2,143 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,356Claude Code6,837Data and AI3,595Backend and APIs3,545Git and workflow3,545Languages3,458Planning3,300Code review2,870Testing2,615DevOps and cloud2,441Writing and docs2,440Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| CSOAI-ORG/agent-audit-logger-mcp 🔌 Exposes Hash-chained HMAC-signed audit log over MCP — for A2A (agent-to-agent) calls. E | 0 | Cursor | 1 | 181 tok |
| CSOAI-ORG/agent-policy-enforcement-mcp 🔌 Exposes Per-agent-pair IAM for A2A. Define policies ('orchestrator may call billing onl | 0 | Cursor | 1 | 163 tok |
| CSOAI-ORG/ai-bom-mcp meok.ai 🔌 Exposes AI Bill of Materials over MCP — in CycloneDX + SPDX format. Required by EU AI A | 0 | Cursor | 1 | 164 tok |
| CSOAI-ORG/ai-incident-reporting-mcp meok.ai 🔌 Exposes Multi-regime AI incident classification + reporting over MCP — (EU AI Act Art 7 | 0 | Cursor | 1 | 156 tok |
| CSOAI-ORG/ai-self-audit-mcp meok.ai 🔌 Exposes AI self-audit over MCP — AI agents audit their own EU AI Act compliance in real | 0 | Cursor | 1 | 84 tok |
| CSOAI-ORG/cisa-kev-mcp meok.ai 🔌 Exposes CISA Known Exploited Vulnerabilities over MCP — BOD 22-01 + EPSS overlay. MIT | 0 | Cursor | 1 | 194 tok |
| CSOAI-ORG/code-reviewer-ai-mcp meok.ai 🔌 Exposes Code Reviewer over MCP — automation tooling for code reviewer. MIT. | 0 | Cursor | 1 | 79 tok |
| CSOAI-ORG/cra-compliance-mcp meok.ai 🌉 Maps EU Cyber Resilience Act (Reg 2024/2847) records into AI-governance evidence — CE m | 0 | Cursor | 1 | 187 tok |
| CSOAI-ORG/cybersecurity-ai-mcp meok.ai 🔌 Exposes cybersecurity over MCP — AI-powered automation tool. MIT. | 0 | Cursor | 1 | 75 tok |
| CSOAI-ORG/dataprivacy-ai-mcp meok.ai 🔌 Exposes dataprivacy over MCP — AI-powered automation tool. MIT. | 0 | Cursor | 1 | 93 tok |
| CSOAI-ORG/deepfake-detector-mcp 🔌 Lets an MCP client analyze images, videos, and audio for deepfake manipulation artifact | 0 | Cursor | 1 | 86 tok |
| CSOAI-ORG/dependency-updater-ai-mcp meok.ai 🔌 Exposes Dependency Updater over MCP — automation tooling for dependency updater. MIT. | 0 | Cursor | 1 | 78 tok |
| CSOAI-ORG/dora-nis2-crosswalk-mcp meok.ai 🔌 Exposes DORA × NIS2 crosswalk over MCP — for entities in scope for both regimes. 65% ob | 0 | Cursor | 1 | 199 tok |
| CSOAI-ORG/healthcare-ai-governance-mcp 🔌 Exposes Healthcare AI Governance. FDA SaMD classification, HIPAA compliance, WHO health | 0 | Cursor | 1 | 92 tok |
| CSOAI-ORG/jwt-ai-mcp meok.ai 🔌 Exposes JWT token operations — decode, validate, generate, inspect. (MEOK AI Labs) | 0 | Cursor | 1 | 74 tok |
| CSOAI-ORG/mitre-atlas-mcp meok.ai 🔌 Exposes MITRE ATLAS (adversarial AI) threat landscape over MCP — MIT | 0 | Cursor | 1 | 187 tok |
| CSOAI-ORG/nis2-compliance-mcp meok.ai 🔌 Exposes NIS2 (Directive EU 2022/2555) Article 21+23 compliance over MCP — Entity classi | 0 | Cursor | 1 | 199 tok |
| CSOAI-ORG/nist-rmf-ai-mcp 🔌 Exposes NIST AI Risk Management Framework over MCP — MAP, MEASURE, MANAGE, GOVERN funct | 0 | Cursor | 1 | 97 tok |
| CSOAI-ORG/otp-ai-mcp meok.ai 🔌 Exposes Generate and verify TOTP/HOTP codes. (MEOK AI Labs) | 0 | Cursor | 1 | 70 tok |
| CSOAI-ORG/password-ai-mcp meok.ai 🔌 Exposes Password manager over MCP — generate, strength-check, breach monitoring, entrop | 0 | Cursor | 1 | 69 tok |
| CSOAI-ORG/pci-dss-mcp 🔌 Exposes PCI DSS 4.0 payment card compliance over MCP — 12 requirements assessment, card | 0 | Cursor | 1 | 84 tok |
| CSOAI-ORG/risk-assessment-ai-mcp meok.ai 🔌 Exposes AI risk assessment over MCP — NIST AI RMF-aligned risk register with scoring, t | 0 | Cursor | 1 | 85 tok |
| CSOAI-ORG/scam-detector-mcp 🔌 Exposes By [MEOK AI Labs](https://meok.ai) | An over MCP — for scam and fraud detection | 0 | Cursor | 1 | 76 tok |
| CSOAI-ORG/soc2-compliance-ai-mcp meok.ai 🔌 Exposes SOC 2 Type II compliance over MCP — Trust Service Criteria audit, access review | 0 | Cursor | 1 | 93 tok |
| CallMarcus/security-scorecard-mcp Talk to the SecurityScorecard API in natural language from Claude and other MCP clients. C | 0 | Claude Code | 1 | 2,327 tok |
| CSOAI-ORG/security-scanner-ai-mcp meok.ai 🔌 Exposes Security scanning over MCP — vulnerability assessment, SAST, DAST, dependency c | 0 | Cursor | 1 | 85 tok |
| DrBaher/sign-cli cli.drbaher.com Agent-first e-signature CLI. Fully-offline PAdES signer (PKCS#7) — no signup — or hosted p | 0 | Codex, OpenCode | 1 | 1,179 tok |
| Nano-Nimbus/locus | 0 | Claude Code, GitHub Copilot | 7 | 2,120 tok |
| Misterio070/scanpay repository-nil-camcorder-divx.trycloudflare.com Deterministic code security scanner with x402 v2 micropayments. Scans Python and JS/TS for | 0 | Codex, OpenCode | 1 | 739 tok |
| WYRE-AI/blumira-mcp conduit.wyre.ai MCP server for Blumira SIEM integration | 0 | GitHub Copilot | 1 | 292 tok |
| WYRE-AI/freshdesk-mcp MCP server for Freshdesk — tickets, contacts, companies, agents, groups, knowledge base, S | 0 | GitHub Copilot | 1 | 554 tok |
| WYRE-AI/liongard-mcp conduit.wyre.ai MCP server for Liongard — inspector data, environment metrics, and configuration detection | 0 | GitHub Copilot | 1 | 858 tok |
| antonillos/safeselect antonillos.github.io Read-only PostgreSQL & MongoDB access for coding agents. Local, fail-closed MCP enforcemen | 0 | Codex, OpenCode | 1 | 723 tok |
| bch1212/agentvault agentvault-api-production.up.railway.app AI-native credential vault for autonomous agents — Fernet-encrypted API keys, per-agent av | 0 | Claude Code | 1 | 885 tok |
| cchurctrip/verity-mcp MCP server for Verity skills. bearer-auth proxy | 0 | Claude Code | 1 | 1,279 tok |
| chrischall/myhotlunchbox-mcp MCP server for My Hot Lunchbox — school lunch calendar, ordering, and payments for a paren | 0 | Claude Code, Codex, OpenCode | 2 | 1,894 tok |
| civdotiq/civ.iq civdotiq.org Civic intelligence from government data, organized for public use. Open source. | 0 | Claude Code | 4 | 987 tok |
| cristianmoroaica/bountyverdict cristianmoroaica.github.io Seven x402 decision APIs and installable agent skills for GitHub bounties, CI, skill secur | 0 | Codex, OpenCode | 1 | 324 tok |
| davidmosiah/delx-agent-utilities ontology.delx.ai Open-source stateless utility tools for AI agents: URL, DNS, TLS, OpenAPI, x402, JWT, CSV/ | 0 | Codex, OpenCode | 1 | 248 tok |
| dir-ai/repotector ⬡ The repo guardian AI agents handshake with before they touch your code. Handshake-first | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 648 tok |
| elberacasa/umbra umbra-badge.umbrabadge.workers.dev The trust score for AI-generated code. One command verifies what your coding agent shipped | 0 | Claude Code, Codex, OpenCode | 1 | 933 tok |
| ertugrulakben/dep-oracle npmjs.com Predictive dependency security engine. Trust Scores for npm/Python packages. Detects zombi | 0 | Claude Code | 1 | 435 tok |
| gopalrajsuresh/covalent-bond npmjs.com Peer-to-peer, end-to-end-encrypted collaboration channel for AI coding agents over MCP. Th | 0 | Claude Code | 4 | — |
| laser54/telegram-managed-bot-factory Secure self-hosted MCP control plane for owner-confirmed Telegram bot provisioning. | 0 | Codex, OpenCode | 1 | 373 tok |
| malkreide/bag-health-mcp MCP server for Swiss Federal Office of Public Health (BAG) — infectious disease surveillan | 0 | Claude Code | 3 | 4,318 tok |
| michaelcolenso/babynames Fun with the Social Security Administration's baby name data | 0 | Claude Code, Codex, OpenCode | 2 | 3,364 tok |
| partymola/bosch-flow-mcp modelcontextprotocol.io MCP server for the Bosch eBike Flow API with OAuth, local cache, and battery trend analysi | 0 | Claude Code, Codex, OpenCode | 2 | 5,122 tok |
| pduggusa/dredd-mcp analytics.dugganusa.com Dredd: pre-flight verdict on MCP servers and their dependency trees. Blocks known-compromi | 0 | Claude Code, Codex, OpenCode | 2 | 1,113 tok |
| prakhargour10/utility-mcp-server For testing out mco capabilities,has three tools get time , get date , get current share p | 0 | Claude Code, GitHub Copilot | 2 | 340 tok |
| professor2k8/agent-security-lens npmjs.com Safe-install and trust-check MCP for autonomous agents before they install MCPs, Skills or | 0 | Codex, OpenCode | 1 | 489 tok |