2,143 projects whose own agent configuration covers security. These are not mods to install — they are how the maintainers of these repositories tell an agent what to do, and what to avoid.
All projects Building agents8,356Claude Code6,837Data and AI3,595Backend and APIs3,545Git and workflow3,545Languages3,458Planning3,300Code review2,870Testing2,615DevOps and cloud2,441Writing and docs2,440Memory and context2,373
Any agent Claude CodeCodexOpenCodeGitHub CopilotGemini CLICursorWindsurfKiro
| Project | Stars | Configures | Files | Always loaded |
|---|---|---|---|---|
| Simoon896/ai-detection-engineering-platform MCP server exposing Wazuh SIEM (manager + indexer) operations to AI clients, with false-po | 0 | Codex, Cursor, OpenCode | 3 | 390 tok |
| foursecondfivefour/aether-linux-mcp-server AETHER_02 — Full-spectrum Linux MCP Server on Rust. 12 tools, 99.9% system management cove | 0 | Claude Code, Codex, GitHub Copilot | 2 | 212 tok |
| debaditya-mohankudo/splunk-intelligence On-device Splunk investigation stack — deterministic Polars detectors exposed as MCP tools | 0 | Claude Code | 1 | 582 tok |
| MaxenceBdu/paycore-mcp-agent-tp | 0 | Claude Code, Codex | 2 | — |
| sandeep-alluru/humanproof pypi.org Human-in-the-loop checkpoints and approval gates for AI agents | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 7 | 648 tok |
| Rodriguespn/e2b-mcp-code-mode Code-mode MCP server for e2b: agents write JavaScript that runs inside an e2b sandbox and | 0 | Claude Code | 2 | — |
| M-Samuel/kali-local-agent Kali MCP server and agent | 0 | Claude Code | 1 | — |
| devopsfixes-com/wazuh-mcp-server | 0 | Claude Code | 1 | 3,612 tok |
| DrDustinEdwards/capsid-mcp Control plane for AI agents on a portfolio of repos: memory with provenance, scoped permis | 0 | Claude Code | 4 | 2,409 tok |
| calvarado2004/secure-harness-mcp | 0 | Codex, OpenCode | 1 | 149 tok |
| gmhelmold/HuGR_Tools 630-tool MCP fleet — 37 Cloudflare Workers on one frozen kernel. BYOK, fail-closed auth, t | 0 | Claude Code | 1 | 454 tok |
| jbctechsolutions/mcp-mercury Read-only MCP server for Mercury business banking (accounts, transactions, statements) | 0 | Claude Code | 1 | 216 tok |
| dschnurbusch/mattergate Self-hostable MCP permissions gateway for legal-tech systems. | 0 | Codex, OpenCode | 1 | 788 tok |
| Moonwuk/MoonMcp | 0 | Claude Code, Codex | 8 | — |
| ciaran-finnegan/cortex-xsiam-mcp-gateway Secure MCP gateway for governed Cortex XSIAM log search and security operations | 0 | Claude Code, Codex, GitHub Copilot, OpenCode | 4 | 477 tok |
| monahand1023/corpus pypi.org Single-user RAG framework for personal archives. Local-first, MCP-native. | 0 | Claude Code | 1 | 499 tok |
| asarlashmit/mcp-connect Codex-style Kali Linux MCP server with 126 structured tools, explicit execution timing, se | 0 | Codex, OpenCode | 1 | 345 tok |
| BluePandaNYC/tradingview-mcp-jackson- | 0 | Claude Code | 5 | 1,873 tok |
| meg4tech/mcp-hayabusa MCP server wrapping Hayabusa for Windows EVTX threat-hunting analysis | 0 | Claude Code | 3 | 1,633 tok |
| Pirate-Kitty/hayabusa-mcp-security-scanner An MCP server that connects Claude to Hayabusa for EVTX threat detection, severity filteri | 0 | Claude Code | 9 | 302 tok |
| skyxtools/bountyproof-mcp | 0 | Claude Code, OpenCode | 1 | — |
| fso-datawarrior/lab-mcp-identity-server Lab 3: Demonstration MCP server for scoped Okta identity operations with out-of-band human | 0 | Codex, OpenCode | 1 | 196 tok |
| mcnamee/elvanto-mcp MCP Server for Elvanto | 0 | Claude Code | 3 | 189 tok |
| TregardLabs-Dana/mcp-hayabusa MCP server wrapping Hayabusa for EVTX analysis | 0 | Claude Code | 3 | 3,147 tok |
| SlugThugLabs/slugaudit slugthuglabs.dev Searchable, trustworthy codebase evidence over MCP | 0 | Codex, OpenCode | 1 | 7,327 tok |
| baobao26/mcp-hayabusa MCP server that wraps the Hayabusa CLI for analyzing Windows EVTX event logs | 0 | Claude Code | 2 | 5,356 tok |
| thiskevinwang/mcp-and-oidc | 0 | Codex, OpenCode | 1 | 207 tok |
| msadigo/mcp-hayabusa MCP server that wraps Hayabusa for Windows event log (EVTX) forensics scanning | 0 | Claude Code | 3 | 2,304 tok |
| ShadowwMaliqua/vibe-audit-security Security scanner for vibe-coded projects: local CLI and MCP server that catch hardcoded se | 0 | Claude Code | 1 | 1,980 tok |
| gabrielion/OPNSenseMCP MCP server for OPNsense firewalls — registry-driven REST coverage, fail-closed production | 0 | Claude Code, Codex, OpenCode | 2 | 1,465 tok |
| charlieNearform/testing-mcp An MCP service to consolidate test running and coverage collection to reduce AI churn runn | 0 | Claude Code | 3 | 2,255 tok |
| MaharMuavia/toolbastion maharmuavia.github.io A zero-trust security gateway that inspects, approves, and audits MCP tool calls before ex | 0 | Codex, OpenCode | 1 | 373 tok |
| TigerToker/mdi-mcp-server MCP server for Microsoft Defender for Identity — query MDI data and generate HTML reports | 0 | GitHub Copilot | 1 | 395 tok |
| SudarshanKomar/pulse MCP-enabled network emulation platform using Mininet and FRRouting for realistic protocol | 0 | Codex, OpenCode | 1 | 3,069 tok |
| Brooks-Sem/mcpserver | 0 | GitHub Copilot | 1 | 173 tok |
| dhaanish597/Security-Hardened-MCP-Server | 0 | Claude Code | 1 | 3,930 tok |
| pooyanmajd/pmtechdev-mcp-plugins Local-first, safety-focused MCP servers, shared tooling, and a public Codex plugin marketp | 0 | Codex, OpenCode | 1 | 326 tok |
| joenukem/open-automation-platform-mcp MCP server exposing open automation platform tools to agents, gated by gateway auth, RBAC, | 0 | Codex, OpenCode | 1 | 402 tok |
| shivankj11/gdrive-mcp A read/write MCP for Google Drive, Docs & Sheets, built for agents: bounded/paged reads, s | 0 | Codex, OpenCode | 1 | 195 tok |
| sarahsl-prog/mcp-hayabusa | 0 | Claude Code | 4 | 950 tok |
| abekek/personal-intelligence-system Conversation-first personal knowledge ledger: event-sourced capture of Claude Code + claud | 0 | Claude Code | 1 | 387 tok |
| isityael/apple-mail-mcp MCP server for local Apple Mail automation: read, search, compose, organize, and analyze m | 0 | Claude Code | 7 | 1,077 tok |
| joheiss/cloudflare-remote-mcp-server-with-oauth Cloudflare based MCP Server with OAuth | 0 | Codex, OpenCode | 1 | 293 tok |
| selvin-paul-raj/Linkedin-Alpic-Mcp Production-ready LinkedIn MCP Server for ChatGPT & Claude with Composio integration, OAuth | 0 | Claude Code | 1 | 482 tok |
| sitelint/auditor-mcp | 0 | Codex, OpenCode | 1 | 2,758 tok |
| iamsecure1920/Cordon-AI Agentic VAPT orchestrator. Drives ~60 open-source security engines through a custom MCP se | 0 | Claude Code | 1 | 2,150 tok |
| Vibewatch-io/vibewatch-mcp Connect any MCP client to your Vibewatch community-sentiment data — stdio bridge for Buzz | 0 | Claude Code | 2 | — |
| SimLiverse/simliverse-mcp | 0 | Codex, OpenCode | 1 | 1,323 tok |
| Mohith535/nitrowatch-billing-demo Intentionally ungoverned MCP server - the demo target for NitroWatch | 0 | Claude Code, Codex | 5 | — |
| LesterAJohn/forcepointDLP-mcp | 0 | Claude Code | 1 | — |