mcp-server The official MCP Server from Cylera. Brings context about device inventory, threats, risks | 2 | Claude Code | 1 | 1,171 tok |
| Huleinpylo/kali-agents-mcp | 2 | Claude Code, Codex, OpenCode | 9 | 3,290 tok |
| xtofuub/frida-mcp-server MCP server for controlling jailbroken iOS devices via Frida | 2 | Claude Code | 12 | — |
| thomaschristory/catalyst-sdwan-super-mcp thomaschristory.github.io FastMCP server for Cisco Catalyst SD-WAN Manager (vManage), driven by the official OpenAPI | 2 | Claude Code, Codex, OpenCode | 2 | 7,183 tok |
| wallieinformal201/pentest-mcp-server Integrate penetration testing tools and payloads into your workflow through the Model Cont | 2 | Claude Code, Codex, OpenCode | 2 | 9,962 tok |
| XTeam-Wing/Marshal-MCP Mcp services by marshal | 2 | GitHub Copilot | 1 | 44 tok |
| boecht/birre BiRRe (Bitsight Rating Retriever) MCP server provides access to BitSight security rating d | 2 | Claude Code, Codex, GitHub Copilot, OpenCode | 11 | 3,670 tok |
| aself101/mcp-secure-server A universal security-by-default framework for Model Context Protocol (MCP) servers that pr | 2 | Claude Code, Codex, OpenCode | 2 | 1,585 tok |
| WangChangxin0809/repo-agent-harness Lay the foundation that makes a repository teach coding agents how to work in it, then get | 2 | Claude Code | 6 | 975 tok |
| Reedtrullz/codex-antigravity-auth pypi.org Released local Responses API gateway bringing Google Antigravity Claude Opus/Sonnet, Gemin | 2 | Codex, OpenCode | 1 | 1,567 tok |
| piyushptiwari1/mcpkernel pypi.org The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint trackin | 2 | Claude Code, Codex, GitHub Copilot | 8 | 2,161 tok |
| Raed2180416/holt raed2180416.github.io See what coding agents changed across Git worktrees. Inspect duplicates, collisions and de | 2 | Claude Code, Codex, OpenCode | 5 | 1,120 tok |
| rushikeshmore/tor-mcp Every web request your LLM tool makes leaks your IP. tor-mcp routes them through Tor with | 2 | Claude Code | 1 | 1,132 tok |
| ambient-code/gps ambient-code.ai GPS — read-only MCP caching tier for org and engineering data | 2 | Claude Code | 4 | — |
| oaslananka/infra-lens-mcp TypeScript MCP server for infrastructure visibility, health checks, inventory inspection, | 2 | Claude Code, Codex, OpenCode | 4 | 482 tok |
| oaslananka/ssh-mcp-pro TypeScript MCP server for controlled SSH operations, remote host workflows, command execut | 2 | Claude Code, Codex, OpenCode | 4 | 1,363 tok |
| waanvar/samong samong.dev Local-first, Obsidian-compatible knowledge base. Your notes stay on your machine — full-te | 2 | Claude Code | 2 | 695 tok |
| YawLabs/npmjs-mcp npm registry MCP server — package intelligence, security audits, and dependency analysis f | 2 | Claude Code | 2 | — |
| bchoor/bws-mcp Remote MCP for Bitwarden Secrets Manager on Cloudflare Workers (list, get, put, delete) | 2 | Claude Code, Codex, OpenCode | 1 | 817 tok |
| zai-one/telegram-ads-mcp zai.one Unofficial MCP server for Telegram Ads (TON cabinet, Gram currency). For Claude, Cursor, a | 2 | Claude Code, Codex, OpenCode | 2 | 2,892 tok |
| purinzan/gx3-cli-mcp zenn.dev Trace a GX Works3 ladder without opening GX Works3 — read-only CLI + MCP server so anyone | 2 | Codex, OpenCode | 1 | 358 tok |
| astafford8488/agentaegis-mcp MCP server for cybersecurity operations — compliance, vuln scans, code security, threat in | 1 | Codex, OpenCode | 1 | 2,212 tok |
| bysonte/ssh-manager-mcp-server | 1 | Claude Code, Codex | 1 | 2,528 tok |
| oyusypenko/rob-mcp MCP server + x402-paid API for Robinhood Chain tokenized stocks — agent-callable premium/d | 1 | Claude Code, Codex, OpenCode | 12 | 6,813 tok |
| Johnny-Z13/proofslip proofslip.ai Ephemeral verification for agent workflows. 24-hour receipts your agents check before they | 1 | Claude Code, Codex | 4 | 1,608 tok |