2,004 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents7,510Claude Code6,601Data and AI3,691Backend and APIs3,489Languages3,402Planning3,208Git and workflow3,142Code review2,734Memory and context2,361Testing2,349DevOps and cloud2,296Research2,292
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Ailian0206/mcp-guardian Pre-call MCP tool policy gateway: allow / deny / redact / require_approval | 1 | Claude Code, Codex, OpenCode | 2 | 465 tok |
| sbamin/pgmcp read-only MCP server over a PostgreSQL database, tailored for cancer genomics datasets. | 1 | Claude Code | 1 | 409 tok |
| arojit/vulnpilot-mcp An MCP server that gives AI assistants the ability to check open-source packages for vulne | 1 | Claude Code, Codex | 1 | — |
| EmilSoleymani/go-planning-mcp go-planning-mcp.vercel.app Fully functional MCP server for Metrolinx GO Transit Open Data API, letting LLMs plan trip | 1 | Claude Code | 3 | 172 tok |
| badchars/living-off-the-land-lolbins-mcp-server npmjs.com Living off the Land LOLBins MCP Server — 59 composite tools for LOL binary intelligence ac | 1 | Claude Code | 1 | 414 tok |
| lujoai/Lujo-MCP AI debugging and tracing platform based on the MCP protocol, providing session management, | 1 | Codex, OpenCode | 1 | 1,341 tok |
| Ylyass/mcp-privilege-profiler Task-scoped least-privilege security proxy and Wazuh detection bridge for MCP-based AI age | 1 | Codex, OpenCode | 1 | 172 tok |
| nabheet/google-services-mcp MCP server for Google consumer services — Gmail, Calendar, Drive, Sheets, Docs, Slides, Yo | 1 | Codex, OpenCode | 1 | 1,393 tok |
| enchanter-ai/cyclops Catch the exfil, not the payload. Deterministic, model-free MCP proxy that blocks toxic ag | 1 | Claude Code | 1 | 897 tok |
| gugu9999gu/PC-CONTROL-MCP | 1 | Claude Code, Codex, GitHub Copilot, OpenCode | 9 | 2,466 tok |
| danveil/mcp-security-inspector Explainable static security analysis for MCP tool metadata, including tool-poisoning indic | 1 | Codex, OpenCode | 1 | 560 tok |
| hygef-v4/youtube-studio-mcp hygef-v4.github.io High-performance, zero-dependency MCP server connecting AI assistants (Claude, Cursor, Ant | 1 | Claude Code, Codex, OpenCode | 2 | 5,542 tok |
| jakub-lapinski/google-calendar-mcp-serviceaccount Minimal Google Calendar MCP server authenticated via a service account — no OAuth consent | 1 | Codex, OpenCode | 1 | 1,179 tok |
| avivancos/open-english OLCP - a portable MCP server that owns identity, curriculum and the learner model, while a | 1 | Claude Code, Codex, OpenCode | 8 | 2,863 tok |
| bch1212/queryshield Secure SQL proxy for AI agents — AST safety, per-agent RLS, audit log, MCP-native. | 1 | Claude Code | 1 | 745 tok |
| cyanheads/osv-advisory-mcp-server npmjs.com Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full ad | 1 | Claude Code, Codex, OpenCode | 2 | 10,830 tok |
| cyanheads/pentest-mcp-server npmjs.com Offline methodology engine and payload workshop for authorized penetration testing, CTF, s | 1 | Claude Code, Codex, OpenCode | 2 | 10,384 tok |
| linxule/vox-mcp Multi-model AI gateway — 8 providers plus local models, no system prompt injection. | 1 | Claude Code | 1 | 2,383 tok |
| cyanheads/nist-nvd-mcp-server npmjs.com Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST Nat | 1 | Claude Code, Codex, OpenCode | 2 | 12,890 tok |
| dpc00/sublime-mcp MCP server for Sublime Text 4 — lets Claude Code read and control a running ST instance | 1 | Claude Code | 1 | — |
| cyanheads/attack-surface-mcp-server npmjs.com Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS | 1 | Claude Code, Codex, OpenCode | 2 | 13,280 tok |
| cyanheads/nws-weather-mcp-server npmjs.com Real-time US weather data via the National Weather Service API. Forecasts, alerts, and obs | 1 | Claude Code, Codex, OpenCode | 2 | 11,574 tok |
| mclose/dns-mcp MCP server for DNS security analysis. DNSSEC validation, email auth (SPF/DKIM/DMARC/DANE/B | 1 | Claude Code | 1 | 3,034 tok |
| huuanh20/awesome-ai-agent-skills huuanh20.github.io 40+ production-ready AI skill packs for Claude Code, Cursor, Codex, Gemini CLI and any LLM | 1 | Claude Code | 8 | — |
| drmf-cz/claude-beacon Claude Code MCP channel plugin — pushes GitHub Actions CI/CD results into running Claude C | 1 | Claude Code, Codex, OpenCode | 5 | 5,239 tok |
| jeffaf/kivv kivv - Automated arXiv research paper discovery and AI-powered summarization system with M | 1 | Claude Code, GitHub Copilot | 2 | 1,212 tok |
| danduh/mcp-security | 1 | Claude Code | 1 | 418 tok |
| BhaumikAbhishek/oci-kafka-mcp-server AI-native MCP server for OCI Kafka — 42 tools, enterprise security, AI diagnostics | 1 | Claude Code | 1 | 1,084 tok |
| coltonbearden/carrel coltonbearden.github.io A library desk for your files — and your agents. Local file toolkit + Claude Code plugin m | 1 | Claude Code | 2 | 1,201 tok |
| aikadimsoy/kasa-mcp KASA MCP — a permission-brokered MCP server for agent memory. Local-first, encrypted at th | 1 | Claude Code, Codex, OpenCode | 3 | 1,870 tok |
| danielbaldwin47/resolve-mcp | 1 | Claude Code | 4 | 4,555 tok |
| KevinTrinhDev/gaze It sees the page, and it acts. Drive a real, already logged-in browser from the CLI or ove | 1 | Codex, OpenCode | 1 | 1,394 tok |
| MTLHARRISON/itglue-mcp | 0 | GitHub Copilot | 1 | 858 tok |
| CoreframeLabs/mcp-auth-template | 0 | Claude Code | 1 | 972 tok |
| NexgenSystemsMX/scopegate Ephemeral credentials & persistent MCP connections for coding agents — the agent never hol | 0 | Claude Code, Codex, OpenCode | 2 | 3,678 tok |
| ck3938700-ship-it/anjian-agent Local-first, authorization-gated web security assessment agent with MCP, Claude Code, loca | 0 | Claude Code | 1 | 1,058 tok |
| Greta221/cf-mcp-traffic A local stdio MCP server that exposes Cloudflare HTTP traffic and firewall analytics to Cl | 0 | Claude Code | 1 | — |
| nori1173-ops/timetracker-rx-mcp An unofficial MCP server for operating the TimeTracker RX REST API from AI tools such as C | 0 | Claude Code | 5 | — |
| TheNickSanchez/passkey-mcp Cross-platform secrets manager for AI coding assistants — stores secrets in system keychai | 0 | Codex, OpenCode | 1 | 2,282 tok |
| ayhammouda/obd-mcp-server Safety-first, read-only MCP server for vehicle diagnostics with simulator-first OBD-II, EL | 0 | Codex, OpenCode | 1 | 489 tok |
| dinglebear-ai/connexin Connexin — human-approved SSH shell and file transfer as an MCP App | 0 | Claude Code, Codex, Gemini CLI, OpenCode | 3 | 265 tok |
| omamishra8051-source/PenTest-MCP | 0 | Claude Code, Codex, OpenCode | 2 | 289 tok |
| Jackson-DM/msp-tools-mcp | 0 | Claude Code, Codex, OpenCode | 3 | 193 tok |
| rosselps/whyguard npmjs.com Reconstructs why code exists and stops humans or agents from erasing that protection by ac | 0 | Claude Code, Codex, Kiro, OpenCode | 6 | 4,673 tok |
| frli4797/crowdsec-mcp CrowdSec-focused MCP server for safe, auditable security operations. | 0 | Codex, OpenCode | 1 | 945 tok |
| Azzaraell/pgguard-mcp npmjs.com Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and | 0 | Claude Code | 5 | — |
| kappa9999/white-hat-agent Model-neutral cyber knowledge, orchestration, discovery, and MCP application layer for AI | 0 | Codex, OpenCode | 1 | 298 tok |
| whoismemas/burpsuite-for-ai-agent Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send find | 0 | Codex, OpenCode | 1 | 867 tok |
| saagpatel/shadow-mcp Discover and risk-grade the MCP servers present on this machine (local-first OWASP MCP09 s | 0 | Codex, OpenCode | 1 | 196 tok |
| WYRE-AI/salesbuildr-mcp conduit.wyre.ai MCP server for SalesBuildr — quotes, products, clients, and sales pipeline tools for AI as | 0 | GitHub Copilot | 1 | 858 tok |